Microsoft patches 80+ vulnerabilities, six flagged as "more likely" to be exploited
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-21262 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network | 8.8 | 2% | ||
| CVE-2026-23669 | Use after free in RPC Runtime allows an authorized attacker to execute code over a network | 8.8 group max | <1% | ||
CVE-2026-26113+2 related CVEs | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally | 7.8 group max | <1% | ||
| CVE-2026-26123 | Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose information locally | 5.5 | <1% | ||
| CVE-2026-26127 | Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network | 7.5 | 2% |
From the original article
3 min read at helpnetsecurity.com
On March 2026 Patch Tuesday, Microsoft addressed 80+ vulnerabilities affecting its software and cloud services. Of these, two were publicly disclosed, but not actively exploited. The two publicly disclosed flaws are CVE-2026-21262 , a vulnerability in SQL Server that may allow attackers to gain SQLAdmin privileges, and CVE-2026-26127 , a .
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.