Security AffairsPierluigi Paganini
Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs
Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs across Windows, Office, Edge, Azure, SQL Server, Hyper-V and ReFS, with the total including third‑party and Chromium updates reaching 94 vulnerabilities. Eight flaws are rated Critical and the remainder Important, with two publicly disclosed vulnerabilities, CVE-2026-26127 and CVE-2026-21262, not currently known to be actively exploited.
Other notable flaws addressed include CVE-2026-21536, a high‑severity remote code execution issue in Microsoft Devices Pricing Program services, and CVE-2026-26110, which enables remote code execution in Microsoft Office via malicious files processed in the Preview Pane. None of the flaws are known to be exploited so far, according to MSRC. The full list of CVEs addressed by these March 2026 updates is available on the Microsoft Update Guide release note for 2026‑Mar.
Story timeline CVE-2026-26127
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 10 Mar · 19:01 UTC | SANS ISC | Microsoft Patch Tuesday March 2026, (Tue, Mar 10th) |
| Tue 10 Mar · 19:31 UTC | SecurityWeek | Microsoft Patches 83 Vulnerabilities |
| Tue 10 Mar · 22:03 UTC | Rapid7 | Patch Tuesday - March 2026 |
| Wed 11 Mar · 00:04 UTC | Security Affairs | Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs (this article) |
| Wed 11 Mar · 01:05 UTC | Krebs on Security | Microsoft Patch Tuesday, March 2026 Edition |
| Wed 11 Mar · 09:42 UTC | Infosecurity | Microsoft Fixes Two Publicly Disclosed Zero-Days |
| Wed 11 Mar · 09:42 UTC | The Hacker News | Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days |
| Wed 11 Mar · 11:13 UTC | Malwarebytes | March 2026 Patch Tuesday fixes two zero-day vulnerabilities |
| Wed 11 Mar · 11:43 UTC | SOCRadar | March 2026 Patch Tuesday: 83 Vulnerabilities, Two Publicly Disclosed Zero-Days |