CISA adds six Microsoft zero-days to its KEV catalog, confirming active exploitation. The flaws include security bypass bugs and a Remote Desktop privilege escalation issue.