{"id":1823,"date":"2026-03-10T18:01:26","date_gmt":"2026-03-10T18:01:26","guid":{"rendered":"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/"},"modified":"2026-03-10T18:01:26","modified_gmt":"2026-03-10T18:01:26","slug":"microsoft-patch-tuesday-march-2026-tue-mar-10th","status":"publish","type":"post","link":"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/","title":{"rendered":"Microsoft Patch Tuesday March 2026, (Tue, Mar 10th)"},"content":{"rendered":"
\n

Microsoft today released patches for 93 vulnerabilities, including 9 vulnerabilities in Chromium affecting Microsoft Edge. 8 of the vulnerabilities are rated critical. 2 were disclosed prior to today but have not yet been exploited. This update addresses no already-exploited vulnerabilities.<\/p>\n

Disclose vulnerabilities:<\/p>\n

CVE-2026-26127<\/strong>: A denial of service vulnerability in .Net. Microsoft considers exploitation unlikely. The issue arises from an out-of-bounds read and can be exploited across the network. No authentication is required.<\/p>\n

CVE-2026-21262<\/strong>: A privilege escalation in SQL Server. An authenticated user may be able to escalate privileges to sysadmin.<\/p>\n

Critical Vulnerabilities:<\/p>\n

CVE-2026-21536<\/strong>: The vulnerability in Microsoft’s Devices Pricing Program allows remote code execution. But this product is only offered as a cloud service, and Microsoft has already deployed the patch. Microsoft credits the AI vulnerability scanning platform XBOW with discovering this vulnerability.<\/p>\n

CVE-2026-26125<\/strong>: Similar to the above vulnerability, this elevation-of-privilege vulnerability in Microsoft’s Payment Orchestrator service has been mitigated by Microsoft.<\/p>\n

CVE-2026-26113, CVE-2026-26110, CVE-2026-26144<\/strong>: These vulnerabilities affect Excel and Office.<\/p>\n

CVE-2026-23651, CVE-2026-26124, CVE-2026-26122<\/strong>: These vulnerabilities affect Microsoft ACI Confidential Containers. No customer action is required. Microsoft already patched these issues.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Description<\/th>\n<\/tr>\n
CVE<\/th>\nDisclosed<\/th>\nExploited<\/th>\nExploitability (old versions)<\/th>\ncurrent version<\/th>\nSeverity<\/th>\nCVSS Base (AVG)<\/th>\nCVSS Temporal (AVG)<\/th>\n<\/tr>\n<\/thead>\n
.NET Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26127%%<\/td>\nYes<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
.NET Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26131%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
ASP.NET Core Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26130%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Active Directory Domain Services Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25177%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Arc Enabled Servers – Azure Connected Machine Agent Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26117%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Azure IOT Explorer Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26121%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Azure IoT Explorer Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23664%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
%%cve:2026-23661%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
%%cve:2026-23662%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Azure MCP Server Tools Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26118%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Broadcast DVR Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23667%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Chromium: CVE-2026-3536 Integer overflow in ANGLE<\/td>\n<\/tr>\n
%%cve:2026-3536%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3538 Integer overflow in Skia<\/td>\n<\/tr>\n
%%cve:2026-3538%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3539 Object lifecycle issue in DevTools<\/td>\n<\/tr>\n
%%cve:2026-3539%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3540 Inappropriate implementation in WebAudio<\/td>\n<\/tr>\n
%%cve:2026-3540%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3541 Inappropriate implementation in CSS<\/td>\n<\/tr>\n
%%cve:2026-3541%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3542 Inappropriate implementation in WebAssembly<\/td>\n<\/tr>\n
%%cve:2026-3542%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3543 Inappropriate implementation in V8<\/td>\n<\/tr>\n
%%cve:2026-3543%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3544 Heap buffer overflow in WebCodecs<\/td>\n<\/tr>\n
%%cve:2026-3544%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-3545 Insufficient data validation in Navigation<\/td>\n<\/tr>\n
%%cve:2026-3545%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
GDI Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25190%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
GDI+ Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25181%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable<\/td>\n<\/tr>\n
%%cve:2026-26030%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n9.9<\/td>\n8.6<\/td>\n<\/tr>\n
GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23654%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Hybrid Worker Extension (Arc?enabled Windows VMs) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26141%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23665%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
MapUrlToZone Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23674%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23651%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n6.7<\/td>\n6.0<\/td>\n<\/tr>\n
%%cve:2026-26124%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n6.7<\/td>\n6.0<\/td>\n<\/tr>\n
Microsoft ACI Confidential Containers Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26122%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Microsoft Authenticator Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26123%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26148%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.1<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft Brokering File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25167%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.4<\/td>\n6.4<\/td>\n<\/tr>\n
Microsoft Devices Pricing Program Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-21536%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.8<\/td>\n8.5<\/td>\n<\/tr>\n
Microsoft Excel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26144%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Microsoft Excel Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26112%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26107%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26108%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26109%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft Office Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26134%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Office Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26113%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
%%cve:2026-26110%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft SharePoint Server Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26114%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-26106%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Microsoft SharePoint Server Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26105%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.1<\/td>\n7.1<\/td>\n<\/tr>\n
Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24283%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Payment Orchestrator Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26125%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.6<\/td>\n7.7<\/td>\n<\/tr>\n
Performance Counters for Windows Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25165%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Push message Routing Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24282%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
SQL Server Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-21262%%<\/td>\nYes<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-26115%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-26116%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-20967%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Win32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24285%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24291%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25186%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23660%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24293%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-25176%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-25178%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-25179%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows App Installer Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23656%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Windows Authentication Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25171%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23671%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24292%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows DWM Core Library Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25189%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Device Association Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24295%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-24296%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25174%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Graphics Component Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25168%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.2<\/td>\n5.4<\/td>\n<\/tr>\n
%%cve:2026-25169%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.2<\/td>\n5.4<\/td>\n<\/tr>\n
Windows Graphics Component Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23668%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Graphics Component Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25180%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Windows Hyper-V Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25170%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Kerberos Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24297%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Windows Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24287%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-24289%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26132%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Mobile Broadband Driver Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24288%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.8<\/td>\n5.9<\/td>\n<\/tr>\n
Windows NTFS Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25175%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Print Spooler Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23669%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24290%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23673%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25172%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-25173%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.0<\/td>\n7.0<\/td>\n<\/tr>\n
%%cve:2026-26111%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows SMB Server Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-24294%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26128%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Shell Link Processing Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25185%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.3<\/td>\n4.6<\/td>\n<\/tr>\n
Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25166%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Telephony Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25188%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23672%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Winlogon Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25187%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

—
\nJohannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu<\/a>
\nTwitter<\/a>|<\/p>\n

(c) SANS Internet Storm Center. https:\/\/isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

Microsoft today released patches for 93 vulnerabilities, including 9 vulnerabilities in Chromium affecting Microsoft Edge. 8 of the vulnerabilities are rated critical. 2 were disclosed prior to today but have not yet been exploited. This update addresses no already-exploited vulnerabilities. Disclose vulnerabilities: CVE-2026-26127: A denial of service vulnerability in .Net. Microsoft considers exploitation unlikely. The […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-container-style":"default","site-container-layout":"default","site-sidebar-layout":"default","disable-article-header":"default","disable-site-header":"default","disable-site-footer":"default","disable-content-area-spacing":"default","footnotes":""},"categories":[90],"tags":[91],"class_list":["post-1823","post","type-post","status-publish","format-standard","hentry","category-cybersecurity","tag-cybersecurity"],"yoast_head":"\nMicrosoft Patch Tuesday March 2026, (Tue, Mar 10th) - Imperative Business Ventures Limited<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Patch Tuesday March 2026, (Tue, Mar 10th) - Imperative Business Ventures Limited\" \/>\n<meta property=\"og:description\" content=\"Microsoft today released patches for 93 vulnerabilities, including 9 vulnerabilities in Chromium affecting Microsoft Edge. 8 of the vulnerabilities are rated critical. 2 were disclosed prior to today but have not yet been exploited. This update addresses no already-exploited vulnerabilities. Disclose vulnerabilities: CVE-2026-26127: A denial of service vulnerability in .Net. Microsoft considers exploitation unlikely. The […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/\" \/>\n<meta property=\"og:site_name\" content=\"Imperative Business Ventures Limited\" \/>\n<meta property=\"article:published_time\" content=\"2026-03-10T18:01:26+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02\"},\"headline\":\"Microsoft Patch Tuesday March 2026, (Tue, Mar 10th)\",\"datePublished\":\"2026-03-10T18:01:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/\"},\"wordCount\":1434,\"keywords\":[\"Cybersecurity\"],\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/\",\"url\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/\",\"name\":\"Microsoft Patch Tuesday March 2026, (Tue, Mar 10th) - Imperative Business Ventures Limited\",\"isPartOf\":{\"@id\":\"https:\/\/blog.ibvl.in\/#website\"},\"datePublished\":\"2026-03-10T18:01:26+00:00\",\"author\":{\"@id\":\"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.ibvl.in\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Patch Tuesday March 2026, (Tue, Mar 10th)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.ibvl.in\/#website\",\"url\":\"https:\/\/blog.ibvl.in\/\",\"name\":\"Imperative Business Ventures Limited\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.ibvl.in\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.ibvl.in\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4d20b2cd313e4417a599678e950e6fb7d4dfa178a72f2b769335a08aaa615aa9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4d20b2cd313e4417a599678e950e6fb7d4dfa178a72f2b769335a08aaa615aa9?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/blog.ibvl.in\"],\"url\":\"https:\/\/blog.ibvl.in\/index.php\/author\/admin_hcbs9yw6\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft Patch Tuesday March 2026, (Tue, Mar 10th) - Imperative Business Ventures Limited","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft Patch Tuesday March 2026, (Tue, Mar 10th) - Imperative Business Ventures Limited","og_description":"Microsoft today released patches for 93 vulnerabilities, including 9 vulnerabilities in Chromium affecting Microsoft Edge. 8 of the vulnerabilities are rated critical. 2 were disclosed prior to today but have not yet been exploited. This update addresses no already-exploited vulnerabilities. Disclose vulnerabilities: CVE-2026-26127: A denial of service vulnerability in .Net. Microsoft considers exploitation unlikely. The […]","og_url":"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/","og_site_name":"Imperative Business Ventures Limited","article_published_time":"2026-03-10T18:01:26+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/#article","isPartOf":{"@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/"},"author":{"name":"admin","@id":"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02"},"headline":"Microsoft Patch Tuesday March 2026, (Tue, Mar 10th)","datePublished":"2026-03-10T18:01:26+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/"},"wordCount":1434,"keywords":["Cybersecurity"],"articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/","url":"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/","name":"Microsoft Patch Tuesday March 2026, (Tue, Mar 10th) - Imperative Business Ventures Limited","isPartOf":{"@id":"https:\/\/blog.ibvl.in\/#website"},"datePublished":"2026-03-10T18:01:26+00:00","author":{"@id":"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02"},"breadcrumb":{"@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/03\/10\/microsoft-patch-tuesday-march-2026-tue-mar-10th\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.ibvl.in\/"},{"@type":"ListItem","position":2,"name":"Microsoft Patch Tuesday March 2026, (Tue, Mar 10th)"}]},{"@type":"WebSite","@id":"https:\/\/blog.ibvl.in\/#website","url":"https:\/\/blog.ibvl.in\/","name":"Imperative Business Ventures Limited","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.ibvl.in\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.ibvl.in\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4d20b2cd313e4417a599678e950e6fb7d4dfa178a72f2b769335a08aaa615aa9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4d20b2cd313e4417a599678e950e6fb7d4dfa178a72f2b769335a08aaa615aa9?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/blog.ibvl.in"],"url":"https:\/\/blog.ibvl.in\/index.php\/author\/admin_hcbs9yw6\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/posts\/1823","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/comments?post=1823"}],"version-history":[{"count":0,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/posts\/1823\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/media?parent=1823"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/categories?post=1823"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/tags?post=1823"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}