Microsoft and Adobe Patch Tuesday, February 2026 Security Update Review | Qualys

Summary: Microsoft's February 2026 Patch Tuesday addresses 61 vulnerabilities, including five critical and 52 important-severity flaws, and covers six zero-day vulnerabilities exploited in the wild across components such as Exchange Server, Windows NTLM, Windows Remote Desktop, and the Windows Shell. Adobe released nine advisories covering 44 vulnerabilities across products including Audition, After Effects, InDesign Desktop, and Substance 3D Designer, 27 of them rated critical and potentially allowing arbitrary code execution.
What you should know: Six of the flaws Microsoft patched this month were already being exploited, and CISA has set a March 3, 2026 deadline to patch them - a window measured in days, not weeks.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026