Monthly Patch

March 2021 Monthly Patch Release

10 March 2021

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

The vulnerabilities that have been classified as Critical in severity are listed in the table below.

For the full list of security patches released by Microsoft, please refer to

https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2021-Mar

Critical vulnerabilities

CVE Number	CVE Name	Base Score	Reference
CVE-2021-26867	Windows Hyper-V Remote Code Execution Vulnerability	9.9	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26867
CVE-2021-26897	Windows DNS Server Remote Code Execution Vulnerability	9.8	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26897
CVE-2021-27080	Azure Sphere Unsigned Code Execution Vulnerability	9.3	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27080
CVE-2021-26855	Microsoft Exchange Server Remote Code Execution Vulnerability	9.1	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26855
CVE-2021-26412	Microsoft Exchange Server Remote Code Execution Vulnerability	9.1	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26412
CVE-2021-26876	OpenType Font Parsing Remote Code Execution Vulnerability	8.8	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26876
CVE-2021-26411	Internet Explorer Memory Corruption Vulnerability	8.8	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411
CVE-2021-21300	Git for Visual Studio Remote Code Execution Vulnerability	8.8	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-21300
CVE-2021-27065	Microsoft Exchange Server Remote Code Execution Vulnerability	7.8	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27065
CVE-2021-26857	Microsoft Exchange Server Remote Code Execution Vulnerability	7.8	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26857
CVE-2021-27061	HEVC Video Extensions Remote Code Execution Vulnerability	7.8	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27061
CVE-2021-26902	HEVC Video Extensions Remote Code Execution Vulnerability	7.8	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26902
CVE-2021-24089	HEVC Video Extensions Remote Code Execution Vulnerability	7.8	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24089
CVE-2021-27074	Azure Sphere Unsigned Code Execution Vulnerability	6.2	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27074

Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

March 2021 Monthly Patch Release

Reach us