Patch Tuesday security patch, March 2026 🚨

Microsoft released a security update (Patch Tuesday) for March 2026 to fix a total of 79 vulnerabilities Windows 11 code KB5079473 and KB5078883 Windows 10 part joining the ESU project code KB5078885.

.

With two publicly exposed Zero-Day vulnerabilities, code CVE-2026-21262, severity based on CVSSv3 8.8 / 10 points, and CVE-2026-26127, severity based on CVSSv3 7.5 / 10 points. Despite not being reported to have been actually deployed for attack at this time, there is the same risk.

.

In this round of updates, there are three critical vulnerabilities, divided into two Remote Code Execution - RCE vulnerabilities and one Information Disclosure vulnerability.

.

A breakdown of the vulnerabilities that have been addressed is as follows:

- Elevation of Privilege vulnerability: 46 items

- Security Feature Bypass vulnerability: 2 items

- Remote Code Execution: 18 items

- Information Disclosure: 10 items

- Denial of Service vulnerability: 4 items

- Identity forgery vulnerability (Spoofing): 4 items

.

The figures do not include Microsoft Edge vulnerabilities, including Mariner, Payment Orchestrator Service, Azure, and Microsoft Devices Pricing Program that were previously patched in the same month.

.

Meanwhile, other software manufacturers also issued security updates in March, including Adobe, Cisco, Fortinet, Google (Android), HPE, and SAP, with some fixing severe vulnerabilities, including Zero-Day being used to actually attack.

.

Administrators and users are advised to rush to install Microsoft security updates and related software ASAP to reduce the risk of attack through these vulnerabilities.

.

Source: bleepingcomputer

# IT should know # IT News # Includes IT matters # IT