APT28 Exploits MSHTML Zero-Day Ahead of February 2026 Patch Tuesday

Back Cyberpress

APT28 Exploits MSHTML Zero-Day Ahead of February 2026 Patch Tuesday

Cyberpress • March 2, 2026

Share: View original

This security bypass vulnerability hit all Windows versions, earned a CVSS score of 8.8, and saw active exploitation in the wild by APT28, ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

APT28 Exploits MSHTML Zero-Day Vulnerability in Windows APT28 has actively exploited a zero-day vulnerability in MSHTML affecting all Windows versions, which has a CVSS score of 8.8. The vulnerability allows for security bypass and poses significant risks to users. A patch was released in February 2026 to address this issue. 4 sources 94

Extracted Entities

APT Groups (1)

Attack Types (1)

Zero-day Exploit

Platforms (1)

Vulnerabilities (1)

Mshtml Zero-Day