Microsoft has released a total of 143 security patches, with two flaws being actively exploited in the wild. Five flaws are Critical, 136 are Important, and four are Moderate. The vulnerabilities impact Windows Hyper-V and the Microsoft HTML platform, among others. Threat actors are using specially-crafted Windows Internet Shortcut files to exploit the vulnerabilities. One flaw allows attackers to elevate privileges to SYSTEM level. A side-channel attack called FetchBench and a remote code execution bug in .NET and Visual Studio have also been addressed. Additional fixes include flaws in SQL Server, Secure Boot, PowerShell, and RADIUS protocol. A remote code execution flaw in Microsoft Office poses a high risk. These patches come as Microsoft introduces CVE identifiers for cloud-related vulnerabilities. Other vendors have also released security updates to address vulnerabilities.