Microsoft · Security update · February 10, 2026

KB5075970: February 2026 security update

KB5075970, released February 10, 2026, fixes 15 CVEs across 2 products. 4 of them are being exploited (CVE-2026-21510); 4 on CISA KEV. Patch Radar priority: Patch now.

Patch now4 on CISA KEV2 publicly disclosed
CVEs closed
15
None rated Critical
Exploited
4
CVE-2026-21510
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.6124
99th percentile

Priority of the 15 CVEs

Patch now 4 Urgent 3 High 6 Routine 2

Applies to

Product
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2026-21510 Windows Shell Security Feature Bypass 8.8 0.6124 KEVDisclosedExploited
Patch now CVE-2026-21513 MSHTML Framework Security Feature Bypass 8.8 0.1585 KEVDisclosedExploited
Patch now CVE-2026-21525 Windows Remote Access Connection Manager Denial of Service 6.2 0.0504 KEVExploited
Patch now CVE-2026-21533 Windows Remote Desktop Elevation of Privilege 7.8 0.0434 KEVExploited
Urgent CVE-2026-21238 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0333 More likely
Urgent CVE-2026-21231 Windows Kernel Elevation of Privilege 7.8 0.0252 More likely
Urgent CVE-2026-21253 Mailslot File System Elevation of Privilege 7.0 0.0079 More likely
High CVE-2026-20846 Windows GDI+ Denial of Service 7.5 0.0141 Exploitation Less Likely
High CVE-2026-21235 Microsoft Graphics Component Elevation of Privilege 7.3 0.0073 Exploitation Less Likely
High CVE-2026-21508 Windows Storage Elevation of Privilege 7.0 0.0044 Exploitation Less Likely
High CVE-2026-21236 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0044 Exploitation Unlikely
High CVE-2026-21239 Windows Kernel Elevation of Privilege 7.8 0.0044 Exploitation Less Likely
High CVE-2026-21246 Microsoft Graphics Component Elevation of Privilege 7.8 0.0044 Exploitation Unlikely
Routine CVE-2026-21249 Windows NTLM Spoofing 3.3 0.1128 Exploitation Less Likely
Routine CVE-2026-21222 Windows Kernel Information Disclosure 5.5 0.0060 Exploitation Less Likely
Showing 1 to 15 of 15 1