Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days
ID: bfb749eb-8d9e-579f-b737-18fd41c719e2
STIX ID: report--bfb749eb-8d9e-579f-b737-18fd41c719e2
Feed Name: The Hacker News
Threat Score
Microsoft's May 2026 Patch Tuesday fixes 84 vulnerabilities across Windows and related products, including two publicly disclosed zero-days (a .NET DoS and a SQL Server elevation-of-privilege), a critical RCE (CVE-2026-21536, CVSS 9.8), numerous privilege-escalation bugs (including a low-interaction Winlogon flaw), and an Azure MCP SSRF that can expose managed identity tokens; the release also changes Windows Autopatch defaults to enable hotpatch security updates.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.