Microsoft’s monthly Patch Tuesday is first in 6 months with no actively exploited zero-days

Microsoft’s March Patch Tuesday addressed 83 vulnerabilities across its enterprise software, including multiple privilege-escalation flaws, two publicly known bugs, an Excel information-disclosure issue that could enable Copilot Agent data exfiltration (effectively zero-click), and Office remote-code-execution vulnerabilities (CVEs rated CVSS 8.4). No actively exploited zero-days were reported, though six vulnerabilities were flagged as more likely to be exploited.