Yesterday's February update fixes 58 flaws including six actively exploited zero-day vulnerabilities—CVE-2026-21513 (MSHTML Framework bypass) and CVE-2026-21514 (Word security bypass) among them. Five rated Critical, 52 Important. The company is also rolling out updated Secure Boot certificates to replace 2011 certificates expiring in June.