Microsoft security patch release for CVE-2026-21262
Security Patch Release
Summary
Hide ▲
Show ▼
Microsoft's March 2026 Patch Tuesday delivers fixes for 79 flaws, including 2 publicly disclosed zero-days and several Critical issues across SQL Server, .NET, and Microsoft Office. The release includes 2 Office remote code execution bugs that can be triggered via the preview pane, plus an Excel information disclosure flaw that could let an attacker exfiltrate data through Microsoft Copilot. The two zero-days are CVE-2026-21262 in SQL Server and CVE-2026-26127 in .NET. Administrators should prioritize deployment because the bundle covers both privilege escalation and code execution risk.
Related Happenings
Microsoft RDP file security guidance
Advisory/Mitigation
H score28
First: 14.07.2026 21:49
Last: 14.07.2026 21:49
Sources 1
About this happening:
Microsoft issued RDP mitigation guidance that restricts which .rdp files users can open and recommends migrating trusted publishers to SHA-256 thumbprints, reducing ph...
Microsoft RDP file security guidance
Advisory/MitigationAbout this happening: Microsoft issued RDP mitigation guidance that restricts which .rdp files users can open and recommends migrating trusted publishers to SHA-256 thumbprints, reducing ph...
Microsoft Office launch disruption after June 2026 Windows updates
Service Disruption
H score0
First: 17.06.2026 14:54
Last: 17.06.2026 14:54
Sources 1
About this happening:
Microsoft is investigating a Windows update-related disruption that can stop third-party applications from launching Word, Excel, PowerPoint, Access or opening documen...
Microsoft Office launch disruption after June 2026 Windows updates
Service DisruptionAbout this happening: Microsoft is investigating a Windows update-related disruption that can stop third-party applications from launching Word, Excel, PowerPoint, Access or opening documen...
Microsoft security patch release for CVE-2026-42824
Security Patch Release
H score30
First: 15.06.2026 16:00
Last: 15.06.2026 16:00
Sources 1
About this happening:
Microsoft's fix for SearchLeak in Microsoft 365 Copilot Enterprise closed a critical flaw tied to CVE-2026-42824 that could expose mailbox, OneDrive, and SharePo...
Microsoft security patch release for CVE-2026-42824
Security Patch ReleaseAbout this happening: Microsoft's fix for SearchLeak in Microsoft 365 Copilot Enterprise closed a critical flaw tied to CVE-2026-42824 that could expose mailbox, OneDrive, and SharePo...
Microsoft Windows June 2026 Patch Tuesday zero-day fixes (multiple vulnerabilities)
Security Patch Release
H score40
First: 10.06.2026 12:57
Last: 10.06.2026 12:57
Sources 1
About this happening:
Microsoft's June 2026 Patch Tuesday fixed three Windows zero-days that could yield SYSTEM access or bypass BitLocker on vulnerable systems.
Microsoft Windows June 2026 Patch Tuesday zero-day fixes (multiple vulnerabilities)
Security Patch ReleaseAbout this happening: Microsoft's June 2026 Patch Tuesday fixed three Windows zero-days that could yield SYSTEM access or bypass BitLocker on vulnerable systems.
Microsoft June 2026 Patch Tuesday record security update bundle
Security Patch Release
H score36
First: 10.06.2026 01:07
Last: 10.06.2026 01:07
Sources 1
About this happening:
Microsoft released a record Patch Tuesday bundle for June 2026 that patches nearly 200 security holes across Windows operating systems and supported software,...
Microsoft June 2026 Patch Tuesday record security update bundle
Security Patch ReleaseAbout this happening: Microsoft released a record Patch Tuesday bundle for June 2026 that patches nearly 200 security holes across Windows operating systems and supported software,...
Timeline
-
10.03.2026 19:49 2 articles · 4mo ago
Microsoft March 2026 Patch Tuesday release
Initial DisclosureMicrosoft released March 2026 Patch Tuesday security updates for 79 flaws, including two publicly disclosed zero-days: CVE-2026-21262 in SQL Server, which can grant SQLAdmin privileges, and CVE-2026-26127 in .NET, which can be used for denial of service. The bundle also fixed two Microsoft Office remote code execution bugs, CVE-2026-26110 and CVE-2026-26113, exploitable through the preview pane, and an Excel information disclosure flaw, CVE-2026-26144, that could enable data exfiltration via Microsoft Copilot.
Show sources
- Microsoft March 2026 Patch Tuesday fixes 2 zero-days, 79 flaws — www.bleepingcomputer.com — 10.03.2026 19:49
- Microsoft Fixes Two Publicly Disclosed Zero-Days — www.infosecurity-magazine.com — 11.03.2026 11:20