--- title: Microsoft's February 2026 Patch Tuesday: Addressing Six... description: February 2026 Patch Tuesday addresses 59 vulnerabilities across Microsoft products, including six actively exploited zero-day flaws. Critical patches include... canonical: https://daily.dev/posts/microsoft-s-february-2026-patch-tuesday-addressing-six-zero-day-vulnerabilities-and-critical-ai-rel-zk4rm0pbv twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Microsoft's February 2026 Patch Tuesday: Addressing Six Zero-Day Vulnerabilities and Critical AI-Related Flaws | daily.dev og:description: February 2026 Patch Tuesday addresses 59 vulnerabilities across Microsoft products, including six actively exploited zero-day flaws. Critical patches include... og:url: https://daily.dev/posts/microsoft-s-february-2026-patch-tuesday-addressing-six-zero-day-vulnerabilities-and-critical-ai-rel-zk4rm0pbv og:image: https://api.daily.dev/og/posts/zk4Rm0PBv.png og:image:alt: Microsoft's February 2026 Patch Tuesday: Addressing Six Zero-Day Vulnerabilities and Critical AI-Related Flaws og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Microsoft's February 2026 Patch Tuesday: Addressing Six Zero-Day Vulnerabilities and Critical AI-Related Flaws **[Collections](https://daily.dev/sources/collections)** · 2 min read · 1 upvotes · 0 comments ## Summary February 2026 Patch Tuesday addresses 59 vulnerabilities across Microsoft products, including six actively exploited zero-day flaws. Critical patches include fixes for Windows Shell, MSHTML, Desktop Window Manager, and Remote Desktop Services vulnerabilities. An emergency patch was released for CVE-2026-21509, exploited by APT28 in targeted attacks. SAP patched critical code injection flaws in CRM and S/4HANA, while GitHub Copilot and major IDEs received fixes for AI prompt injection vulnerabilities. Adobe, Cisco, and Fortinet also released security updates, emphasizing the need for immediate patch deployment. ## Content February 2026's Patch Tuesday brings forth crucial updates targeting a multitude of security vulnerabilities across various platforms, with particular emphasis on six zero-day flaws actively exploited in the wild. Microsoft has addressed 59 vulnerabilities affecting Windows 10, Windows 11, and various server versions, alongside Office components. Notably, the updates resolve security feature bypasses within Windows Shell, MSHTML, and Microsoft Word, as well as privilege escalation flaws in Desktop Window Manager and Remote Desktop Services, vulnerabilities that have been the target of real-world attacks. Importantly, an out-of-band patch was issued for CVE-2026-21509, a zero-day exploited by APT28 in targeted assaults against Eastern European individuals, stressing the need for immediate attention by organizations. Beyond Microsoft's updates, SAP has mitigated critical code injection vulnerabilities in their CRM and S/4HANA systems, indicative of broader implications in enterprise environments. Furthermore, critical remote code execution flaws linked to AI prompt injection vulnerabilities were patched in GitHub Copilot and multiple integrated development environments (IDEs) like Visual Studio, VS Code, and JetBrains, emphasizing the potential security risks developers face due to these issues. Moreover, Adobe, Cisco, and Fortinet have also pushed out several important security patches for their respective software, further underscoring the need for organizations to diligently apply these patches following their standard procedures. Microsoft's February 2026 Patch Tuesday underscores the complex and evolving nature of cybersecurity threats, highlighting a significant increase in actively exploited zero-days compared to the previous month. Admins and security teams are advised to prioritize these updates, particularly those with publicly disclosed exploits or proof-of-concept code in circulation, to bolster their defenses against potential attacks. ## Similar posts on daily.dev - [February 2026 Patch Tuesday: Six new and actively exploited Microsoft vulnerabilities addressed](https://daily.dev/posts/february-2026-patch-tuesday-six-new-and-actively-exploited-microsoft-vulnerabilities-addressed-uxvhpzt2r) · CSO Online · 0 upvotes · 0 comments - [Microsoft Patch Tuesday, March 2026 Edition – Krebs on Security](https://daily.dev/posts/microsoft-patch-tuesday-march-2026-edition-krebs-on-security-vio6duyhq) · Krebs on Security · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#microsoft](https://daily.dev/tags/microsoft), [#github](https://daily.dev/tags/github), [#vulnerability](https://daily.dev/tags/vulnerability), [#vscode](https://daily.dev/tags/vscode) [View this post on daily.dev](https://daily.dev/posts/microsoft-s-february-2026-patch-tuesday-addressing-six-zero-day-vulnerabilities-and-critical-ai-rel-zk4rm0pbv) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Microsoft's February 2026 Patch Tuesday: Addressing Six Zero-Day Vulnerabilities and Critical AI-Related Flaws","url":"https://daily.dev/posts/microsoft-s-february-2026-patch-tuesday-addressing-six-zero-day-vulnerabilities-and-critical-ai-rel-zk4rm0pbv","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/microsoft-s-february-2026-patch-tuesday-addressing-six-zero-day-vulnerabilities-and-critical-ai-rel-zk4rm0pbv"},"datePublished":"2026-02-10T22:13:55.169Z","dateModified":"2026-02-16T15:14:36.989Z","description":"February 2026 Patch Tuesday addresses 59 vulnerabilities across Microsoft products, including six actively exploited zero-day flaws. Critical patches include...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b047441b8a036e27d267a5037ef36bf8?_a=AQAEunF","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b047441b8a036e27d267a5037ef36bf8?_a=AQAEunF","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/microsoft-s-february-2026-patch-tuesday-addressing-six-zero-day-vulnerabilities-and-critical-ai-rel-zk4rm0pbv","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,microsoft,github,vulnerability,vscode","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Microsoft's February 2026 Patch Tuesday: Addressing Six Zero-Day Vulnerabilities and Critical AI-Related Flaws"}]} ```