Summary
This update deploys cumulative Microsoft Windows security patches through March 2026 for LTSB 2016, LTSC 2019, and LTSC 2021.
Details
Impact
Not deploying Windows security patches increases the attack surface, leaves systems exposed to known vulnerabilities, and elevates operational risk.
Mitigation
Install the cumulative Windows security patches through March 2026 for LTSB 2016, LTSC 2019, and LTSC 2021. The patches have to be applied to scales FreshWay B and FreshWay D with Windows operating system.
Vulnerabilities 10
-
High 8.0CVE-2026-25172 Public exploit
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
-
High 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
-
High 7.8
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
High 7.8CVE-2026-26128 Public exploit
Windows SMB Server Elevation of Privilege Vulnerability
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.
-
High 7.5
GDI+ Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.
-
High 7.0
Windows Authentication Elevation of Privilege Vulnerability
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows Shell Link Processing Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network.
Revision history
-
#1.0.0
Initial revision
References
-
Product security website of METTLER TOLEDO
https://www.mt.com/ph/en/home/site_content/product-security.html
-
CERT@VDE Security Advisories for METTLER TOLEDO
https://certvde.com/en/advisories/vendor/mettler-toledo/
-
VDE-2026-066: METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D - HTML
https://certvde.com/en/advisories/VDE-2026-066/
-
Release notes containing additional vulnerabilities (January cumulative update)
https://msrc.microsoft.com/update-guide/releaseNote/2026-Jan
-
Release notes containing additional vulnerabilities (February cumulative update)
https://msrc.microsoft.com/update-guide/releaseNote/2026-Feb
-
Release notes containing additional vulnerabilities (March cumulative update)
https://msrc.microsoft.com/update-guide/releaseNote/2026-Mar