Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities
A record 169 security weaknesses in Microsoft's product range were fixed via updates on Tuesday, including one that has been actively exploited in the wild.
Eight of these 169 vulnerabilities are classified Critical, three are rated Moderate, one is rated Low, and 157 are rated Important. Ninety-three of the vulnerabilities are categorized as privilege escalation, followed by information disclosure (21), remote code execution (21), security feature bypass (14), spoofing (10), and denial-of-service (9).
Four non-Microsoft-issued CVEs affecting AMD (CVE-2023-20585), Node.js (CVE-2026-21637), Windows Secure Boot (CVE-2026-25250), and Git for Windows (CVE-2026-32631) are included among the 169 vulnerabilities. Since the release of the update last month, 78 vulnerabilities in its Edge br...