Microsoft’s March 2026 Patch Tuesday: Critical Fixes for 2 Zero-Days and 79 Flaws

Microsoft Security Vulnerabilities

Microsoft recently released a list of security vulnerabilities affecting various products and services. These vulnerabilities range in severity from Important to Critical and cover a wide range of issues.

.NET Vulnerabilities

The .NET framework has been affected by two important vulnerabilities. CVE-2026-26131 is an Elevation of Privilege Vulnerability, while CVE-2026-26127 is a Denial of Service Vulnerability.

Active Directory Domain Services Vulnerability

Active Directory Domain Services is also at risk with CVE-2026-25177, an Elevation of Privilege Vulnerability that has been classified as important.

Azure Vulnerabilities

Several vulnerabilities have been identified in various Azure services. Azure Compute Gallery is facing critical vulnerabilities such as CVE-2026-23651, CVE-2026-26124, and CVE-2026-26122, all related to Elevation of Privilege and Information Disclosure.

Azure Arc, Azure IoT Explorer, Azure Linux Virtual Machines, Azure MCP Server, Azure Portal Windows Admin Center, and Azure Windows Virtual Machine Agent are also affected by important vulnerabilities.

Mariner Vulnerabilities

The Mariner operating system has several important vulnerabilities, including issues with f2fs, CoreDNS, Underscore.js, fbdev, and the Freetype library.

There are also moderate vulnerabilities related to libpng, platform/x86, SourcelessFileLoader, and zlib.

Other Microsoft Product Vulnerabilities

Various other Microsoft products such as Microsoft Authenticator, Microsoft Brokering File System, Microsoft Devices Pricing Program, Microsoft Edge, Microsoft Graphics Component, Microsoft Office, Microsoft Office Excel, Microsoft Office SharePoint, and more have been affected by critical and important vulnerabilities.

These vulnerabilities range from Remote Code Execution to Elevation of Privilege and Information Disclosure.

Conclusion

It is crucial for users of Microsoft products and services to stay informed about these security vulnerabilities and take necessary precautions to protect their systems and data.