CVE-2021-26443

CRITICAL

Microsoft Windows RCE via Virtual Machine Bus

Title source: llm

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

CVSS v3 9.0

EPSS 0.0154

EPSS Percentile 72.3%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Status published

Products (9)

microsoft/windows_10 20h2

microsoft/windows_10 21h1

microsoft/windows_10 1809

microsoft/windows_10 1909

microsoft/windows_11

microsoft/windows_server_2016 20h2

microsoft/windows_server_2016 2004

microsoft/windows_server_2019

microsoft/windows_server_2022

Published Nov 10, 2021

Tracked Since Feb 18, 2026