A total of seventy-one (71) vulnerabilities and four (4) zero-day Windows vulnerabilities were included in this past patch Tuesday’s release. The zero-day vulnerabilities have been assigned the CVE identifiers CVE-2021-40449, CVE-2021-41335, CVE-2021-40469, CVE-2021-41338. The first vulnerability, CVE-2021-40449, was the only one that has been actively exploited in the wild. The issue exists in the Win32k kernel driver and was discovered by Kaspersky after being used to target IT companies, defense contractors, and diplomatic entities. Code similarity and reuse of command-and-control (C2) infrastructure led Kaspersky to attribute the attacks to the Chinese-speaking APT IronHusky. Other notable vulnerabilities patched this week include a remote code execution in Microsoft Exchange, Windows Hyper-V, SharePoint Server, and Microsoft Word. Microsoft urges Windows users, as well as server administrators, to update their products to the latest versions released in Tuesday’s patch.