Bugs in Visual Studio, Visual Studio Code are the least of it Share Copy Patch Tuesday A week after Microsoft warned that four zero-day flaws and three others in its Exchange Server were being actively exploited and issued out-of-band remediation, the cloudy Windows biz has delivered software fixes to address 82 other vulnerabilities as part of its monthly Patch Tuesday ritual. All told, that makes 89 CVEs for the month, 14 of which have been deemed critical. Microsoft says two of these vulnerabilities (CVE-2021-26411 and CVE-2021-27077) are publicly known and five are under active exploitation (CVE-2021-26411, CVE-2021-26855, CVE-2021-26857, CVE-2021-27065, and CVE-2021-26858).