Microsoft February 2026 Patch Tuesday fixes 6 zero-days, 58 flaws

Microsoft's February 2026 Patch Tuesday fixes 58 vulnerabilities across Windows and cloud components, including six actively exploited zero-days (three publicly disclosed). The zero-days include security feature bypasses in Windows Shell, MSHTML, and Microsoft Word, plus elevation-of-privilege and denial-of-service flaws; several issues were attributed to MSTIC, MSRC, Google Threat Intelligence, CrowdStrike, and other researchers. Administrators are advised to apply updates promptly; Microsoft also began rolling out updated Secure Boot certificates.