Microsoft Addresses Six Actively Exploited Zero-Day Vulnerabilities

On February 10, 2026, Microsoft released a security update addressing 59 vulnerabilities, including six zero-day flaws that were actively exploited prior to the patch. The vulnerabilities affect various Microsoft products, with three of them being security feature bypass flaws, allowing attackers to circumvent built-in protections. The affected CVEs were published and added to the CISA KEV list on the same day.