CRITICAL 9.8 Microsoft

CVE-2021-26894

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Security Update 2021-Mar: Windows DNS Server Remote Code Execution Vulnerability

Affected Products

Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server, version 1909 (Server Core installation)
Windows Server, version 2004 (Server Core installation)
Windows Server, version 20H2 (Server Core Installation)
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2008 for 32-bit Systems Service Pack 2

References

Published: 2021-03-09 · Source: Microsoft · Feed updated: 2026-08-20

This critical severity vulnerability with a CVSS score of 9.8 was published on 2021-03-09 via Microsoft. EPSS score: 6.8% (top 7% of all CVEs by exploitation probability). Affected: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server, version 1909 (Server Core installation) and 5 more.

Risk Timeline

CVE Disclosed2021-03-09 · 1989 days ago

Remediation Resources

Official Advisory

msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26894

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2021-26894

Related Vulnerabilities

CVE	Title	Severity	CVSS
CVE-2021-26867	Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL	9.9
CVE-2026-57092	Microsoft Windows VMSwitch Elevation of Privilege Vulnerability	CRITICAL	9.9
CVE-2021-26877	Windows DNS Server Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2021-26893	Windows DNS Server Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2021-26895	Windows DNS Server Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2021-26897	Windows DNS Server Remote Code Execution Vulnerability	CRITICAL	9.8

vulnfeed aggregates 11644 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.