{"id":11252,"date":"2026-03-11T04:03:39","date_gmt":"2026-03-11T04:03:39","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/03\/11\/32782\/"},"modified":"2026-03-11T04:03:39","modified_gmt":"2026-03-11T04:03:39","slug":"32782","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/03\/11\/32782\/","title":{"rendered":"Microsoft Patch Tuesday March 2026, (Tue, Mar 10th)"},"content":{"rendered":"

Microsoft Patch Tuesday March 2026, (Tue, Mar 10th)
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

Microsoft today released patches for 93 vulnerabilities, including 9 vulnerabilities in Chromium affecting Microsoft Edge. 8 of the vulnerabilities are rated critical. 2 were disclosed prior to today but have not yet been exploited. This update addresses no already-exploited vulnerabilities.<\/p>\n

Disclose vulnerabilities:<\/p>\n

CVE-2026-26127<\/strong>: A denial of service vulnerability in .Net. Microsoft considers exploitation unlikely. The issue arises from an out-of-bounds read and can be exploited across the network. No authentication is required.<\/p>\n

CVE-2026-21262<\/strong>: A privilege escalation in SQL Server. An authenticated user may be able to escalate privileges to sysadmin.<\/p>\n

Critical Vulnerabilities:<\/p>\n

CVE-2026-21536<\/strong>: The vulnerability in Microsoft’s Devices Pricing Program allows remote code execution. But this product is only offered as a cloud service, and Microsoft has already deployed the patch. Microsoft credits the AI vulnerability scanning platform XBOW with discovering this vulnerability.<\/p>\n

CVE-2026-26125<\/strong>: Similar to the above vulnerability, this elevation-of-privilege vulnerability in Microsoft’s Payment Orchestrator service has been mitigated by Microsoft.<\/p>\n

CVE-2026-26113, CVE-2026-26110, CVE-2026-26144<\/strong>: These vulnerabilities affect Excel and Office.<\/p>\n

CVE-2026-23651, CVE-2026-26124, CVE-2026-26122<\/strong>: These vulnerabilities affect Microsoft ACI Confidential Containers. No customer action is required. Microsoft already patched these issues.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Description<\/th>\n<\/tr>\n
CVE<\/th>\nDisclosed<\/th>\nExploited<\/th>\nExploitability (old versions)<\/th>\ncurrent version<\/th>\nSeverity<\/th>\nCVSS Base (AVG)<\/th>\nCVSS Temporal (AVG)<\/th>\n<\/tr>\n<\/thead>\n
.NET Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26127%%<\/td>\nYes<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
.NET Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26131%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
ASP.NET Core Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26130%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Active Directory Domain Services Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25177%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Arc Enabled Servers – Azure Connected Machine Agent Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26117%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Azure IOT Explorer Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26121%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Azure IoT Explorer Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23664%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
%%cve:2026-23661%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
%%cve:2026-23662%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Azure MCP Server Tools Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26118%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Broadcast DVR Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23667%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Chromium: CVE-2026-3536 Integer overflow in ANGLE<\/td>\n<\/tr>\n
%%cve:2026-3536%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3538 Integer overflow in Skia<\/td>\n<\/tr>\n
%%cve:2026-3538%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3539 Object lifecycle issue in DevTools<\/td>\n<\/tr>\n
%%cve:2026-3539%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3540 Inappropriate implementation in WebAudio<\/td>\n<\/tr>\n
%%cve:2026-3540%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3541 Inappropriate implementation in CSS<\/td>\n<\/tr>\n
%%cve:2026-3541%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3542 Inappropriate implementation in WebAssembly<\/td>\n<\/tr>\n
%%cve:2026-3542%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3543 Inappropriate implementation in V8<\/td>\n<\/tr>\n
%%cve:2026-3543%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3544 Heap buffer overflow in WebCodecs<\/td>\n<\/tr>\n
%%cve:2026-3544%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3545 Insufficient data validation in Navigation<\/td>\n<\/tr>\n
%%cve:2026-3545%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
GDI Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25190%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
GDI+ Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25181%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable<\/td>\n<\/tr>\n
%%cve:2026-26030%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n9.9<\/td>\n8.6<\/td>\n<\/tr>\n
GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23654%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Hybrid Worker Extension (Arc?enabled Windows VMs) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26141%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23665%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
MapUrlToZone Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23674%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23651%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n6.7<\/td>\n6.0<\/td>\n<\/tr>\n
%%cve:2026-26124%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n6.7<\/td>\n6.0<\/td>\n<\/tr>\n
Microsoft ACI Confidential Containers Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26122%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Microsoft Authenticator Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26123%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26148%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.1<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft Brokering File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25167%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.4<\/td>\n6.4<\/td>\n<\/tr>\n
Microsoft Devices Pricing Program Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-21536%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.8<\/td>\n8.5<\/td>\n<\/tr>\n
Microsoft Excel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26144%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Microsoft Excel Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26112%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26107%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26108%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26109%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft Office Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26134%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Office Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26113%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
%%cve:2026-26110%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft SharePoint Server Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26114%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-26106%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Microsoft SharePoint Server Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26105%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.1<\/td>\n7.1<\/td>\n<\/tr>\n
Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24283%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Payment Orchestrator Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26125%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.6<\/td>\n7.7<\/td>\n<\/tr>\n
Performance Counters for Windows Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25165%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Push message Routing Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24282%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
SQL Server Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-21262%%<\/td>\nYes<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-26115%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-26116%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-20967%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Win32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24285%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24291%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25186%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23660%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24293%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-25176%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-25178%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-25179%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows App Installer Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23656%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Windows Authentication Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25171%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23671%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24292%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows DWM Core Library Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25189%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Device Association Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24295%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-24296%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25174%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Graphics Component Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25168%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.2<\/td>\n5.4<\/td>\n<\/tr>\n
%%cve:2026-25169%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.2<\/td>\n5.4<\/td>\n<\/tr>\n
Windows Graphics Component Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23668%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Graphics Component Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25180%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Windows Hyper-V Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25170%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Kerberos Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24297%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Windows Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24287%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-24289%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26132%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Mobile Broadband Driver Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24288%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.8<\/td>\n5.9<\/td>\n<\/tr>\n
Windows NTFS Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25175%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Print Spooler Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23669%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24290%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23673%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25172%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-25173%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.0<\/td>\n7.0<\/td>\n<\/tr>\n
%%cve:2026-26111%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows SMB Server Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24294%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26128%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Shell Link Processing Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25185%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.3<\/td>\n4.6<\/td>\n<\/tr>\n
Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25166%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Telephony Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25188%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23672%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Winlogon Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25187%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

—
\nJohannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu<\/a>
\nTwitter<\/a>|<\/p>\n

(c) SANS Internet Storm Center. https:\/\/isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.<\/p><\/div>\n

\t

\n
<\/BR><\/p>\n

\t

\n
<\/BR>
\nGo to isc.sans.edu<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

Microsoft Patch Tuesday March 2026, (Tue, Mar 10th) Microsoft today released patches for 93 vulnerabilities, including 9 vulnerabilities in Chromium affecting Microsoft Edge. 8 of the vulnerabilities are rated critical. 2 were disclosed prior to today but have not yet been exploited. This update addresses no already-exploited vulnerabilities. Disclose vulnerabilities: CVE-2026-26127: A denial of service […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[56],"tags":[69],"class_list":["post-11252","post","type-post","status-publish","format-standard","hentry","category-isc-sans-edu","tag-isc-sans-edu"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/11252"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=11252"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/11252\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=11252"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=11252"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=11252"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}