Vulnerabilities

• March 2026 Patch Tuesday: 78 Vulnerabilities Including Zero-Day Under Active Exploitation March 23, 2026

  Microsoft's March 2026 Patch Tuesday addressed 78 CVEs including two publicly disclosed zero-days and three Critical-rated flaws. One zero-day in SQL Server has been flagged by multiple sources as actively exploited -- and with patch diffing tools compressing exploitation windows to under 48 hours, the margin for slow patch cycles is gone.