Microsoft issued a significant security update that includes a fix for an actively exploited zero-day vulnerability in SharePoint and patches for 160 additional vulnerabilities. The update is notable for its volume of addressed CVEs, marking it as the second-largest Patch Tuesday by CVE count. Specific technical details about the vulnerabilities or their exploitation methods are not included in the provided information. No patch links or vendor advisory details are provided to confirm patch availability or remediation guidance.

The presence of an exploited zero-day in SharePoint indicates a real risk of compromise for affected systems if unpatched. The large number of additional vulnerabilities suggests a broad risk surface that could impact confidentiality, integrity, or availability depending on the individual flaws. However, no known exploits in the wild have been reported beyond the SharePoint zero-day at this time.

Patch status is not explicitly confirmed in the provided data. It is recommended to consult the official Microsoft security advisories and update channels to obtain and apply the relevant patches promptly. Until patches are applied, organizations should monitor official sources for further guidance and consider temporary mitigations if available.