Microsoft Publishes Security Updates for Windows 10, 11, and Server

As part of its February 2026 Patch Tuesday cycle, Microsoft released security updates addressing 59 vulnerabilities across supported versions of Windows and related products, according to the Microsoft Security Update Guide.

The updates apply to:

• Windows 10 and Windows 11 clients
• Windows Server platforms
• Select Microsoft applications and services

Microsoft reported no actively exploited zero-day vulnerabilities in this release. However, several fixes address Critical and Important–rated issues affecting core Windows components and widely deployed enterprise software.

High-severity vulnerabilities addressed in the February 2026 release include:

• Windows Hyper-V Remote Code Execution Vulnerabilities (Critical, tracked as CVE-2026-21244, CVE-2026-21247 & CVE-2026-21248)
• CVE-2026-21239 — Windows Kernel Elevation of Privilege Vulnerability (Important)
• CVE-2026-21237 — Windows Subsystem for Linux Elevation of Privilege Vulnerability (Important)

The Hyper-V vulnerabilities are among the most severe issues addressed this month, as they could allow code execution in virtualized environments if exploited under specific conditions. These flaws are particularly relevant for enterprise and cloud deployments that rely on Hyper-V for virtualization and isolation.

The elevation-of-privilege issues affect core Windows components, including the Windows kernel and Windows Subsystem for Linux. Successful exploitation could allow a locally authorized attacker to gain higher privileges by abusing memory handling flaws or race conditions, increasing the potential impact in multi-user or shared environments.

The February update cycle also includes fixes for spoofing, information disclosure, denial-of-service, and security feature bypass vulnerabilities affecting a broad set of Microsoft products and services.

Affected products and components highlighted in Microsoft’s advisories include:

• Microsoft Office applications, including Outlook, Excel, and Word
• Microsoft Exchange Server
• Windows networking and graphics subsystems
• Developer tools, including Visual Studio and GitHub Copilot
• Azure-related services and components used in enterprise and cloud environments

Microsoft states that all vulnerabilities documented for this Patch Tuesday release are addressed through the provided security updates. Users, administrators, and organizations running supported Windows systems are advised to review the Microsoft Security Update Guide and ensure applicable updates are deployed across affected systems and environments.