Inside Microsoft's Security Storm: Massive Update Targets Critical Kernel Zero-Day
Microsoft has issued a monumental security update to address 398 separate vulnerabilities across its software ecosystem. The most urgent fix targets CVE-2026-68820, a zero-day vulnerability residing in the core Windows kernel driver for network sockets that is currently being exploited in the wild. This flaw enables local attackers to gain SYSTEM-level privileges on compromised machines. Furthermore, the update resolves four critical unauthenticated Remote Code Execution (RCE) flaws, each rated at a 9.8 severity score, which could allow malicious actors to take over systems remotely without requiring user credentials.