Microsoft · Security update · March 10, 2026

KB5084597: March 2026 security update

KB5084597, released March 10, 2026, fixes 3 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0100
62nd percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2026-25172 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0100 Exploitation Less Likely
High CVE-2026-25173 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0100 Exploitation Less Likely
High CVE-2026-26111 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0090 Exploitation Less Likely
Showing 1 to 3 of 3 1