InfoSecBulletin Cybersecurity for mankind
Today is Microsoft’s March 2026 Patch Tuesday, featuring security updates for 84 flaws, which include 2 zero-day vulnerabilities that were publicly disclosed.
This Patch Tuesday also addresses three “Critical” vulnerabilities, 2 of which are remote code execution flaws and the other is an information disclosure flaw.
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
MITRE ATT&CK v20 Unveils 9 New Attack Techniques On AI Exploits, MFA Bypass, and CAPTCHA Evasion
Hackers Exploit Fortinet Flaws to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
Hacker stole Meta GitHub repos; Stole Source Code
Urgent patch! Zoom,NVIDIA and IBM Patch 41 Security flaws
Microsoft patches record braking 1411 flaws; 2 zero days
Anthropic unveils “OSS Scanner” Free AI Vulnerability Scanner for Open-Source Projects
Rise on RCE Exploits Targeting Hikvision Camera Flaw
FortiBleed Attack Compromised 80,000+ Devices, SonicWall Patches 4 SMA1000 Flaws CVSS 10
Critical Atlassian & IBM Flaws Expose Files and Enable Remote Code Execution
The number of bugs in each vulnerability category is listed below:
46 Elevation of Privilege Vulnerabilities
2 Security Feature Bypass Vulnerabilities
18 Remote Code Execution Vulnerabilities
10 Information Disclosure Vulnerabilities
4 Denial of Service Vulnerabilities
4 Spoofing Vulnerabilities
2 zero-days and Microsoft Office flaws:
Microsoft defines a zero-day flaw as one that is known to the public or being actively used but does not have a fix yet.
The two publicly disclosed zero-days are:
CVE-2026-21262: SQL Server Elevation of Privilege Vulnerability
CVE-2026-26127: .NET Denial of Service Vulnerability
Microsoft fixed two remote code execution bugs (CVE-2026-26110 and CVE-2026-26113) in Office that can be exploited through the preview pane. Users should update the app promptly.
