Microsoft Patch Tuesday for February 2026 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-20841 | Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute code… | 7.8 | 9% | PoC ×2 | |
| CVE-2026-21228 | Improper certificate validation in Azure Local allows an unauthorized attacker to execute code over a network | 8.1 | <1% | ||
CVE-2026-21244+1 related CVE | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally | 7.3 | 1% | ||
| CVE-2026-21256 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to… | 8.8 | 1% | ||
CVE-2026-21510+4 related CVEs | Security Feature Bypass in Microsoft Windows Shell Actively Exploited (CVE-2026-21510) | 8.8 group max | 61% | KEV | KEV |
| CVE-2026-21514 | Actively Exploited Security Feature Bypass in Microsoft Word (CVE-2026-21514) | 7.8 | 2% | KEV | KEV |
| CVE-2026-21516 | Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an unauthorized attacker to execute code over a… | 7.8 | <1% | ||
| CVE-2026-21522 | Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an authorized attacker to elevate… | 6.7 | <1% | ||
| CVE-2026-21523 | Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network | 8.0 | <1% | ||
| CVE-2026-23655 | Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network | 6.5 | <1% |
From the original article
4 min read at blog.talosintelligence.com
Microsoft has released its monthly security update for February 2026, which includes 59 vulnerabilities affecting a range of products, including two that Microsoft marked as “Critical”. CVE-2026-21522 is a critical elevation of privilege vulnerability affecting Microsoft ACI Confidential Containers.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.