Microsoft Patched 6 Actively Exploited Zero-Day Flaws

Microsoft’s August Patch Tuesday released fixes for 90 CVEs, including six zero-days that were being actively exploited across Windows components (kernel, Power Dependency Coordinator), Microsoft Office Project, and Edge/IE mode, plus multiple Chromium-origin issues affecting Edge and Chrome; NIST flagged two CVEs as critical and one notable Windows Update elevation-of-privilege (CVE-2024-38202) remains unpatched. Administrators should prioritize applying Microsoft updates and ensure browsers are updated to mitigate remote code execution, privilege escalation, and SmartScreen bypass risks.