A mountain of CVEs, a certificate cleanup, and yet more work for Microsoft's patching teams