Microsoft Patch Tuesday for March 2026 — Snort rules and prominent vulnerabilities
Summary: Microsoft's March 2026 security update covers 79 vulnerabilities, three of them rated "critical" and the rest "important", with Microsoft assessing exploitation of the critical three as "less likely." The critical set comprises two Office remote code execution flaws (CVE-2026-26110, a type confusion issue, and CVE-2026-26113, an untrusted pointer dereference) and an Excel information disclosure flaw (CVE-2026-26144), while among the important issues are SharePoint RCE flaws reachable by an authenticated attacker with Site Member permissions and SQL Server elevation of privilege flaws scoring 8.8.
What's compelling: CVE-2026-26118 in Azure MCP Server Tools lets an attacker who can interact with an MCP-backed agent submit a malicious URL and capture the server's managed identity token without administrative access, gaining whatever that identity is authorized to reach. Separately, CVE-2026-26128 in Windows SMB Server yields SYSTEM privileges on successful exploitation.