Cybersecuritynews

Microsoft Issues Urgent Patch for MSHTML Framework Zero-Day Vulnerability

First seen 12 Feb 2026, 21:16 UTC • Gbhackers

•70% similarity •48.6

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Microsoft has released a critical security patch for a zero-day vulnerability (CVE-2026-21513) in the MSHTML Framework, which was actively exploited before the fix was available. This vulnerability allows attackers to bypass Windows security features without elevated privileges, potentially affecting millions of systems. The flaw was added to the CISA KEV list on the same day it was published.

ThreatCluster AI

Timeline

2026-02-10

CVE-2026-21513 published

2026-02-10

CVE-2026-21513 added to CISA KEV (active exploitation)

2026-02-11

Microsoft released security patch for CVE-2026-21513

Attack Flow

9 entities, 16 inferred relationships (STIX 2.1).

Technique (3)

Data Breach
Malware
Zero-day Exploit

Organization (1)

Microsoft

Vulnerability (2)

CVE-2026-21513
Mshtml Framework Zero-Day

Affected Platform (3)

Mshtml
Mshtml Framework
Windows

Relationships

CVE-2026-21513 targets Mshtml
CVE-2026-21513 targets Mshtml Framework
CVE-2026-21513 targets Windows
Mshtml Framework Zero-Day targets Mshtml
Mshtml Framework Zero-Day targets Mshtml Framework
Mshtml Framework Zero-Day targets Windows
Data Breach targets Mshtml
Data Breach targets Mshtml Framework
Data Breach targets Windows
Malware targets Mshtml
Malware targets Mshtml Framework
Malware targets Windows
Zero-day Exploit targets Mshtml
Zero-day Exploit targets Mshtml Framework
Zero-day Exploit targets Windows
CVE-2026-21513 related to Microsoft

Community

Browse all →

Microsoft Issues Urgent Patch for MSHTML Framework Zero-Day Vulnerability

Ask AI about this cluster

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading