EXECUTIVE SUMMARY
Microsoft’s February 2026 Patch Tuesday fixes 54 vulnerabilities, including six actively exploited zero-days affecting Windows, Office, Exchange, and Azure. Immediate patching is critical, as attackers are leveraging security bypass and privilege escalation flaws to gain SYSTEM-level control and compromise enterprise environments.
- Active Region: Global
- Affected Sector: Enterprise IT, Cloud Infrastructure, Government, and Endpoints
- Affected Product: Microsoft Windows, Microsoft Office (Word/Outlook/Excel), Microsoft Exchange Server, Azure Services, GitHub Copilot, Visual Studio Code
- Severity: Critical(2), High(50), Medium(2)
CVE LIST
- ……



