CVE tracker

Microsoft Patch Tuesday

What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.

61vulnerabilities fixed (CVEs)

7of them critical

6exploited (zero-day)

3publicly disclosed

Tue, 10 Nov 2026Next Patch Tuesday
in 10 days and 0 hours

← Back to the month overview

All CVEs – Patch Tuesday February 2026

61 vulnerabilities

CVE-2026-21510ImportantCVSS 8.8Exploited (zero-day)Publicly disclosedSecurity feature bypass

Windows Shell Security Feature Bypass Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912 · MSRC

CVE-2026-21513ImportantCVSS 8.8Exploited (zero-day)Publicly disclosedSecurity feature bypass

MSHTML Framework Security Feature Bypass Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5077179 KB5075904 KB5075906 KB5075943 · MSRC

CVE-2026-21514ImportantCVSS 7.8Exploited (zero-day)Publicly disclosedSecurity feature bypass

Microsoft Word Security Feature Bypass Vulnerability

Microsoft Office · MSRC

CVE-2026-21519ImportantCVSS 7.8Exploited (zero-day)Elevation of privilege

Desktop Window Manager Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912 · MSRC

CVE-2026-21533ImportantCVSS 7.8Exploited (zero-day)Elevation of privilege

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5077179 KB5075904 KB5075906 KB5075943 · MSRC

CVE-2026-21525ModerateCVSS 6.2Exploited (zero-day)Denial of service

Windows Remote Access Connection Manager Denial of Service Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912 · MSRC

CVE-2026-24300CriticalCVSS 9.8Elevation of privilege

Azure Front Door Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-26119CriticalCVSS 8.8Elevation of privilege

Windows Admin Center Elevation of Privilege Vulnerability

Windows · MSRC

CVE-2026-24302CriticalCVSS 8.6Elevation of privilege

Azure Arc Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-21532CriticalCVSS 8.2Information disclosure

Azure Function Information Disclosure Vulnerability

Azure · MSRC

CVE-2026-21535CriticalCVSS 8.2Information disclosure

Microsoft Teams Information Disclosure Vulnerability

Microsoft Office · MSRC

CVE-2026-21522CriticalCVSS 6.7Elevation of privilege

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-23655CriticalCVSS 6.5Information disclosure

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

Azure · MSRC

CVE-2026-21531ImportantCVSS 9.8Remote code execution

Azure SDK for Python Remote Code Execution Vulnerability

Azure · MSRC

CVE-2026-21255ImportantCVSS 8.8Security feature bypass

Windows Hyper-V Security Feature Bypass Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5077179 KB5075904 KB5075906 KB5075943 · MSRC

CVE-2026-21256ImportantCVSS 8.8Remote code execution

GitHub Copilot and Visual Studio Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2026-21516ImportantCVSS 8.8Remote code execution

GitHub Copilot for Jetbrains Remote Code Execution Vulnerability

Other · MSRC

CVE-2026-21518ImportantCVSS 8.8Security feature bypass

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2026-21537ImportantCVSS 8.8Remote code execution

Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability

System Center and Defender · MSRC

CVE-2026-21228ImportantCVSS 8.1Remote code execution

Azure Local Remote Code Execution Vulnerability

Azure · MSRC

CVE-2026-21229ImportantCVSS 8.0Remote code execution

Power BI Remote Code Execution Vulnerability

SQL Server · MSRC

CVE-2026-21257ImportantCVSS 8.0Elevation of privilege

GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2026-21523ImportantCVSS 8.0Remote code execution

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2026-20841ImportantCVSS 7.8Remote code execution

Windows Notepad App Remote Code Execution Vulnerability

Apps · MSRC

CVE-2026-21231ImportantCVSS 7.8Elevation of privilege

Windows Kernel Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912 · MSRC

CVE-2026-21232ImportantCVSS 7.8Elevation of privilege

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows · KB5077179 KB5075899 KB5075942 KB5077181 · MSRC

CVE-2026-21236ImportantCVSS 7.8Elevation of privilege

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5077179 KB5075904 KB5075906 KB5075943 · MSRC

CVE-2026-21238ImportantCVSS 7.8Elevation of privilege

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5077179 KB5075904 KB5075906 KB5075943 · MSRC

CVE-2026-21239ImportantCVSS 7.8Elevation of privilege

Windows Kernel Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912 · MSRC

CVE-2026-21240ImportantCVSS 7.8Elevation of privilege

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912 · MSRC

CVE-2026-21245ImportantCVSS 7.8Elevation of privilege

Windows Kernel Elevation of Privilege Vulnerability

Windows · KB5075899 KB5075942 KB5077181 KB5077212 · MSRC

CVE-2026-21246ImportantCVSS 7.8Elevation of privilege

Windows Graphics Component Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912 · MSRC

CVE-2026-21250ImportantCVSS 7.8Elevation of privilege

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows · KB5075899 KB5075942 KB5077181 KB5077212 · MSRC

CVE-2026-21251ImportantCVSS 7.8Elevation of privilege

Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

Windows · KB5075904 KB5075906 KB5075943 KB5075899 · MSRC

CVE-2026-21259ImportantCVSS 7.8Elevation of privilege

Microsoft Excel Elevation of Privilege Vulnerability

Microsoft Office · KB5002835 KB5002837 · MSRC

CVE-2026-20846ImportantCVSS 7.5Denial of service

GDI+ Denial of Service Vulnerability

Windows, Windows ESU (Extended Security Updates), Microsoft Office · KB5077179 KB5075904 KB5075906 KB5075943 · MSRC

CVE-2026-21218ImportantCVSS 7.5Spoofing

.NET Spoofing Vulnerability

Developer tools (.NET, Visual Studio …) · KB5077862 KB5077863 KB5077864 · MSRC

CVE-2026-21243ImportantCVSS 7.5Denial of service

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Windows · KB5075904 KB5075906 KB5075943 KB5075899 · MSRC

CVE-2026-21260ImportantCVSS 7.5Spoofing

Microsoft Outlook Spoofing Vulnerability

Microsoft Office · KB5002841 KB5002840 KB5002834 KB5002836 · MSRC

CVE-2026-21511ImportantCVSS 7.5Spoofing

Microsoft Outlook Spoofing Vulnerability

Microsoft Office · KB5002841 KB5002840 KB5002834 KB5002836 · MSRC

CVE-2026-21235ImportantCVSS 7.3Elevation of privilege

Windows Graphics Component Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912 · MSRC

CVE-2026-21244ImportantCVSS 7.3Remote code execution

Windows Hyper-V Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5077179 KB5075904 KB5075906 KB5075943 · MSRC

CVE-2026-21247ImportantCVSS 7.3Remote code execution

Windows Hyper-V Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5077179 KB5075904 KB5075906 KB5075943 · MSRC

CVE-2026-21248ImportantCVSS 7.3Remote code execution

Windows Hyper-V Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912 · MSRC

CVE-2026-21234ImportantCVSS 7.0Elevation of privilege

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5077179 KB5075904 KB5075906 KB5075943 · MSRC

CVE-2026-21237ImportantCVSS 7.0Elevation of privilege

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5075906 KB5075943 KB5075912 KB5075899 · MSRC

CVE-2026-21241ImportantCVSS 7.0Elevation of privilege

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows · KB5077179 KB5075906 KB5075943 KB5075899 · MSRC

CVE-2026-21242ImportantCVSS 7.0Elevation of privilege

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5077179 KB5075906 KB5075943 KB5075912 · MSRC

CVE-2026-21253ImportantCVSS 7.0Elevation of privilege

Mailslot File System Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5077179 KB5075906 KB5075943 KB5075912 · MSRC

CVE-2026-21508ImportantCVSS 7.0Elevation of privilege

Windows Storage Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912 · MSRC

Sources

The tracker combines official, freely usable data sources – updated continuously:

NVD (NIST) – CVEs, rating (CVSS), affected products
CISA KEV – vulnerabilities confirmed by CISA as actively exploited
CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
FIRST EPSS – probability of exploitation
Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
PoC-in-GitHub – public proof-of-concept repositories
Metasploit (Rapid7) – modules of the Metasploit Framework
Exploit-DB (OffSec) – archive of public exploits (links only)
Patch days: official vendor pages (linked per vendor) (Vendor patch days)

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touch RSS feed