February 2026 Patch Tuesday addressed 58 vulnerabilities including 6 actively exploited in the wild. CVE-2026-21533 allows attackers to gain SYSTEM privileges through Remote Desktop Services. CVE-2026-21525 denial-of-service exploit found in public malware repository.