Microsoft Patch Tuesday matches last year’s zero-day high with six actively exploited vulnerabilities

Microsoft’s February 2026 Patch Tuesday fixes 59 vulnerabilities, including six zero-day flaws that were actively exploited before the update; among them are two CVSS 9.8 critical issues and multiple high/8.8-rated security-feature-bypass defects that facilitate phishing and code execution, prompting CISA to add the zero-days to its known exploited vulnerabilities catalog.