CVEs published February 9 to February 15, 2026
1,151 CVEs were published Feb 9 to Feb 15, 2026, 83 of them critical. CISA added 11 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,151
- Critical
- 83
- Added to CISA KEV
- 11
- Busiest day
- Wed, Feb 11 (325)
- Quietest day
- Sun, Feb 15 (31)
- February 9, 2026166 CVEs · 20 critical
- February 10, 2026280 CVEs · 11 critical
- February 11, 2026325 CVEs · 18 critical
- February 12, 2026125 CVEs · 21 critical
- February 13, 202661 CVEs · 8 critical
- February 14, 2026163 CVEs · 2 critical
- February 15, 202631 CVEs · 3 critical
Added to CISA KEV 11
- CVE-2026-21510Windows Shell Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-21513MSHTML Framework Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-21514Microsoft Word Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-21519Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-21525Windows Remote Access Connection Manager Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-21533Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2024-43468Microsoft Configuration Manager Remote Code Execution VulnerabilityMicrosoft Configuration Manager
- CVE-2025-15556Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verificationnotepad-plus-plus
- CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass VulnerabilitySolarWinds Web Help Desk
- CVE-2026-20700A memory corruption issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2026-1731Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)BeyondTrust Remote Support(RS) & Privileged Remote Access