February 2026 Patch Tuesday includes six actively exploited zero-days

Microsoft’s Patch Tuesday fixes 59 CVEs this month, including six actively exploited zero-days that affect Windows Shell, MSHTML, Word, Desktop Window Manager, Remote Access Connection Manager, and Remote Desktop Services (CVSS scores range from 5.5 to 8.8), plus two critical Azure vulnerabilities; the report describes impact (bypass, privilege escalation, DoS), exploitation conditions (network vs. local, required user interaction), and provides step-by-step update guidance to remediate these issues.