CVE-2026-21536
CVSS 9.8 CRITICAL: microsoft Devices Pricing Program Remote Code Execution Vulnerability EPSS 2% (72º percentile).
Vulnerabilità ed exploit
Microsoft ha rilasciato il Patch Tuesday di marzo che risolve 82 CVE. Tra le patch ci sono un Critical RCE in Microsoft Devices Pricing Program (CVE-2026-21536) e un Critical elevation-of-privilege nel Payment Orchestrator Service (CVE-2026-26125).
1 fonte · 10 mar
CVSS 9.8 CRITICAL: microsoft Devices Pricing Program Remote Code Execution Vulnerability EPSS 2% (72º percentile).
CVSS 8.6 HIGH: payment Orchestrator Service Elevation of Privilege Vulnerability EPSS 1% (64º percentile).
CrowdStrike
March 2026 Patch Tuesday: Updates and Analysis | CrowdStrike
Microsoft's March 2026 Patch Tuesday addresses 82 CVEs, featuring eight Critical vulnerabilities.
originaleRiepilogo fornitore: Microsoft
Part of the PlainSec briefing for 2026-03-10
Every edition of this story: Patch di marzo: correzione di vulnerabilità cloud critiche