Vulnerabilitycritical
Microsoft Patch Tuesday, March 2026 Edition
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-21262 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network | 8.8 | 2% | ||
| CVE-2026-21536 | Microsoft Devices Pricing Program Remote Code Execution Vulnerability | 9.8 | 2% | ||
CVE-2026-24294+3 related CVEs | Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally | 7.8 | 5% | ||
CVE-2026-26113+1 related CVE | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally | 7.8 | <1% | ||
| CVE-2026-26127 | Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network | 7.5 | 2% |
From the original article
3 min read at krebsonsecurity.comMicrosoft Corp. today pushed security updates to fix at least 77 vulnerabilities in its Windows operating systems and other software. There are no pressing “zero-day” flaws this month (compared to February’s five zero-day treat), but as usual some patches may deserve more rapid attention from organizations using Windows.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.