Microsoft Patch Tuesday for February 2026 — Snort rules and prominent vulnerabilities
Summary: Microsoft's February 2026 security update covers 59 vulnerabilities, two of them rated Critical, both in Microsoft ACI Confidential Containers: CVE-2026-21522 (elevation of privilege, CVSS 6.7) and CVE-2026-23655 (information disclosure of secret tokens and keys, CVSS 6.5). Microsoft reported active exploitation of five Important-rated vulnerabilities plus one Moderate flaw, CVE-2026-21525, while CVE-2026-21510, CVE-2026-21513 and CVE-2026-21514 were publicly disclosed.
What's compelling: Six vulnerabilities in this release are already being exploited in the wild, and the two Critical flaws sit in ACI Confidential Containers, where successful exploitation can expose secret tokens and keys.