Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild. These include 723 flaws in Windows, 111 in Office and Office 2016, 62 in SQL, and 22 in Developer Tools. Of these, over 110 shortcomings have been assigned a critical severity rating.

Report facts: Microsoft has released patches for 974 vulnerabilities across its software portfolio, including Windows, Office, SQL, and Developer Tools, with more than 110 rated critical and two Windows zero‑days confirmed as actively exploited. RealGround analysis: While the article does not mention AI systems directly, these widely used Microsoft components underpin many AI workloads and agent infrastructures, so unpatched flaws can be exploited to compromise host environments, data, and software supply chains around AI systems. Organizations running AI services on Microsoft stacks should treat this as a supply‑chain and infrastructure risk, prioritize rapid patching, and maintain SBOM‑level visibility to understand which AI applications are exposed. Ongoing red‑teaming of AI deployments on Windows/Office/SQL can help detect abuse paths that leverage underlying OS and application vulnerabilities.