logo

March 2026 Patch Tuesday: Eight Critical Vulnerabilities and Two Publicly Disclosed Among 82 CVEs Patched

ID: 90aa323b-8f86-5745-a3e2-c7373088f772

STIX ID: report--90aa323b-8f86-5745-a3e2-c7373088f772

Feed Name: Crowdstrike Blog

Threat Score
70/100

Date Published: 2026-03-10

Date Updated: 2026-04-27

Author: Falcon Exposure Management Team

...
...

This Patch Tuesday-style advisory summarizes multiple Microsoft vulnerabilities across services and products (Devices Pricing Program, Payment Orchestrator, Microsoft Office, Excel, ACI Confidential Containers, SQL Server, and .NET), including several critical CVEs enabling remote code execution and privilege escalation (CVSS up to 9.8). Microsoft reports server/cloud-side remediation for several issues, published fixes for others, and limited evidence of active exploitation; CrowdStrike recommends using its Falcon Exposure Management dashboard to identify and prioritize impacted systems.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.