Patch Tuesday, March 2021
Microsoft's monthly security release, Tuesday, March 9, 2021. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
3 CVEs · 0 critical · 3 exploited · 1 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
3 CVEs · 0 critical · 3 exploited · 1 with public exploit code
- 8.8HighMar 11, 2021Microsoft Internet Explorer Memory corruptionCVE-2021-26411Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.Exploited82% likelyExploit code
- 8.8HighMar 11, 2021Microsoft Internet Explorer Code / command injectionCVE-2021-27085Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.Exploited5.4% likely
- 7.6HighMar 11, 2021Microsoft Office Code / command injectionCVE-2021-27059Microsoft Office contains an unspecified vulnerability that allows for remote code execution.Exploited6.1% likely
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.