Microsoft Security Response Center

Microsoft Issues Emergency Patches for Exploited Office Zero-Day CVE-2026-21509

CISA's KEV listing sets a February 16 remediation deadline for federal agencies.