Weekly briefing

Week 8 · 16 Feb – 22 Feb 2026 UTC · assess the changes, then plan the next dates.

What to assess first

16 Feb – 22 Feb · dates to 24 Mar Check coverage

Act on3

18Feb
Exploited18 Feb 2026
GitLab Server-Side Request Forgery (SSRF) Vulnerability
CVE-2021-22175
17Feb
Exploited17 Feb 2026
Google Chromium CSS Use-After-Free Vulnerability
CVE-2026-2441
Related evidence (2)
- Edge Extended Stable 144.0.3719.130: fixes CVE-2026-2441, exploited in the wild
  Public source · Shared CVE CVE-2026-2441
- Edge 145.0.3800.58: fixes CVE-2026-2441, exploited in the wild
  Public source · Shared CVE CVE-2026-2441
17Feb
Exploited17 Feb 2026
Edge Extended Stable 144.0.3719.130: fixes CVE-2026-2441, exploited in the wild
Microsoft Edge security release notes
Related evidence (6)
- Google Chromium CSS Use-After-Free Vulnerability
  Public source · Shared CVE CVE-2026-2441
- Edge 145.0.3800.58: fixes CVE-2026-2441, exploited in the wild
  Public source · Shared CVE CVE-2026-2441
- Edge 145.0.3800.70: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 144.0.3719.115: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 144.0.3719.104: Chromium security fixes
  Public source · Same source page; the statements may concern different changes
- Edge 144.0.3719.92: Chromium security fixes
  Public source · Same source page; the statements may concern different changes

Coming up8

27Feb
Message Center action dateDue 27 Feb 2026
MC1219798: Custom greetings in voice call authentication will retire on Feb 28, 2026Microsoft 365 Message Center Archive by Merill Fernando
28Feb
Message Center action dateDue 28 Feb 2026
MC1197103: Exchange Online ActiveSync device support updateMicrosoft 365 Message Center Archive by Merill Fernando
3Mar
CISA KEV deadlineDue 3 Mar 2026
Microsoft Windows Shell Protection Mechanism Failure Vulnerability
CVE-2026-21510
Same day: CISA KEV deadline: Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability; CISA KEV deadline: Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability; CISA KEV deadline: Microsoft Windows Type Confusion Vulnerability; CISA KEV deadline: Microsoft Windows NULL Pointer Dereference Vulnerability; CISA KEV deadline: Microsoft Windows Improper Privilege Management Vulnerability
5Mar
CISA KEV deadlineDue 5 Mar 2026
Microsoft Configuration Manager SQL Injection Vulnerability
CVE-2024-43468
10Mar
Patch TuesdayScheduled for 10 Mar 2026
Patch Tuesday, 10 March 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
10Mar
CISA KEV deadlineDue 10 Mar 2026
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
CVE-2008-0015
13Mar
RetirementDue 13 Mar 2026
Retirement: Speech to Text API v3.0 API Retirement
14Mar
Message Center action dateDue 14 Mar 2026
MC1234560: Microsoft Teams: Retirement of the Microsoft Teams app from the Amazon AppstoreMicrosoft 365 Message Center Archive by Merill Fernando

Changed1

17Feb
Security17 Feb 2026
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
CVE-2008-0015

How this list is chosen

Changes from 16 Feb 2026 – 22 Feb 2026 UTC and dates due up to 24 Mar 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.