# Security updates released in March 2026

- Web page: https://patchblox.com/security/patch-radar/2026/03

| Platform | Fixes | CVEs | Fixes with exploited CVEs | Patch now |
|---|---:|---:|---:|---:|
| Microsoft | 39 | 63 | 0 | 0 |
| macOS | 3 | 88 | 0 | 0 |
| Linux | 2,952 | 2,167 | 9 | 9 |

## Patch Tuesday, March 10, 2026

78 CVEs, 3 Critical, 0 exploited, 2 publicly disclosed, in 39 security updates.

## Microsoft products with the most CVEs fixed

| Product | CVEs | Exploited | Patch now |
|---|---:|---:|---:|
| Windows Server | 45 | 0 | 0 |
| Windows 10 | 43 | 0 | 0 |
| Windows 11 | 43 | 0 | 0 |
| Microsoft Office | 6 | 0 | 0 |
| SharePoint Server | 4 | 0 | 0 |
| .NET and Visual Studio | 3 | 0 | 0 |
| SQL Server | 3 | 0 | 0 |

## Microsoft updates

| Fix | Products | Released | Priority | CVEs | Exploited | Top CVE |
|---|---|---|---|---:|---:|---|
| [KB5078885](https://patchblox.com/security/data/fix/microsoft/kb5078885.md) | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more | Mar 10, 2026 | Urgent | 43 | 0 | CVE-2026-24294 |
| [KB5078737](https://patchblox.com/security/data/fix/microsoft/kb5078737.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Mar 10, 2026 | Urgent | 42 | 0 | CVE-2026-24294 |
| [KB5078883](https://patchblox.com/security/data/fix/microsoft/kb5078883.md) | Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems | Mar 10, 2026 | Urgent | 41 | 0 | CVE-2026-24294 |
| [KB5079473](https://patchblox.com/security/data/fix/microsoft/kb5079473.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more | Mar 10, 2026 | Urgent | 41 | 0 | CVE-2026-24294 |
| [KB5078734](https://patchblox.com/security/data/fix/microsoft/kb5078734.md) | Windows Server 2022, 23H2 Edition (Server Core installation) | Mar 10, 2026 | Urgent | 40 | 0 | CVE-2026-24294 |
| [KB5078752](https://patchblox.com/security/data/fix/microsoft/kb5078752.md) | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more | Mar 10, 2026 | Urgent | 40 | 0 | CVE-2026-24294 |
| [KB5078766](https://patchblox.com/security/data/fix/microsoft/kb5078766.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Mar 10, 2026 | Urgent | 40 | 0 | CVE-2026-24294 |
| [KB5079466](https://patchblox.com/security/data/fix/microsoft/kb5079466.md) | Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems | Mar 10, 2026 | Urgent | 40 | 0 | CVE-2026-24294 |
| [KB5078736](https://patchblox.com/security/data/fix/microsoft/kb5078736.md) | Windows Server 2025, Windows Server 2025 (Server Core installation) | Mar 10, 2026 | Urgent | 39 | 0 | CVE-2026-24294 |
| [KB5078740](https://patchblox.com/security/data/fix/microsoft/kb5078740.md) | Windows Server 2025, Windows Server 2025 (Server Core installation) | Mar 10, 2026 | Urgent | 39 | 0 | CVE-2026-24294 |
| [KB5079420](https://patchblox.com/security/data/fix/microsoft/kb5079420.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more | Mar 10, 2026 | Urgent | 38 | 0 | CVE-2026-24294 |
| [KB5078938](https://patchblox.com/security/data/fix/microsoft/kb5078938.md) | Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more | Mar 10, 2026 | Urgent | 35 | 0 | CVE-2026-24294 |
| [KB5078774](https://patchblox.com/security/data/fix/microsoft/kb5078774.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Mar 10, 2026 | Urgent | 32 | 0 | CVE-2026-24294 |
| [KB5078775](https://patchblox.com/security/data/fix/microsoft/kb5078775.md) | Windows Server 2012, Windows Server 2012 (Server Core installation) | Mar 10, 2026 | Urgent | 31 | 0 | CVE-2026-24294 |
| [KB5002845](https://patchblox.com/security/data/fix/microsoft/kb5002845.md) | Microsoft SharePoint Server 2019 | Mar 10, 2026 | Urgent | 4 | 0 | CVE-2026-26113 |
| [KB5002850](https://patchblox.com/security/data/fix/microsoft/kb5002850.md) | Microsoft SharePoint Enterprise Server 2016 | Mar 10, 2026 | Urgent | 4 | 0 | CVE-2026-26113 |
| [KB5002843](https://patchblox.com/security/data/fix/microsoft/kb5002843.md) | Microsoft SharePoint Server Subscription Edition | Mar 10, 2026 | Urgent | 3 | 0 | CVE-2026-26113 |
| [KB5002847](https://patchblox.com/security/data/fix/microsoft/kb5002847.md) | Microsoft SharePoint Server 2019 | Mar 10, 2026 | Urgent | 1 | 0 | CVE-2026-26113 |
| [KB5002848](https://patchblox.com/security/data/fix/microsoft/kb5002848.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Mar 10, 2026 | Urgent | 1 | 0 | CVE-2026-26113 |
| [KB5002851](https://patchblox.com/security/data/fix/microsoft/kb5002851.md) | Microsoft SharePoint Enterprise Server 2016 | Mar 10, 2026 | Urgent | 1 | 0 | CVE-2026-26113 |
| [KB5002838](https://patchblox.com/security/data/fix/microsoft/kb5002838.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Mar 10, 2026 | Urgent | 1 | 0 | CVE-2026-26110 |
| [KB5081276](https://patchblox.com/security/data/fix/microsoft/kb5081276.md) | .NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Windows and 1 more | Mar 10, 2026 | High | 3 | 0 | CVE-2026-26130 |
| [KB5081278](https://patchblox.com/security/data/fix/microsoft/kb5081278.md) | .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Windows and 1 more | Mar 10, 2026 | High | 2 | 0 | CVE-2026-26130 |
| [KB5081277](https://patchblox.com/security/data/fix/microsoft/kb5081277.md) | ASP.NET Core 8.0 | Mar 10, 2026 | High | 1 | 0 | CVE-2026-26130 |
| [KB5077466](https://patchblox.com/security/data/fix/microsoft/kb5077466.md) | Microsoft SQL Server 2025 for x64-based Systems (CU2) | Mar 10, 2026 | High | 3 | 0 | CVE-2026-21262 |
| [KB5077468](https://patchblox.com/security/data/fix/microsoft/kb5077468.md) | Microsoft SQL Server 2025 for x64-based Systems (GDR) | Mar 10, 2026 | High | 3 | 0 | CVE-2026-21262 |
| [KB5077464](https://patchblox.com/security/data/fix/microsoft/kb5077464.md) | Microsoft SQL Server 2022 for x64-based Systems (CU 23) | Mar 10, 2026 | High | 2 | 0 | CVE-2026-21262 |
| [KB5077465](https://patchblox.com/security/data/fix/microsoft/kb5077465.md) | Microsoft SQL Server 2022 for x64-based Systems (GDR) | Mar 10, 2026 | High | 2 | 0 | CVE-2026-21262 |
| [KB5077469](https://patchblox.com/security/data/fix/microsoft/kb5077469.md) | Microsoft SQL Server 2019 for x64-based Systems (CU 32) | Mar 10, 2026 | High | 2 | 0 | CVE-2026-21262 |
| [KB5077470](https://patchblox.com/security/data/fix/microsoft/kb5077470.md) | Microsoft SQL Server 2019 for x64-based Systems (GDR) | Mar 10, 2026 | High | 2 | 0 | CVE-2026-21262 |
| [KB5077471](https://patchblox.com/security/data/fix/microsoft/kb5077471.md) | Microsoft SQL Server 2017 for x64-based Systems (CU 31) | Mar 10, 2026 | High | 2 | 0 | CVE-2026-21262 |
| [KB5077472](https://patchblox.com/security/data/fix/microsoft/kb5077472.md) | Microsoft SQL Server 2017 for x64-based Systems (GDR) | Mar 10, 2026 | High | 2 | 0 | CVE-2026-21262 |
| [KB5077473](https://patchblox.com/security/data/fix/microsoft/kb5077473.md) | Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack | Mar 10, 2026 | High | 2 | 0 | CVE-2026-21262 |
| [KB5077474](https://patchblox.com/security/data/fix/microsoft/kb5077474.md) | Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) | Mar 10, 2026 | High | 2 | 0 | CVE-2026-21262 |
| [KB5078738](https://patchblox.com/security/data/fix/microsoft/kb5078738.md) | Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2 and 1 more | Mar 10, 2026 | High | 1 | 0 | CVE-2026-23674 |
| [KB5084597](https://patchblox.com/security/data/fix/microsoft/kb5084597.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more | Mar 10, 2026 | High | 3 | 0 | CVE-2026-25173 |
| [KB5002846](https://patchblox.com/security/data/fix/microsoft/kb5002846.md) | Office Online Server | Mar 10, 2026 | High | 4 | 0 | CVE-2026-26108 |
| [KB5002849](https://patchblox.com/security/data/fix/microsoft/kb5002849.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Mar 10, 2026 | High | 4 | 0 | CVE-2026-26108 |
| [KB5002718](https://patchblox.com/security/data/fix/microsoft/kb5002718.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Mar 10, 2026 | High | 1 | 0 | CVE-2026-26108 |

## macOS updates

| Fix | Products | Released | Priority | CVEs | Exploited | Top CVE |
|---|---|---|---|---:|---:|---|
| [Tahoe 26.4](https://patchblox.com/security/data/fix/macos/tahoe-26.4.md) | Tahoe | Mar 24, 2026 | Urgent | 83 | 0 | CVE-2026-28827 |
| [Sequoia 15.7.5](https://patchblox.com/security/data/fix/macos/sequoia-15.7.5.md) | Sequoia | Mar 24, 2026 | Urgent | 60 | 0 | CVE-2026-28827 |
| [Sonoma 14.8.5](https://patchblox.com/security/data/fix/macos/sonoma-14.8.5.md) | Sonoma | Mar 24, 2026 | Urgent | 56 | 0 | CVE-2026-28827 |

## Linux, by distribution

| Distribution | Fixes | CVEs | Fixes with exploited CVEs | Patch now |
|---|---:|---:|---:|---:|
| Ubuntu | 1,327 | 171 | 0 | 0 |
| Debian | 784 | 749 | 3 | 3 |
| sles | 172 | 576 | 4 | 4 |
| Red Hat | 152 | 272 | 0 | 0 |
| ol | 116 | 386 | 0 | 0 |
| opensuse-leap | 109 | 911 | 1 | 1 |
| almalinux | 102 | 156 | 0 | 0 |
| amzn | 91 | 545 | 0 | 0 |
| rocky | 76 | 101 | 1 | 1 |
| Fedora | 23 | 55 | 0 | 0 |

## Most urgent Linux advisories

| Fix | Products | Released | Priority | CVEs | Exploited | Top CVE |
|---|---|---|---|---:|---:|---|
| [RLSA-2023:5537](https://patchblox.com/security/data/fix/linux/rlsa-2023-5537.md) | libvpx on rocky 8 | Mar 18, 2026 | Patch now | 2 | 1 | CVE-2023-5217 |
| [OPENSUSE-SU-2026:20323-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20323-1.md) | roundcubemail on opensuse-leap 16.0 | Mar 5, 2026 | Patch now | 4 | 1 | CVE-2025-68461 |
| [DEBIAN-CVE-2026-3910](https://patchblox.com/security/data/fix/linux/debian-cve-2026-3910.md) | chromium on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14 | Mar 13, 2026 | Patch now | 1 | 1 | CVE-2026-3910 |
| [DSA-6165-1](https://patchblox.com/security/data/fix/linux/dsa-6165-1.md) | chromium on Debian 12.15 (bookworm), Debian 13.5 (trixie) | Mar 16, 2026 | Patch now | 1 | 1 | CVE-2026-3909 |
| [DEBIAN-CVE-2026-3909](https://patchblox.com/security/data/fix/linux/debian-cve-2026-3909.md) | chromium, webkit2gtk, wpewebkit on Debian 13.5 (trixie), Debian 14 | Mar 13, 2026 | Patch now | 1 | 1 | CVE-2026-3909 |
| [SUSE-SU-2026:1081-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1081-1.md) | kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7 | Mar 26, 2026 | Patch now | 155 | 1 | CVE-2025-39964 |
| [SUSE-SU-2026:0962-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0962-1.md) | kernel-livepatch-SLE15-SP7-RT_Update_10 on sles 15.7 | Mar 23, 2026 | Patch now | 153 | 1 | CVE-2025-39964 |
| [SUSE-SU-2026:1041-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1041-1.md) | dtb-aarch64, kernel-64kb, kernel-debug and 10 more on opensuse-leap 15.6, sles 15.6 | Mar 25, 2026 | Patch now | 27 | 1 | CVE-2025-39964 |
| [SUSE-SU-2026:20635-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20635-1.md) | kernel-livepatch-SLE16_Update_0 on sles 16.0 | Mar 4, 2026 | Patch now | 6 | 1 | CVE-2025-38352 |
| [inetutils-ftp 2:1.9.4-11ubuntu0.2+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-inetutils-ftp-2-1.9.4-11ubuntu0.2-esm4.md) | inetutils-ftp on Ubuntu 20.04 LTS (focal) | Mar 16, 2026 | Urgent | 3 | 0 | CVE-2026-32746 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
