Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Microsoft has released its monthly security updates, addressing a total of 398 flaws, including a zero-day vulnerability in a Windows driver. The vulnerability, tracked as CVE-2026-68820 with a CVSS score of 7.0, is located in a core Windows kernel driver responsible for handling network socket operations. This flaw is being actively exploited in attacks, allowing an attacker with existing code on a machine to escalate to SYSTEM level. The patch for this vulnerability is being prioritized. The affected driver is a key component of the Windows operating system. The vulnerability's exploitation requires the attacker to already have code running on the targeted machine.