{"id":212094,"date":"2026-02-10T16:59:00","date_gmt":"2026-02-10T21:59:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/02\/10\/patch-tuesday-february-2026-edition-krebs-on-security\/"},"modified":"2026-02-10T17:25:09","modified_gmt":"2026-02-10T22:25:09","slug":"patch-tuesday-february-2026-edition-krebs-on-security","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/02\/10\/patch-tuesday-february-2026-edition-krebs-on-security\/","title":{"rendered":"Patch Tuesday, February 2026 Edition \u2013 Krebs on Security"},"content":{"rendered":"<p><a href=\"https:\/\/krebsonsecurity.com\/2026\/02\/patch-tuesday-february-2026-edition\/\">Patch Tuesday, February 2026 Edition \u2013 Krebs on Security<\/a><\/p>\n<p><a href=\"https:\/\/krebsonsecurity.com\/2026\/02\/patch-tuesday-february-2026-edition\/\">https:\/\/krebsonsecurity.com\/2026\/02\/patch-tuesday-february-2026-edition\/<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-02-10 16:59:00<\/a><\/p>\n<p>Source Domain: <a href=\"krebsonsecurity.com\">krebsonsecurity.com<\/a><\/p>\n<p><strong>Microsoft<\/strong> today released updates to fix more than 50 security holes in its <strong>Windows<\/strong> operating systems and other software, including patches for a whopping six \u201czero-day\u201d vulnerabilities that attackers are already exploiting in the wild.<\/p>\n<\/p>\n<p>Zero-day #1 this month is CVE-2026-21510, a security feature bypass vulnerability in <strong>Windows Shell<\/strong> wherein a single click on a malicious link can quietly bypass Windows protections and run attacker-controlled content without warning or consent dialogs. CVE-2026-21510 affects all currently supported versions of Windows.<\/p>\n<p>The zero-day flaw\u00a0CVE-2026-21513 is a\u00a0security bypass bug targeting <strong>MSHTML<\/strong>, the proprietary engine of the default Web browser in Windows. CVE-2026-21514 is a related security feature bypass in <strong>Microsoft Word.<\/strong><\/p>\n<p>The zero-day CVE-2026-21533 allows local attackers to elevate their user privileges to \u201cSYSTEM\u201d level access in <strong>Windows Remote Desktop Services<\/strong>. CVE-2026-21519 is a zero-day elevation of privilege flaw in the <strong>Desktop Window Manager<\/strong> (DWM), a key component of Windows that organizes windows on a user\u2019s screen. Microsoft fixed a different zero-day in DWM just last month.<\/p>\n<p>The sixth zero-day is CVE-2026-21525, a potentially disruptive denial-of-service vulnerability in the <strong>Windows Remote Access Connection Manager<\/strong>, the service responsible for maintaining VPN connections to corporate networks.<span id=\"more-73188\"\/><\/p>\n<p><strong>Chris Goettl<\/strong> at <strong>Ivanti<\/strong> reminds us Microsoft has issued several out-of-band security updates since January\u2019s Patch Tuesday. On January 17, Microsoft pushed a fix that resolved a credential prompt failure when attempting remote desktop or remote application connections. On January 26, Microsoft patched a zero-day security feature bypass vulnerability (CVE-2026-21509) in <strong>Microsoft Office<\/strong>.<\/p>\n<p><strong>Kev Breen<\/strong> at <strong>Immersive<\/strong> notes that this month\u2019s Patch Tuesday includes several fixes for remote code execution vulnerabilities affecting <strong>GitHub Copilot<\/strong> and multiple integrated development environments (IDEs), including&#8230;<\/strong><\/p>\n<p><a href=\"https:\/\/krebsonsecurity.com\/2026\/02\/patch-tuesday-february-2026-edition\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Patch Tuesday, February 2026 Edition \u2013 Krebs on Security https:\/\/krebsonsecurity.com\/2026\/02\/patch-tuesday-february-2026-edition\/ Publish Date: 2026-02-10 16:59:00 Source&#8230;<\/p>\n","protected":false},"author":1,"featured_media":212095,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2022\/07\/winupdatedate.png","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[27],"class_list":["post-212094","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/212094"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=212094"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/212094\/revisions"}],"predecessor-version":[{"id":212096,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/212094\/revisions\/212096"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/212095"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=212094"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=212094"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=212094"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}