Microsoft has released fixes for more than 60 vulnerabilities in its products for its September 2022 Patch Tuesday release, including one zero day in Windows Common Log File System Driver that is being actively exploited. According to cybersecurity organizations, the Patch Tuesday release fixes issues in a wide range of Microsoft products, ranging from Azure, Office components, a variety of Windows tools and more. Remote code execution and elevation of privilege bugs making up the bulk of the vulnerabilities disclosed and fixed by Microsoft this month. CVE-2022-37969 – Windows Common Log File System Driver Elevation of Privilege Vulnerability The only bug listed as publicly known and under active attack is the CLFS Driver flaw, which Microsoft says has been exploited in the wild and was publicly disclosed before the patch was available. Microsoft says successful exploitation could result in an attack gaining SYSTEM privileges.