Microsoft closes 83 vulnerabilities in the March release

Microsoft has closed 83 vulnerabilities in the March 2026 security release. Six of them are rated more likely to be exploited, while the remainder are rated less likely.

What this means for your organisation

Monthly patch cycles are routine, which is exactly why it is worth looking at how the routine actually performs. Microsoft's own exploitability rating is the best sorting key you have: the six marked more likely to be exploited should go out ahead of the rest. What usually fails is not the decision to patch, but that nobody checks what share of the estate actually received the update, and what is still outstanding three weeks later.

Berigo recommends

• Prioritise the six vulnerabilities Microsoft marks as more likely to be exploited and deploy those first.
• Measure coverage after rollout and chase the machines and servers that did not take the update.
• Catch the systems that sit outside the normal patch routine, typically older servers and machines tied to production equipment.
• Report patch status to management as a standing figure, not as a one-off overview when something goes wrong.