Exploited in the wild Windows patch-tuesday Office Microsoft zero-day
Microsoft выпустила патчи для почти 1000 уязвимостей
CVE Tools coverage
Microsoft issued its largest Security Update release to date, resolving 966 vulnerabilities across major products like Windows, Office, and Exchange Server. Two zero-day flaws, CVE-2026-85880 and CVE-2026-81963, are currently being exploited in the wild; both allow local privilege escalation within Windows ALPC and the Update Stack respectively. Users should prioritize installing these updates to mitigate active threats.