Microsoft Server security updates, February 2026 (Patch Tuesday 2026-02-10)
Every Microsoft server-product CVE that the Microsoft Security Update Guide published in February 2026, including the Patch Tuesday release on 2026-02-10 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.
- Advisories
- 31
- Critical
- 0
- High
- 27
- In CISA KEV
- 5
- CVEs
- 31
Microsoft server CVEs, February 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026High [CVE-2026-21510] Windows Shell Security Feature Bypass Vulnerability
High8.8ExploitedCISA KEV
- Feb 10, 2026High [CVE-2026-21513] MSHTML Framework Security Feature Bypass Vulnerability
High8.8ExploitedCISA KEV
- Feb 10, 2026High [CVE-2026-21533] Windows Remote Desktop Services Elevation of Privilege Vulnerability
High7.8ExploitedCISA KEV
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026
- Feb 10, 2026High [CVE-2026-21519] Desktop Window Manager Elevation of Privilege Vulnerability
High7.8ExploitedCISA KEV
- Feb 10, 2026
- Feb 10, 2026Medium [CVE-2026-21525] Windows Remote Access Connection Manager Denial of Service Vulnerability
Medium6.2ExploitedCISA KEV
- Feb 10, 2026
- Feb 10, 2026
Get an email when Microsoft publishes the next one.
See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.