Vulnerabilitycritical
Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-21262 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network | 8.8 | 2% | ||
| CVE-2026-21536 | Microsoft Devices Pricing Program Remote Code Execution Vulnerability | 9.8 | 2% | ||
| CVE-2026-25187 | Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally | 7.8 | 3% | ||
| CVE-2026-26118 | Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network | 8.8 | <1% | ||
| CVE-2026-26127 | Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network | 7.5 | 2% | ||
| CVE-2026-26144 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Excel allows an unauthorized attacker to disclose… | 4.7 | 1% |
From the original article
3 min read at thehackernews.com
Microsoft on Tuesday released patches for a set of 84 new security vulnerabilities affecting various software components, including two that have been listed as publicly known. Of these, eight are rated Critical, and 76 are rated Important in severity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.