"Each month, the team at Readiness analyzes the latest Patch Tuesday updates from Microsoft and provides detailed, actionable testing guidance. The company's Patch Tuesday release for February addresses 59 CVEs across the company's product family - roughly half the volume of January's 159 patches. Six vulnerabilities, affecting Windows Shell, MSHTML, Desktop Window Manager, Remote Desktop, Remote Access, and Microsoft Word, are already being actively exploited."
"Both Windows and Office get a "Patch Now "recommendation, with CISA setting a March 3 enforcement deadline for all six exploited vulnerabilities. Two new enforcement timelines also take effect in April: Kerberos RC4 deprecation ( CVE-2026-20833) and Windows Deployment Services hardening ( CVE-2026-0386). February is a notably clean month for known issues. All three desktop KB articles - KB5077181 (Windows 11 25H2/24H2), KB5075941 (Windows 11 23H2), and KB5075912 (Windows 10 22H2) - explicitly state that Microsoft is not currently aware of any issues."
February Patch Tuesday addresses 59 CVEs across Microsoft's product family, about half January's volume. Six vulnerabilities affecting Windows Shell, MSHTML, Desktop Window Manager, Remote Desktop, Remote Access, and Microsoft Word are already actively exploited. Five Critical-rated CVEs target Azure services rather than Windows. Windows and Office receive a Patch Now recommendation and CISA set a March 3 enforcement deadline for the six exploited flaws. Two enforcement timelines take effect in April: Kerberos RC4 deprecation (CVE-2026-20833) and Windows Deployment Services hardening (CVE-2026-0386). February shows no new desktop KB known issues. Two ongoing issues remain: CVE-2025-59287 (WSUS error reporting intentionally disabled) and WUSA failing to install .msu files from network shares (ERROR_BAD_PATHNAME), the latter mitigated via Known Issue Rollback.
Read at Computerworld
Unable to calculate read time
Collection
[
|
...
]