Microsoft has released its security updates for 59 flaws, including an alarming six zero-day vulnerabilities, all of which are confirmed to be actively exploited in the wild. While the total number of flaws is lower than last month, the high volume of active exploits makes this one of the most critical Patch Tuesdays for enterprise environments in recent years.
Zero-Days Fixed
The February update prioritises six flaws that attackers are currently using to bypass security prompts, escalate privileges, and crash corporate VPN services,
- Active Security Feature Bypasses (The Phishing Trio)
- Privilege Escalation & System Takeover
- Service Disruption (VPN Risk)
Critical Vulnerabilities to Prioritise
Beyond the zero-days, five vulnerabilities received a "Critical" rating, specifically targeting cloud and server infrastructure,
- CVE-2026-21527 - Microsoft Exchange Server Spoofing/RCE - A critical vulnerability in Exchange that could allow an attacker to spoof sender identities or potentially achieve remote code execution on the mail server.
- CVE-2026-23655 - Azure Container Instances Information Disclosure - A high-impact flaw that could allow an attacker to leak sensitive data across container boundaries in shared Azure environments.
- CVE-2026-21518 - GitHub Copilot & VS Code RCE - A critical remote code execution flaw that targets developer workstations through malicious command injection.
Vulnerabilities by Category
The February 2026 updates addressed a total of 59 flaws, categorised as follows,
- Elevation of Privilege Vulnerabilities - 25
- Remote Code Execution Vulnerabilities - 12
- Spoofing Vulnerabilities - 7
- Information Disclosure Vulnerabilities - 6
- Security Feature Bypass Vulnerabilities - 5
- Denial of Service Vulnerabilities - 3
- Cross-Site Scripting Vulnerabilities - 1
- Total Flaws - 59
Need Help with Patch Management?
With six zero-days in active rotation, waiting to patch is no longer an option. NOCTeam provides real-time patch deployment and 24/7 monitoring to ensure your systems are protected before the "Zero-Day Avalanche" hits your network.
Contact us today at [email protected] for a 2026 security health check.
Originally published on LinkedIn.