Microsoft March 2026 Patch Tuesday Fixes 84 Vulnerabilities Including Azure MCP Server SSRF Flaw

Summary

Microsoft's March 2026 Patch Tuesday addressed 84 security vulnerabilities across its product portfolio, including two publicly disclosed zero-days. The update covers 46 privilege escalation flaws, 18 remote code execution bugs, 10 information disclosure issues, four spoofing vulnerabilities, four denial-of-service flaws, and two security feature bypasses. One notable zero-day involves a link-following condition in the Winlogon process that allows a locally authenticated attacker with low privil