// day
Feb 10, 2026
2 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Feb 10, 2026
Microsoft Office: Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
› Microsoft Office
Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally. Added to CISA KEV on 2026-02-10.
CVE-2026-21514 - highclosedpatchedclosed Feb 10, 2026
Microsoft Windows: Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
› Microsoft Windows
Microsoft MSHTML Framework contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network. CISA added CVE-2026-21513, CVE-2026-21525, CVE-2026-21510, CVE-2026-21533, CVE-2026-21519 to the Known Exploited Vulnerabilities catalog on 2026-02-10 based on evidence of active exploitation.
CVE-2026-21513CVE-2026-21525CVE-2026-21510CVE-2026-21533+1 more