Zero-days in .NET and SQL Server, and a handful of critical RCE bugs, form the nucleus of Microsoft's March Patch Tuesday update.
CVE-2026-21262, a SQL Server elevation-of-privilege zero-day rated CVSS 8.8, had its origins in an unlikely place: a technical article titled “Packaging Permissions in Stored Procedures” by database ...