Microsoft Patches Record 622 Flaws, Two Zero-Days Exploited

Microsoft released its largest Patch Tuesday update on record, addressing a total of 622 vulnerabilities. This significant release more than triples the previous high of approximately 200 vulnerabilities patched in June. Among the 622 fixes are two zero-day vulnerabilities that attackers are already actively exploiting in the wild.

Microsoft has credited incident responders for identifying and reporting both of the actively exploited zero-day flaws. The company's Security Update Guide lists the total count of CVEs addressed in this update. The urgency of these patches is underscored by the fact that these vulnerabilities were not only discovered but were already being leveraged by malicious actors before Microsoft could issue a fix.

While the specific details of the vulnerabilities and the affected products were not immediately available in the initial announcement, the sheer volume of patches indicates a broad range of security issues across Microsoft's software ecosystem. The company's commitment to addressing security threats is evident in the scale of this update, particularly in prioritizing the remediation of vulnerabilities that are under active attack. Users and organizations are strongly advised to apply these updates as soon as possible to mitigate the risk of exploitation.