Microsoft patches a record 206 flaws—and one is already being exploited
AI-summarised brief · reviewed before publication
Microsoft has patched a record 206 security flaws, including 19 critical remote code execution vulnerabilities affecting Windows kernel and HTTP services. One vulnerability in Microsoft Defender is being actively exploited, allowing attackers to gain system-level privileges. The updates address 74 Chromium vulnerabilities in Edge, eight Exchange Server flaws, and critical Secure Boot weaknesses. A total of 38 vulnerabilities are classified as critical, while the remainder are designated as high risk. The patches affect various Windows versions, Exchange Server, and Microsoft's cloud services. The exploited vulnerability is in Microsoft Defender, with a patched engine version available.
💡 Why It Matters
- · The active exploitation of a Microsoft Defender vulnerability underscores the urgency of keeping security software up to date.
- · Patching critical Secure Boot weaknesses prevents malicious code execution during system startup.