--- title: March Patch Tuesday: Three high severity holes in... description: Microsoft's March Patch Tuesday covers 78 vulnerabilities with no zero-days. Three high-severity Microsoft Office flaws are highlighted: an Excel information... canonical: https://daily.dev/posts/march-patch-tuesday-three-high-severity-holes-in-microsoft-office-2ka1vgl0p twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: March Patch Tuesday: Three high severity holes in Microsoft Office | daily.dev og:description: Microsoft's March Patch Tuesday covers 78 vulnerabilities with no zero-days. Three high-severity Microsoft Office flaws are highlighted: an Excel information... og:url: https://daily.dev/posts/march-patch-tuesday-three-high-severity-holes-in-microsoft-office-2ka1vgl0p og:image: https://api.daily.dev/og/posts/2ka1VGL0p.png og:image:alt: March Patch Tuesday: Three high severity holes in Microsoft Office og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # March Patch Tuesday: Three high severity holes in Microsoft Office **[CSO Online](https://daily.dev/sources/csoonline)** · 8 min read · 0 upvotes · 0 comments ## Summary Microsoft's March Patch Tuesday covers 78 vulnerabilities with no zero-days. Three high-severity Microsoft Office flaws are highlighted: an Excel information disclosure vulnerability (CVE-2026-26144) that could enable silent data exfiltration and may interact with Copilot Agent mode, plus two remote code execution vulnerabilities (CVE-2026-26113 and CVE-2026-26110) exploitable via the Preview Pane without user interaction. Nine Azure vulnerabilities also require attention, including holes in Azure Compute Gallery, IoT Explorer, Linux VMs, Arc, and an SSRF in Azure MCP tools. A publicly disclosed SQL Server elevation-of-privilege flaw (CVSS 8.8) is also on the list. On the positive side, Sysmon is now natively integrated into Windows 11 as an optional built-in feature. Separately, SAP patched two critical vulnerabilities (CVSS 9.8 and 9.1), and Apple, Google, Ivanti, and WordPress also issued security updates. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Microsoft Patch Tuesday, March 2026 Edition – Krebs on Security](https://daily.dev/posts/microsoft-patch-tuesday-march-2026-edition-krebs-on-security-vio6duyhq) · Krebs on Security · 0 upvotes · 0 comments - [Microsoft Patches 83 CVEs in March Update](https://daily.dev/posts/microsoft-patches-83-cves-in-march-update-vqfajqpoo) · Dark Reading · 0 upvotes · 0 comments - [Microsoft Patch Tuesday: March 2026](https://daily.dev/posts/microsoft-patch-tuesday-march-2026-zextpr9x7) · Arctic Wolf · 0 upvotes · 0 comments - [February 2026 Patch Tuesday: Six new and actively exploited Microsoft vulnerabilities addressed](https://daily.dev/posts/february-2026-patch-tuesday-six-new-and-actively-exploited-microsoft-vulnerabilities-addressed-uxvhpzt2r) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#microsoft](https://daily.dev/tags/microsoft), [#azure](https://daily.dev/tags/azure) [View this post on daily.dev](https://daily.dev/posts/march-patch-tuesday-three-high-severity-holes-in-microsoft-office-2ka1vgl0p) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"March Patch Tuesday: Three high severity holes in Microsoft Office","url":"https://daily.dev/posts/march-patch-tuesday-three-high-severity-holes-in-microsoft-office-2ka1vgl0p","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/march-patch-tuesday-three-high-severity-holes-in-microsoft-office-2ka1vgl0p"},"datePublished":"2026-03-10T23:37:51.697Z","dateModified":"2026-03-10T23:38:28.474Z","description":"Microsoft's March Patch Tuesday covers 78 vulnerabilities with no zero-days. Three high-severity Microsoft Office flaws are highlighted: an Excel information...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0977f8331f68fc8d12adb831a27165c1?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0977f8331f68fc8d12adb831a27165c1?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"CSO Online","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"CSO Online","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/98667e4b5cac46cf9c470819c6cf71cd","url":"https://daily.dev/sources/csoonline"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/march-patch-tuesday-three-high-severity-holes-in-microsoft-office-2ka1vgl0p","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,microsoft,azure","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"CSO Online","item":"https://daily.dev/sources/csoonline"},{"@type":"ListItem","position":3,"name":"March Patch Tuesday: Three high severity holes in Microsoft Office"}]} ```