Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

Microsoft released patches for a record 206 security vulnerabilities, including 56 remote code execution and 63 privilege escalation flaws.

• •CVE-2026-45657 (CVSS 9.8): Windows Kernel use-after-free enabling remote code execution via crafted network traffic
• •CVE-2026-44815 (CVSS 9.8): Windows DHCP Client buffer overflow allowing unauthorized code execution without user interaction
• •BitLocker security feature bypass vulnerabilities patched, including CVE-2026-45585 with a public PoC exploit called YellowKey
• •AI-assisted vulnerability discovery is driving the record patch number, expected to continue increasing

This summary was automatically generated by AI based on the original article and may not be fully accurate.