Microsoft Patches 58 Vulnerabilities, Six Zero-Days

Microsoft released its monthly security updates on February 10, 2026, addressing 58 vulnerabilities across Windows, Office, Azure, and other components, including six zero-day flaws actively exploited by attackers in the wild.

The patches cover a range of issues, with 25 elevation-of-privilege vulnerabilities, 12 remote code execution bugs, five security feature bypasses, three denial-of-service flaws, six information disclosures, and seven spoofing vulnerabilities. Five of the vulnerabilities are rated critical, primarily affecting Azure services such as Azure Arc, Azure Front Door, Azure Functions, and Azure Container Instances. The updates also target products like Exchange Server, Internet Explorer, the Windows Subsystem for Linux, Hyper-V, and Microsoft Edge. None of the exploited zero-days are classified as critical, but all carry high severity scores between 6.5 and 8.8.

Among the most pressing fixes are the six zero-days, three of which were publicly disclosed prior to the release. CVE-2026-21510, a security feature bypass in the Windows Shell with a CVSS score of 7.5, allows attackers to evade SmartScreen protections by tricking users into opening malicious links or...