Microsoft has released patches for 67 security vulnerabilities, including a critical WebDAV zero-day flaw that’s being actively exploited and could allow attackers to remotely execute code with elevated privileges on vulnerable systems.