Microsoft patches 63 flaws, including two exploited Windows vulnerabilities (CVE-2025–21391, CVE-2025–21418). CISA requires fixes by March 4.