The remote Windows host is missing security update 5000851 or cumulative update 5000841. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2021-26861,     CVE-2021-26877, CVE-2021-26881, CVE-2021-26893,     CVE-2021-26894, CVE-2021-26895, CVE-2021-26897)

  - An information disclosure vulnerability. An attacker can     exploit this to disclose potentially sensitive     information. (CVE-2021-24107, CVE-2021-26869)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2021-1640, CVE-2021-26862, CVE-2021-26872,     CVE-2021-26873, CVE-2021-26875, CVE-2021-26878,     CVE-2021-26882, CVE-2021-26898, CVE-2021-26899,     CVE-2021-26901, CVE-2021-27077)

  - An memory corruption vulnerability exists. An attacker     can exploit this to corrupt the memory and cause     unexpected behaviors within the system/application.
    (CVE-2021-26411)

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2021-26896,     CVE-2021-27063)

Detections

Analytics

KB5000851: Windows 7 and Windows Server 2008 R2 March 2021 Security Update

high Nessus Plugin ID 147231

Version 1.12

Version 1.11

Version 1.10

Version 1.12 Oct 31, 2025, 8:07 PM CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2021-26411") Plugin Feed: 202510312007
Version 1.11 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.10 Dec 6, 2022, 6:53 AM Reference Plugin Feed: 202212060653