
March Patch Tuesday: Three high severity holes in Microsoft Office
Three high severity holes in Microsoft’s Office suite headline the 78 issues listed in the March Patch Tuesday releases, which, grateful CSOs will notice, contain no surprise zero day vulnerabilities. Still, Jack Bicer, director of vulnerability research at Action1, says these Office-related flaws should be treated “with urgency.” “Productivity tools remain one of the most common entry points for attackers,” he explained, “and vulnerabilities that can be triggered through routine document handling continue to expand the attack surface inside corporate networks.” One of the most notable of the three issues, he said, is the Excel Information Disclosure Vulnerability (CVE-2026-26144). This flaw...