漏洞概要
2026年2月11日（北京时间），微软发布了2026年2月安全更新，共发布了61个CVE的补丁程序，比上月减少了54个。
在漏洞安全等级方面，存在5个标记等级为“Critical”的漏洞，54个漏洞被标记为“Important/High”等级的漏洞； 在漏洞类型方面，主要有14个远程代码执行漏洞，25个权限提升漏洞以及6个信息泄露漏洞。
重要漏洞分析
CVE-2026-21514 Microsoft Word 安全功能绕过漏洞
Microsoft Word 在安全决策中过度依赖不可信输入，未做严格校验导致安全功能可被绕过，成功利用该漏洞的攻击者可在本地突破 Word 原生防护限制，实现高权限的信息访问与操作。注意：该漏洞已存在在野利用。
CVE-2026-21510 Windows Shell 安全功能绕过漏洞
Windows Shell 的防护机制存在缺陷，未对相关网络请求做严格校验，未授权攻击者可通过网络实现安全功能绕过，成功利用后可获取高等级的机密信息访问、篡改及破坏能力。注意：该漏洞已存在在野利用。
CVE-2026-21513 MSHTML Framework 安全功能绕过漏洞
MSHTML框架中的保护机制故障允许未经授权的攻击者绕过网络上的安全功能。注意：该漏洞已存在在野利用。
CVE-2026-21533 Windows 远程桌面服务权限提升漏洞
Windows 远程桌面中的不当权限管理允许攻击者在本地提升权限。注意：该漏洞已存在在野利用。
CVE-2026-21519 Windows 桌面窗口管理器权限提升漏洞
攻击者可以利用在桌面窗口管理器中使用不兼容类型 ("类型混淆") 访问资源，成功利用该漏洞攻击者可以本地提升权限。注意：该漏洞已存在在野利用。
影响范围
漏洞名称、CVE编号 | 受影响版本 |
CVE-2026-21514 Microsoft Word 安全功能绕过漏洞 | Microsoft Office LTSC for Mac 2024 Microsoft Office LTSC 2024 for 64-bit editions Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC for Mac 2021 Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft 365 Apps for Enterprise for 32-bit Systems |
CVE-2026-21510 Windows Shell 安全功能绕过漏洞 | Windows 11 version 26H1 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows Server 2025 Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows Server 2022, 23H2 Edition (Server Core installation) Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Windows 11 Version 25H2 for ARM64-based Systems Windows Server 2025 (Server Core installation) Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows Server 2022 (Server Core installation) Windows Server 2022 Windows Server 2019 (Server Core installation) Windows Server 2019 Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems |
Windows 10 Version 1607 for 32-bit Systems Windows Server 2016 Windows Server 2025 Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows Server 2022, 23H2 Edition (Server Core installation) Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 25H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows 11 Version 25H2 for ARM64-based Systems Windows Server 2025 (Server Core installation) Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows Server 2012 R2 (Server Core installation) Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows 10 Version 1809 for x64-based Systems Windows Server 2012 Windows 10 Version 1607 for x64-based Systems Windows Server 2016 (Server Core installation) Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 21H2 for ARM64-based Systems Windows Server 2019 (Server Core installation) Windows Server 2019 Windows Server 2022 (Server Core installation) Windows Server 2022 Windows 10 Version 1809 for 32-bit Systems Windows 11 version 26H1 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems | |
CVE-2026-21533 Windows 远程桌面服务权限提升漏洞 | Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows Server 2025 Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows Server 2022, 23H2 Edition (Server Core installation) Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Windows 11 Version 25H2 for ARM64-based Systems Windows Server 2025 (Server Core installation) Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows Server 2022 (Server Core installation) Windows Server 2022 Windows Server 2019 (Server Core installation) Windows Server 2019 Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems Windows 11 version 26H1 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems |
CVE-2026-21519 Windows 桌面窗口管理器权限提升漏洞 | Windows 11 version 26H1 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems Windows Server 2016 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows Server 2025 Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows Server 2022, 23H2 Edition (Server Core installation) Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Windows 11 Version 25H2 for ARM64-based Systems Windows Server 2025 (Server Core installation) Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows Server 2022 (Server Core installation) Windows Server 2022 Windows Server 2019 (Server Core installation) Windows Server 2019 Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems |
官方修复建议
微软官方已更新受影响软件的安全补丁，用户可根据不同系统版本下载安装对应的安全补丁。