windows patch march 2026

  1. CVE-2026-23674 MapUrlToZone Bypass Patched in March 2026 Update

    Microsoft has published an advisory for CVE-2026-23674 — a MapUrlToZone security feature bypass in Windows — and the March 2026 updates include a patch that addresses an improper resolution of path equivalence in the MapUrlToZone API that can allow remote resources to be incorrectly classified...