NewApp Digest
search bot

Word

Patch Tuesday, February 2026 Edition
Winsage
February 11, 2026

Patch Tuesday, February 2026 Edition

Microsoft has released updates addressing over 50 vulnerabilities in its Windows operating systems and applications, including six critical zero-day vulnerabilities. 1. CVE-2026-21510: A security feature bypass in Windows Shell that allows execution of malicious content via a single click on a link, affecting all supported Windows versions. 2. CVE-2026-21513: Targets MSHTML, the web browser engine in Windows. 3. CVE-2026-21514: A security feature bypass in Microsoft Word. 4. CVE-2026-21533: Allows local attackers to gain SYSTEM level access in Windows Remote Desktop Services. 5. CVE-2026-21519: An elevation of privilege flaw in the Desktop Window Manager (DWM). 6. CVE-2026-21525: A potential denial-of-service threat in the Windows Remote Access Connection Manager. Additionally, the updates include fixes for remote code execution vulnerabilities affecting GitHub Copilot and various IDEs, specifically CVE-2026-21516, CVE-2026-21523, and CVE-2026-21256, which arise from a command injection flaw. Security experts emphasize the importance of safeguarding developers due to their access to sensitive data and recommend applying least-privilege principles.
Microsoft fixes six actively exploited flaws in latest Windows 11 update
Winsage
February 11, 2026

Microsoft fixes six actively exploited flaws in latest Windows 11 update

Microsoft's February 2026 Patch Tuesday addressed 59 vulnerabilities in Windows 11, with six confirmed as actively exploited. The most critical vulnerability is CVE-2026-21510, a Windows Shell security feature bypass with a CVSS rating of 8.8, allowing attackers to evade warnings by tricking users into opening malicious files. Another significant vulnerability, CVE-2026-21513, also rated at 8.8, affects MSHTML and allows remote attackers to bypass execution prompts through malicious code in HTML or shortcut files. CVE-2026-21514 impacts Microsoft Word and enables adversaries to disable OLE mitigations, posing risks through document-based attacks. Two local privilege escalation vulnerabilities are CVE-2026-21519 in Desktop Window Manager and CVE-2026-21533 in Windows Remote Desktop Services, with CVSS scores of 7.8. CVE-2026-21525 is a denial-of-service vulnerability in Remote Access Connection Manager. The update includes 53 additional vulnerabilities across various Microsoft products and services, with CVE-2026-21531 in Azure SDK rated at 9.8 and CVE-2026-20841 affecting Windows Notepad rated at 8.8. The cumulative update for Windows 11 (KB5077181) also includes enhancements and resolves WPA3 Wi-Fi connectivity issues. Microsoft reminded users of the June 2026 expiration of Secure Boot certificates, which requires timely updates to ensure secure booting. Users can install the updates via Windows Update.
Windows shortcut weaponized in Phorpiex-linked ransomware campaign
Winsage
February 10, 2026

Windows shortcut weaponized in Phorpiex-linked ransomware campaign

The Global Group has shifted to a local execution strategy for ransomware, complicating detection and response efforts. Their infection process begins when a user opens a shortcut file with a double extension (e.g., “Document.doc.lnk”), which appears as a legitimate document due to Windows' default settings that hide file extensions. The shortcut icon mimics that of a Microsoft Word file. When executed, the .lnk file activates Windows utilities like cms.exe and PowerShell to retrieve and execute the next-stage payload, effectively bypassing traditional security controls focused on malicious documents or executable attachments.
Windows 11 Moves Closer To Android App Continuity
AppWizard
January 31, 2026

Windows 11 Moves Closer To Android App Continuity

Microsoft is enhancing Windows 11's cross-device capabilities, allowing users to transition Android app activities to their PCs. This feature enables users to resume activities like music playback, document editing, and web browsing directly on their Windows computer. Initially limited to OneDrive activities, the functionality now includes resuming Spotify playback, editing Microsoft Office documents, and restoring browsing sessions from mobile devices using Microsoft Edge. This feature has been in testing since August and is included in the latest Windows 11 Release Preview update. The approach is similar to Apple's Handoff feature. The update also includes expanded support for MIDI 2.0, improvements to voice typing, enhanced fingerprint sensor compatibility for Windows Hello, and broader language support for the new Settings Agent.
I tried QuickLook for Windows, and now I won't give it up
Winsage
January 31, 2026

I tried QuickLook for Windows, and now I won’t give it up

The author transitioned from Windows to Mac and discovered macOS features like Spotlight Search, Hot Corners, a built-in file converter, and QuickLook, which enhanced their user experience. Upon returning to Windows, they sought alternatives and found the QuickLook app, which allows users to preview files by selecting them and pressing the space bar. QuickLook can be downloaded from the Microsoft Store and operates system-wide, enabling previews of various file types, including documents, images, media files, and compressed ZIP files. The app also allows basic modifications, such as editing text in Word documents and cropping images. QuickLook improves file browsing in Windows File Explorer and Open/Save dialog boxes and supports plugins for specialized file types.
Windows may have ditched Android apps, but now it wants to sync with them
AppWizard
January 30, 2026

Windows may have ditched Android apps, but now it wants to sync with them

Microsoft has expanded its Cross-Device Resume feature on Windows 11 to include support for applications such as Spotify, Word, Excel, and PowerPoint. This feature, initially launched in May 2025, allows users to transition seamlessly between devices, particularly between smartphones and PCs, by connecting Android devices through the Link to Windows app. Users can access applications directly from their PC's toolbar and pick up where they left off. The feature requires both devices to be connected to the internet for optimal functionality.
Refresh your computer for $20 with these Microsoft apps
Winsage
January 29, 2026

Refresh your computer for $20 with these Microsoft apps

Microsoft Office Professional Plus 2019 for Windows is priced at .97, significantly reduced from the regular price of 9. This suite includes seven applications: Word, PowerPoint, Outlook, Excel, OneNote, Access, and Publisher. It features redesigned applications with enhanced functionalities, including advanced Excel analysis and updated tools in PowerPoint and Outlook. Users receive instant delivery and download upon purchase, and the license allows for offline use. Complimentary customer service is also available.
I couldn't be happier, as Windows 11's cross-device resume update offers more for Android
AppWizard
January 29, 2026

I couldn’t be happier, as Windows 11’s cross-device resume update offers more for Android

Microsoft is releasing new Windows 11 builds (versions 24H2 and 25H2) in the Release Preview Channel, enhancing features for Android users. The update expands the Cross-Device Resume feature to include popular applications like Spotify, Word, Excel, and PowerPoint. The mobile Copilot app is also being improved for devices from manufacturers such as Samsung, Vivo, HONOR, and OPPO. The integration between Windows and Android is being strengthened, allowing users to access mobile applications on desktops and facilitating file sharing through Phone Link.
Search