· 7 min read · Edition #10

6 Zero-Days Patched + July Price Hikes Confirmed

February Patch Tuesday delivered 6 actively exploited zero-days — the highest single-month count in years. M365 price increases (5-8%) are locked in for July 1. CSP partners have until April 1 before the renewal grace period ends. Here's what IT admins need to know.

📋 TL;DR — What You Need to Know

🔴 February 2026 Patch Tuesday: 6 Zero-Days Exploited in the Wild

Microsoft patched 58 vulnerabilities including six actively exploited zero-days — a significant spike given only 41 zero-days were disclosed across all of 2025.

Priority CVEs

CVE Component Risk
CVE-2026-21510 Windows Shell SmartScreen bypass — executes files without user warning
CVE-2026-21513 MSHTML/Trident Security bypass via malicious HTML/.lnk files
CVE-2026-21514 Microsoft Word OLE mitigation bypass via malicious Office files
CVE-2026-21533 Remote Desktop Privilege escalation (exploited since Dec 24, 2025)
Why it matters: CVE-2026-21514 affects all M365/Office users. A single malicious document opened in Word can bypass built-in protections. Deploy patches immediately.

🟠 M365 Pricing Changes — July 1, 2026

Microsoft confirmed commercial and government SKU increases:

CSP Partners: April 1 ends the renewal grace period. The new Extended Service Term (EST) carries a 3-23% premium for late renewals.

💡 Action: Review annual agreements and lock in renewals before July 1 if budget-sensitive. Contact your Microsoft partner or licensing rep now.

🟠 Copilot macOS Deployment Push

Starting mid-February, the M365 enterprise suite installer for Mac includes a Copilot app shim (placeholder icon). The full app downloads when users click the shortcut.

Existing installations unaffected. Organizations can exclude during deployment.

🟠 Teams Licensing Consolidation — April 2026

Several premium features moving into Teams core licensing:

⚡ Quick Hits

✅ Admin Action Items

📅 Key Dates

Date Event
Feb 11 Patch Tuesday — zero-day fixes released
Apr 1, 2026 CSP grace period ends (EST begins)
Jun 2026 Secure Boot 2011 certificates expire
Jul 1, 2026 M365 price increases effective

🔥 The Bottom Line

Six zero-days in a single Patch Tuesday is a big deal. The Word vulnerability (CVE-2026-21514) is particularly concerning because it affects everyone with an Office license — and malicious documents are trivially easy to distribute.

On the business side, July is going to hurt. 5-8% price increases across the board, with CSP partners facing even steeper premiums if they miss the April 1 deadline. If you haven't locked in your renewals, now's the time.

Patch first. Budget second. Don't wait.

Questions about patching or pricing?

Fireside Cloud Solutions can help you prioritize your patching schedule, review your licensing agreements, and plan for the July price changes. We're here to help.

Schedule a Free Consultation →
Patch Tuesday Zero-Day Security Pricing Copilot Teams Microsoft 365
FS
Fireside Cloud Solutions
Microsoft 365 & Power Platform Consulting · firesidecloudsolutions.com
Sources: Microsoft Tech Community, BleepingComputer, Help Net Security, Tenable, WindowsLatest, Empowering.Cloud