---
title: "Microsoft: hackers are exploiting zero-day bugs in Windows and Office, update now"
description: "With one click on a link, attackers can bypass SmartScreen protection. Google says the bug is under widespread active exploitation."
url: https://kurddevelopers.com/en/news/microsoft-zero-day-windows-office-february-2026
language: en # English
type: news
published: 2026-02-11T20:45:00.000Z
updated: 2026-11-01T23:13:53.000Z
author: "Osamah Ismail"
author_url: https://kurddevelopers.com/en/author/1
section: "Security"
tags: ["Microsoft","Windows","Office","Zero-day","Security"]
sources: ["Microsoft Security Response Center","Krebs on Security","TechCrunch"]
image: https://kurddevelopers.com/uploads/2026/11/cropped-microsoft-logo-element-dbf6c1ad.png
translations:
  ku: https://kurddevelopers.com/news/microsoft-zero-day-windows-office-february-2026
  ar: https://kurddevelopers.com/ar/news/microsoft-zero-day-windows-office-february-2026
publisher: Kurd Developers
publisher_url: https://kurddevelopers.com/
---

# Microsoft: hackers are exploiting zero-day bugs in Windows and Office, update now

> With one click on a link, attackers can bypass SmartScreen protection. Google says the bug is under widespread active exploitation.

![Image: Microsoft](https://kurddevelopers.com/uploads/2026/11/cropped-microsoft-logo-element-dbf6c1ad.png)

On February 11, **Microsoft** said hackers are exploiting critical **zero-day** bugs in **Windows** and **Office**, and released fixes.

## The bugs

- **CVE-2026-21510**: a Windows Shell flaw affecting **all supported versions** of Windows. **One click** on a link bypasses **SmartScreen** protection
- **CVE-2026-21513**: a flaw in **MSHTML** that lets attackers bypass Windows security features and plant malware

## How serious?

- According to Google, the Windows Shell bug is under **"widespread, active exploitation"**
- According to **Brian Krebs**, Microsoft also patched **three** other exploited zero-days

## What to do

- Run **Windows Update** as soon as possible
- **Don't click** links from unknown sources

**Sources:** Microsoft Security Response Center, Krebs on Security, TechCrunch

---

Published by [Kurd Developers](https://kurddevelopers.com/) on 2026-02-11. Cite as: “Microsoft: hackers are exploiting zero-day bugs in Windows and Office, update now”, Kurd Developers, https://kurddevelopers.com/en/news/microsoft-zero-day-windows-office-february-2026