Microsoft Releases Security Updates for 398 Vulnerabilities, Including Actively Exploited Flaw

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today. The company issued both out-of-band and regular security updates to address the flaws, which span Windows OS components and associated Microsoft products. One vulnerability is confirmed under active exploitation, while two others were already public knowledge before the patch cycle, raising the likelihood of rapid weaponization. Security researchers and IT teams are urged to prioritize patching, particularly for the actively exploited flaw, to mitigate the risk of remote code execution, elevation of privilege, and security feature bypass. The full list of CVEs and detailed mitigation guidance are available in Microsoft's Security Update Guide.