Fortra Patch Priority Index for March 2026

Fortra's March 2026 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft and Google.

Up first on the list are patches for Microsoft Edge (Chromium-based) that resolve buffer overflow, integer overflow, inappropriate implementation, and insufficient data validation vulnerabilities.

Next on the list are patches for Microsoft Office and Excel. These patches resolve 8 issues including elevation of privilege, remote code execution, and information disclosure vulnerabilities.

Up next are patches that affect components of the core Windows operating system. These patches resolve over 50 vulnerabilities, including elevation of privilege, information disclosure, denial of service, and remote code execution vulnerabilities. These vulnerabilities affect Kernel, GDI, Graphics Component, Device Association Service, RRAS, DWM Core, and various others.

Next are patches that address .NET and ASP.Net Core, including 2 denial of service and 1 elevation of privilege vulnerabilities.

Lastly, administrators should focus on server-side patches for Hyper-V, SMB Server, Active Directory, SharePoint, and SQL Server. These patches resolve 11 issues including remote code execution, elevation of privilege, and spoofing vulnerabilities.