CVE-2021-26877— Windows DNS Server Remote Code Execution Vulnerability

Quick assessment

Copy summary Copy citation

Affected

Microsoft Windows Server 2008 R2 Service Pack 1

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows DNS是美国微软（Microsoft）公司的一个域名解析服务。域名系统（DNS）是包含TCP / IP的行业标准协议套件之一，并且DNS客户端和DNS服务器共同为计算机和用户提供计算机名称到IP地址的映射名称解析服务。 Microsoft Windows DNS 服务器存在代码注入漏洞。以下产品和版本受到影响：Windows Server, version 20H2 (Server Core Installation),Windows Server 2019,Windo

CVE-2021-26877 affects Microsoft Windows Server 2008 R2 Service Pack 1. High exploitation probability; assess promptly. Microsoft Windows DNS是美国微软（Microsoft）公司的一个域名解析服务。域名系统（DNS）是包含TCP / IP的行业标准协议套件之一，并且DNS客户端和DNS服务器共同为计算机和用户提供计算机名称到IP地址的映射名称解析服务。 Microsoft Windows DNS 服务器存在代码注入漏洞。以下产品和版本受到影响：Window CVE-2021-26877 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2021-26877

I. Basic Information for CVE-2021-26877

Affected Products

II. Public POCs for CVE-2021-26877

III. Intelligence Information for CVE-2021-26877

Vendor Advisories for CVE-2021-26877 (2)

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26877 x_refsource_MISC
• 🔗 CVE-2021-26877 - Security Update Guide - Microsoft - Windows DNS Server Remote Code Execution Vulnerability vendor-advisory patch

• https://www.cve.org/CVERecord?id=CVE-2021-26877

Same Patch Batch · Microsoft · 2021-03-11 · 80 CVEs total

Showing top 20 of 80 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2021-26877