59 vulnerabilities patched including six actively exploited zero-days. Critical issues: Windows Shell MOTW bypass, Desktop Window Manager type confusion, RDP privilege escalation, Office Word security bypass, Exchange Server RCE. CISA added all six to Known Exploited Vulnerabilities catalog. Remediation deadline: March 3.