February Patch Tuesday lands with 57 fixes, including 3 critical and 6 actively exploited.
This month’s highlights:
- Windows Shell SFB (CVE-2026-21510) is exploited in the wild and lets attackers bypass SmartScreen with a malicious link or shortcut
- MSHTML SFB (CVE-2026-21513) can bypass file-execution prompts via booby-trapped HTML or .lnk files
- Microsoft Word SFB (CVE-2026-21514) lets crafted documents bypass COM/OLE protections, though not via Preview Panel
Get the full breakdown and run the audit to find outdated devices in your network
Microsoft Patch Tuesday – February 2026 - Lansweeper