Microsoft Patch Tuesday — March 2026

Tuesday, 10 March 2026

Vulnerabilities: 78
Critical: 0
High: 68
Zero-days: 0
Public exploit: 7

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Public exploit code 7

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2026-25177 Public exploit Active Directory Domain Services Elevation of Privilege Vulnerability
EPSS 1.4%
High 8.8
CVE-2026-26114 Public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 3.4%
High 8.8
CVE-2026-26118 Public exploit Azure MCP Server Tools Elevation of Privilege Vulnerability
EPSS 1.1%
High 8.0
CVE-2026-25172 Public exploit Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1%
High 7.8
CVE-2026-24291 Public exploit Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
EPSS 3.3%
High 7.8
CVE-2026-24294 Public exploit Windows SMB Server Elevation of Privilege Vulnerability
EPSS 5.2%
High 7.8
CVE-2026-26128 Public exploit Windows SMB Server Elevation of Privilege Vulnerability

All vulnerabilities 78

High68 Show

High 8.8
CVE-2026-25177 Public exploit Active Directory Domain Services Elevation of Privilege Vulnerability
EPSS 1.4%
High 8.8
CVE-2026-26114 Public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 3.4%
High 8.8
CVE-2026-26118 Public exploit Azure MCP Server Tools Elevation of Privilege Vulnerability
EPSS 1.1%
High 8.8
CVE-2026-20967 System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability
EPSS 1.2%
High 8.8
CVE-2026-21262 SQL Server Elevation of Privilege Vulnerability
EPSS 1.7%
High 8.8
CVE-2026-23654 GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability
EPSS 1%
High 8.8
CVE-2026-23669 RPC Runtime Library Remote Code Execution Vulnerability
EPSS 1%
High 8.8
CVE-2026-24283 Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability
High 8.8
CVE-2026-25188 Windows Telephony Service Elevation of Privilege Vulnerability
High 8.8
CVE-2026-26106 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2026-26115 SQL Server Elevation of Privilege Vulnerability
EPSS 1.3%
High 8.8
CVE-2026-26116 SQL Server Elevation of Privilege Vulnerability
EPSS 1.2%
High 8.4
CVE-2026-26109 Microsoft Excel Remote Code Execution Vulnerability
High 8.4
CVE-2026-26110 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2026-26113 Microsoft Office Remote Code Execution Vulnerability
High 8.1
CVE-2026-26105 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 1.3%
High 8.1
CVE-2026-26148 Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability
High 8.0
CVE-2026-25172 Public exploit Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1%
High 8.0
CVE-2026-25173 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1%
High 8.0
CVE-2026-26111 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 7.8
CVE-2026-24291 Public exploit Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
EPSS 3.3%
High 7.8
CVE-2026-24294 Public exploit Windows SMB Server Elevation of Privilege Vulnerability
EPSS 5.2%
High 7.8
CVE-2026-26128 Public exploit Windows SMB Server Elevation of Privilege Vulnerability
High 7.8
CVE-2026-23660 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
High 7.8
CVE-2026-23665 Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability
High 7.8
CVE-2026-23672 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
High 7.8
CVE-2026-23673 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
High 7.8
CVE-2026-24287 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2026-24289 Windows Kernel Elevation of Privilege Vulnerability
EPSS 4.9%
High 7.8
CVE-2026-24290 Windows Projected File System Elevation of Privilege Vulnerability
High 7.8
CVE-2026-24292 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
High 7.8
CVE-2026-24293 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.8
CVE-2026-25165 Performance Counters for Windows Elevation of Privilege Vulnerability
High 7.8
CVE-2026-25166 Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability
EPSS 1.9%
High 7.8
CVE-2026-25174 Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
High 7.8
CVE-2026-25175 Windows NTFS Elevation of Privilege Vulnerability
High 7.8
CVE-2026-25176 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.8
CVE-2026-25187 Winlogon Elevation of Privilege Vulnerability
EPSS 3.4%
High 7.8
CVE-2026-25189 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2026-25190 Windows GDI Remote Code Execution Vulnerability
High 7.8
CVE-2026-26107 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2026-26108 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2026-26112 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2026-26117 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
High 7.8
CVE-2026-26131 .NET Elevation of Privilege Vulnerability
High 7.8
CVE-2026-26132 Windows Kernel Elevation of Privilege Vulnerability
EPSS 2.2%
High 7.8
CVE-2026-26134 Microsoft Office Elevation of Privilege Vulnerability
High 7.8
CVE-2026-26141 Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability
High 7.5
CVE-2026-23661 Azure IoT Explorer Information Disclosure Vulnerability
High 7.5
CVE-2026-23662 Azure IoT Explorer Information Disclosure Vulnerability
High 7.5
CVE-2026-23664 Azure IoT Explorer Information Disclosure Vulnerability
EPSS 1.1%
High 7.5
CVE-2026-23674 MapUrlToZone Security Feature Bypass Vulnerability
EPSS 1.4%
High 7.5
CVE-2026-25181 GDI+ Information Disclosure Vulnerability
EPSS 1.6%
High 7.5
CVE-2026-26121 Azure IOT Explorer Spoofing Vulnerability
EPSS 1.2%
High 7.5
CVE-2026-26127 .NET Denial of Service Vulnerability
EPSS 2.3%
High 7.5
CVE-2026-26130 ASP.NET Core Denial of Service Vulnerability
EPSS 3.2%
High 7.5
CVE-2026-26144 Microsoft Excel Information Disclosure Vulnerability
EPSS 1.4%
High 7.4
CVE-2026-25167 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.0
CVE-2026-23667 Broadcast DVR Elevation of Privilege Vulnerability
High 7.0
CVE-2026-23668 Windows Graphics Component Elevation of Privilege Vulnerability
EPSS 3.9%
High 7.0
CVE-2026-23671 Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability
High 7.0
CVE-2026-24285 Win32k Elevation of Privilege Vulnerability
High 7.0
CVE-2026-24295 Windows Device Association Service Elevation of Privilege Vulnerability
High 7.0
CVE-2026-24296 Windows Device Association Service Elevation of Privilege Vulnerability
High 7.0
CVE-2026-25170 Windows Hyper-V Elevation of Privilege Vulnerability
High 7.0
CVE-2026-25171 Windows Authentication Elevation of Privilege Vulnerability
High 7.0
CVE-2026-25178 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2026-25179 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Medium10 Show

Medium 6.8
CVE-2026-24288 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.5
CVE-2026-24297 Windows Kerberos Security Feature Bypass Vulnerability
Medium 6.2
CVE-2026-25168 Windows Graphics Component Denial of Service Vulnerability
Medium 6.2
CVE-2026-25169 Windows Graphics Component Denial of Service Vulnerability
Medium 5.9
CVE-2026-23656 Windows App Installer Spoofing Vulnerability
Medium 5.5
CVE-2026-24282 Push message Routing Service Elevation of Privilege Vulnerability
Medium 5.5
CVE-2026-25180 Windows Graphics Component Information Disclosure Vulnerability
Medium 5.5
CVE-2026-25186 Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability
Medium 5.5
CVE-2026-26123 Microsoft Authenticator Information Disclosure Vulnerability
Medium 5.3
CVE-2026-25185 Windows Shell Link Processing Spoofing Vulnerability
EPSS 1.1%