Skip to the content
The Update Bureau

Monthly Patch Briefing

February 2026

37 updates released this month across 8 product lines · 19 Patch Tuesday · 2 previews · 5 exploited vulnerabilities fixed.

Release volume

37 updates released

4 fewer than January (41), vs 39/mo in 2026.

Feb 2026
37
Jan 2026
41
2026 average
39/mo

Security flaws fixed

39 vulnerabilities

-70 flaws compared to January (109).

Feb 2026
39
Jan 2026
109
2026 average
74/mo

Critical & urgent

1 critical · 5 zero-days

5 critical in January.

Feb critical
1
Jan critical
5
2026 average
3/mo

2026 Year-to-Date Trend

148 security flaws fixed across 78 updates in 2026

6 critical flaws and 6 exploited zero-days patched across the 2 published months of 2026.

Distinct security flaws fixed per month Jan – Feb 2026
February 2026
Windows 11
Monthly security update
2 previews 30 fixed 1 critical 5 exploited
30 fixed · 1 critical Exploited CVE-2026-21510 (Windows Shell Security Feature Bypass Vulnerability) · CVE-2026-21513 (MSHTML Framework Security Feature Bypass Vulnerability) · CVE-2026-21519 (Desktop Window Manager Elevation of Privilege Vulnerability) · CVE-2026-21525 (Windows Remote Access Connection Manager Denial of Service Vulnerability) · CVE-2026-21533 (Windows Remote Desktop Services Elevation of Privilege Vulnerability)
Windows 10
Monthly security update
24 fixed 5 exploited
24 fixed · 0 critical Exploited CVE-2026-21510 (Windows Shell Security Feature Bypass Vulnerability) · CVE-2026-21513 (MSHTML Framework Security Feature Bypass Vulnerability) · CVE-2026-21519 (Desktop Window Manager Elevation of Privilege Vulnerability) · CVE-2026-21525 (Windows Remote Access Connection Manager Denial of Service Vulnerability) · CVE-2026-21533 (Windows Remote Desktop Services Elevation of Privilege Vulnerability)
Windows Server
Monthly security update
30 fixed 5 exploited 2 with issues
30 fixed · 0 critical Exploited CVE-2026-21510 (Windows Shell Security Feature Bypass Vulnerability) · CVE-2026-21513 (MSHTML Framework Security Feature Bypass Vulnerability) · CVE-2026-21519 (Desktop Window Manager Elevation of Privilege Vulnerability) · CVE-2026-21525 (Windows Remote Access Connection Manager Denial of Service Vulnerability) · CVE-2026-21533 (Windows Remote Desktop Services Elevation of Privilege Vulnerability)
SQL Server
Monthly security update
1 cumulative update 0 fixed 1 with issues
  • No Patch Tuesday security update this month —
0 fixed · 0 critical

Vulnerabilities fixed, by version

Product Version Monthly update & build Critical Important Total
Windows 11
Windows 11, version 26H1 KB5077179 28000.1575 1 24 26
Windows 11
Windows 11, version 25H2 KB5077181 26200.7840 · 26 27
Windows 11
Windows 11, version 24H2 KB5077181 26100.7840 · 26 27
Windows 11
Windows 11, version 23H2 KB5075941 22631.6649 · 25 27
Windows 10
Windows 10 Enterprise LTSC 2019 KB5075904 17763.8389 · 21 22
Windows 10
Windows 10 Enterprise LTSB 2016 KB5075999 14393.8868 · 19 20
Windows 10
Windows 10, version 22H2 KB5075912 19045.6937 · 23 24
Windows 10
Windows 10 Enterprise LTSC 2021 KB5075912 19044.6937 · 23 24
Windows Server
Windows Server 2025 KB5075899 26100.32370 · 28 29
Windows Server
Windows Server 2022 KB5075906 20348.4773 · 26 27
Windows Server
Windows Server 2019 KB5075904 17763.8389 · 23 24
Windows Server
Windows Server 2016 KB5075999 14393.8868 · 20 21
.NET Framework
.NET Framework 4.8.1 KB5074837 4.8.9325.0 · · 1
.NET Framework
.NET Framework 3.5 KB5074837 · · 1
SharePoint Server
SharePoint Server Subscription Edition KB5002833 16.0.19127.20518 · 2 2
SharePoint Server
SharePoint Server 2019 KB5002834 16.0.10417.20097 · 2 2
SharePoint Server
SharePoint Server 2016 KB5002841 16.0.5539.1002 · 2 2
Office Online Server
Office Online Server KB5002835 16.0.10417.20097 · 3 3
Exchange Server
Exchange Server Subscription Edition KB5074992 15.2.2562.37 · 1 1
Exchange Server
Exchange Server 2019 KB5074993 15.2.1748.43 · 1 1
Exchange Server
Exchange Server 2016 KB5074995 15.1.2507.66 · 1 1

All updates

All updates:
  • Windows 11 · 26H1
    Windows 11 Windows 11 Insider 26H1 Insider Preview
    Experimental Channel
    Build 28020.1673

    Taskbar network speed test and Arm64 administration tools

    Build 28020.1673 for Canary Insiders adds a taskbar network speed test and Arm64 administration tools, alongside File Explorer changes and fixes.

    Changes 7 new · 5 improved · 2 fixes
  • Windows 11 · 26H2
    Windows 11 Windows 11 Insider 26H2 Insider Preview
    Experimental Channel
    Build 26300.7939

    Safer batch files and individual shared-audio controls

    Adds a more secure way to process batch files and expands shared-audio controls, alongside Narrator, taskbar, storage, and keyboard changes.

    Package KB5077243
    Changes 2 new · 7 improved
  • Windows 11 · 25H2
    Windows 11 Windows 11 Insider 25H2 Insider Preview
    Beta Channel
    Build 26220.7935

    Beta Channel update tests the servicing pipeline

    Adds no new content; it tests the servicing pipeline and requires a restart.

    Package KB5082255
  • Windows 11 · 25H2
    Windows 11 Windows 11 Insider 25H2 Insider Preview
    Beta Channel
    Build 26220.7934

    Per-listener audio controls and freeform rotation in Paint

    Beta Channel Insiders get controls for shared audio and freeform rotation in Paint, plus a more secure batch-file mode and reliability improvements.

    Package KB5077242
    Changes 3 new · 7 improved
  • Windows 11 · 26H1
    Windows 11 26H1 Windows 11 26H1 Optional preview
    Preview
    KB5077239

    New camera, accessibility and gaming features; recovery hangs fixed

    Adds features across Windows 11 26H1, including camera effects, cross-device activities and handheld gaming. It also addresses issues such as BitLocker recovery and Windows Sandbox hangs.

    Build 28000.1643
    Replaced by KB5079466 →
  • Windows 11 · 24H2, 25H2
    Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Optional preview
    Preview
    KB5077241

    BitLocker no longer hangs at recovery; built-in Sysmon arrives

    Adds built-in Sysmon and new taskbar, search, and camera features. It also fixes a BitLocker hang after you enter a recovery key.

    Builds 26100.7922 26200.7922
    Replaced by KB5079473 →
  • Windows 11 · 26H1
    Windows 11 Windows 11 Insider 26H1 Insider Preview
    Experimental Channel
    Build 28020.1619

    Cross-Device Resume expands and Narrator speech becomes configurable

    Canary Channel Insiders are testing expanded Cross-Device Resume, customizable Narrator announcements, peripheral fingerprint sign-in, and other changes.

    Changes 2 new · 8 improved
  • Windows 11 · 26H2
    Windows 11 Windows 11 Insider 26H2 Insider Preview
    Experimental Channel
    Build 26300.7877

    Freeform rotation in Paint and clearer device details

    Adds freeform rotation in Paint and updates device information in Settings. It also improves taskbar and Nearby Sharing reliability and fixes a File Explorer issue.

    Package KB5077232
    Changes 1 new · 7 improved · 1 fix
  • Windows 11 · 25H2
    Windows 11 Windows 11 Insider 25H2 Insider Preview
    Beta Channel
    Build 26220.7872

    File icons in context menus and clearer device details

    Build 26220.7872 for the Beta Channel gradually brings matching file icons to context menus, updates device information in Settings, and improves taskbar group animations.

    Package KB5077231
    Changes 5 improved
  • Windows 11 · Future platforms
    Windows 11 Windows 11 Insider Future platforms Insider Preview
    Experimental Channel
    Build 29531.1000

    An optional move to a new platform development path

    Canary Insiders can opt into build 29531.1000 and a new platform-development path. Some current features may be temporarily unavailable, and returning to 28000-series builds requires a clean installation.

    Changes 1 improved
  • Windows 11 · 25H2
    Windows 11 Windows 11 Insider 25H2 Insider Preview
    Beta Channel
    Build 26220.7859

    Microsoft 365 plan upgrades and a File Explorer window fix

    Beta Channel Insiders get a Microsoft 365 plan upgrade option in Settings, plus reliability improvements and a fix for File Explorer windows and tabs jumping to Desktop or Home.

    Package KB5077223
    Changes 1 new · 3 improved · 1 fix
  • Windows 11 · 26H1
    Windows 11 Windows 11 Insider 26H1 Insider Preview
    Experimental Channel
    Build 28020.1611

    Built-in Sysmon and OneDrive link-sharing options

    Adds built-in Sysmon and more ways to share OneDrive links. It also corrects the desktop watermark’s build number.

    Changes 2 new · 1 fix
  • SQL Server · CU2
    SQL Server 2025 CU2 SQL Server 2025 CU2 Cumulative update
    KB5075211

    Six fixes; parallel SESSION_CONTEXT queries can return wrong results

    Fixes six SQL Server 2025 issues, including problems with backups, availability groups, and replication. A known issue remains: parallel queries using SESSION_CONTEXT might return incorrect results or produce access violation dump files.

    Build 17.0.4015.4
    Known issues 1 open
    Replaced by KB5077466 →
  • Windows 11 · 26H1
    Windows 11 26H1 Windows 11 26H1 Security update
    Zero-day
    KB5077179

    Exploited Shell and MSHTML bypasses patched; startup failure fixed

    The update addresses five actively exploited vulnerabilities, including security-feature bypasses in Windows Shell and MSHTML. It also addresses a problem that could prevent Windows from starting.

    Build 28000.1575
    Security 26 CVEs 1 critical 5 exploited
    Replaced by KB5077239 →
  • Windows 11 · 24H2, 25H2
    Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Security update
    Zero-day
    KB5077181

    Exploited Shell and MSHTML bypass flaws patched

    Fixes 27 vulnerabilities, including five that attackers are exploiting. It also addresses a WPA3 Wi-Fi connection problem and gaming eligibility checks.

    Builds 26100.7840 26200.7840
    Security 27 CVEs 5 exploited
    Replaced by KB5077241 →
  • Windows 11 · 23H2
    Windows 11 23H2 Windows 11 23H2 Security update
    Zero-day
    KB5075941

    Exploited Shell and MSHTML security bypasses addressed

    Addresses 27 vulnerabilities, including exploited Windows Shell and MSHTML security feature bypasses, and fixes several Windows 11 23H2 issues. It also updates Secure Boot components and certificate rollout data.

    Build 22631.6649
    Security 27 CVEs 5 exploited
    Replaced by KB5078883 →
  • Windows 10 · 21H2, 22H2
    Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Zero-day
    KB5075912

    Exploited Shell and MSHTML flaws patched

    Fixes 24 security vulnerabilities, including five that attackers are exploiting, and resolves a restart-on-shutdown issue affecting some Secure Launch PCs with Virtual Secure Mode enabled.

    Builds 19044.6937 19045.6937
    Security 24 CVEs 5 exploited
    Replaced by KB5078885 →
  • Windows 10 · 1809
    Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Zero-day
    KB5075904

    Exploited Shell and MSHTML bypasses patched; shutdown issue fixed

    Fixes 22 vulnerabilities, including five that are being exploited, and fixes a shutdown problem on some Secure Launch-capable PCs with Virtual Secure Mode enabled.

    Build 17763.8389
    Security 22 CVEs 5 exploited
    Replaced by KB5078752 →
  • Windows 10 · 1607
    Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Zero-day
    KB5075999

    Exploited Shell and MSHTML flaws patched; GPU stability fixed

    The update fixes 20 vulnerabilities, including two publicly disclosed and exploited Shell and MSHTML security bypasses, and resolves a stability issue on some GPU configurations.

    Build 14393.8868
    Security 20 CVEs 5 exploited
    Replaced by KB5078938 →
  • Windows Server · 2025
    Windows Server 2025 Windows Server 2025 Security update
    Zero-day
    KB5075899

    Exploited Shell and MSHTML bypasses patched

    Fixes security flaws already being exploited, including Windows Shell and MSHTML security-feature bypasses. It also adds DNS features, while WSUS still does not show synchronization error details.

    Build 26100.32370
    Security 29 CVEs 5 exploited
    Known issues 1 open
    Replaced by KB5078740 →
  • Windows Server · 2022
    Windows Server 2022 Windows Server 2022 Security update
    Zero-day
    KB5075906

    Exploited Shell and MSHTML bypasses patched; folder names fixed

    Fixes 27 security vulnerabilities, including five that are being exploited, and addresses several Windows Server issues. It also adds optional DNS response record shuffling.

    Build 20348.4773
    Security 27 CVEs 5 exploited
    Known issues 1 open
    Replaced by KB5082314 →
  • Windows Server · 2019
    Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day
    KB5075904

    Exploited Shell and MSHTML security bypasses patched

    Fixes 24 vulnerabilities, including five that attackers are exploiting. It also fixes shutdown, folder-name, and graphics problems.

    Build 17763.8389
    Security 24 CVEs 5 exploited
    Replaced by KB5078752 →
  • Windows Server · 2016
    Windows Server 2016 Windows Server 2016 Security update Also for Windows 10
    Zero-day
    KB5075999

    Exploited Shell and MSHTML bypasses patched; GPU stability fixed

    The update patches five exploited vulnerabilities, including Windows Shell and MSHTML security feature bypasses, and fixes a graphics stability issue affecting certain GPU configurations.

    Build 14393.8868
    Security 21 CVEs 5 exploited
    Replaced by KB5078938 →
  • Exchange Server · RTM
    Exchange Server Subscription Edition RTM Exchange Server Subscription Edition RTM Security update
    KB5074992

    Spoofing vulnerability in Exchange addressed

    Resolves CVE-2026-21527, a spoofing vulnerability in Exchange Server.

    Build 15.2.2562.37
    Security 1 CVE
    Replaced by KB5081755 →
  • Exchange Server · CU15
    Exchange Server 2019 CU15 Exchange Server 2019 CU15 ESU only Security update
    KB5074993

    Mail-server spoofing flaw addressed; ESU enrollment required

    The update resolves CVE-2026-21527, an Exchange Server spoofing vulnerability. Only organizations enrolled in the Extended Security Update program are eligible to receive it.

    Build 15.2.1748.43
    Security 1 CVE
    Replaced by KB5094140 →