Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited Zero-Days
Summary: Microsoft released security updates on Tuesday addressing 59 flaws across its software, including six vulnerabilities it said have been exploited in the wild. Five flaws are rated Critical, 52 Important, and two Moderate, with privilege escalation (25) and remote code execution (12) making up the largest categories, and CISA added all six exploited vulnerabilities to its KEV catalog with a March 3, 2026 deadline for FCEB agencies.
Key Takeaway: CrowdStrike, which reported CVE-2026-21533, said it does not attribute the exploitation to a specific adversary but expects actors holding the exploit binaries to ramp up efforts to use or sell them soon - and that binary swaps a service configuration key to add a new user to the Administrator group.