Microsoft says hackers are exploiting critical zero-day bugs to target Windows and Office users

Microsoft patched critical zero-day vulnerabilities in Windows and Office that hackers are actively exploiting. The flaws allow attackers to bypass security features and execute malware through one-click attacks—either by tricking users into clicking malicious links or opening infected Office files. CVE-2026-21510 affects all Show more