Microsoft March 2026 Patch Tuesday Addresses 2 Zero-Days, 79 Vulnerabilities

In March 2026, Microsoft released its Patch Tuesday updates, addressing a total of 79 vulnerabilities, including two critical zero-day threats. These vulnerabilities span across various Microsoft products and services, highlighting the need for timely updates to ensure security.

Key Highlights from the March 2026 Patch Tuesday

The updates include various vulnerabilities, categorized by product:

• .NET: Two important vulnerabilities were reported, including an elevation of privilege and a denial of service.
• Active Directory Domain Services: An important elevation of privilege vulnerability was identified.
• Azure Compute Gallery: Three critical vulnerabilities related to elevation of privilege and information disclosure were patched.
• Microsoft Office: Multiple remote code execution vulnerabilities were addressed, with several marked as critical.
• Windows components: Numerous vulnerabilities affecting various Windows services, including the SMB server and Routing and Remote Access Service, were also fixed.

A Breakdown of Critical Vulnerabilities

The two significant zero-day vulnerabilities are particularly noteworthy:

• CVE-2026-26131: This is a critical elevation of privilege in the .NET framework.
• CVE-2026-26127: Another critical flaw, this denial of service vulnerability could allow attackers to disrupt service availability.

Vulnerabilities in Microsoft Office

Microsoft Office faced substantial threats as well, with several critical remote code execution vulnerabilities:

• CVE-2026-26110: One of the critical vulnerabilities, this flaw could lead to arbitrary code execution.
• CVE-2026-26144: Information disclosure in Microsoft Excel was also marked critical.

Windows Security Risks

Moreover, vulnerabilities affecting Windows components could allow for various attacks, including:

• Elevation of privilege in the Windows kernel, impacting security integrity.
• Remote code execution vulnerabilities associated with the Windows Print Spooler and SMB server.

These updates are crucial for maintaining system security and require immediate action by users and system administrators. Installing the latest patches can significantly mitigate the risks posed by these vulnerabilities.

For further information and the full list of vulnerabilities addressed, users can visit the official Microsoft security portal.