Microsoft issues patches for 56 security flaws - all 'important' severity or above

Fingertip pressing keyboard key with Windows logo on it.

• Microsoft Patch Tuesday fixes 56 vulnerabilities, including one actively exploited zero-day
• Key flaws: CVE-2025-62221 privilege escalation, Copilot RCE, PowerShell Invoke-WebRequest RCE
• Updates bring Copilot UI tweaks, File Explorer fixes, and PowerShell warnings

Microsoft has released this month’s Patch Tuesday cumulative update, fixing a total of 56 vulnerabilities found across the Windows ecosystem. All of the bugs are labeled at least ‘important’ in severity, and one of them is being actively exploited in the wild as a zero-day.