Microsoft Fixes Two Publicly Disclosed Zero-Days

Microsoft's March Patch Tuesday addresses 79 vulnerabilities, notably two publicly disclosed zero-days (an SQL Server elevation-of-privilege CVE-2026-21262 with CVSS 8.8 and a .NET denial-of-service CVE-2026-26127) and a predominance of elevation-of-privilege flaws in Windows components that could enable privilege escalation if combined with other access vectors; no confirmed widespread exploitation is reported but administrators are urged to patch, especially exposed SQL Server instances and critical infrastructure components.