Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Microsoft patched 398 flaws in its monthly security updates, including a Windows kernel driver zero-day (CVE-2026-68820, CVSS 7.0) under active attack. The bug allows attackers with code on a machine to escalate privileges to SYSTEM. The patch was prioritized for deployment. Users should apply the update immediately to mitigate the ongoing exploitation of this vulnerability in the wild.