← gociux.comall Patch Tuesdays

Patch Tuesday · August 2026

Patch Tuesday August 2026: 402 Microsoft CVEs, 1 exploited, 44 critical

, Gociux · 11 Aug 2026 · generated from Microsoft's security update API · 3 min read

402CVEs fixed
1exploited
44critical
2publicly disclosed

Microsoft's August 2026 release (published 11 Aug 2026) fixes 402 Microsoft CVEs across Windows, Office, Azure and server products. 1 is already exploited in the wild, which makes it the first thing to deploy. 2 more were publicly disclosed before a fix existed. 44 are rated critical and 34 are assessed as more likely to be exploited. CISA has already added 2 of them to its Known Exploited Vulnerabilities catalog.

Patch order: exploited first, then publicly disclosed, then critical remote code execution on internet-facing systems, then everything Microsoft marks "exploitation more likely". The list below is in that order. Use stack check for Microsoft CVEs CISA has confirmed exploited over time.

Patch first (11)

CVE-2026-68820EXPLOITEDCISA KEVCVSS 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Important · Elevation of Privilege · Windows Ancillary Function Driver for WinSock

CVE-2026-62832DISCLOSED

Windows User Profile Service Elevation of Privilege Vulnerability

unrated · impact n/a · Windows User Profile Service

CVE-2026-72971DISCLOSEDCVSS 5.5

Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability

Important · Tampering · Windows Container Isolation FS Filter Driver (unionfs.sys)

CVE-2026-62893CVSS 9.8

Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

Critical · Remote Code Execution · Windows Deployment Services

CVE-2026-62823CVSS 8.8

Windows DHCP Server Remote Code Execution Vulnerability

Critical · Remote Code Execution · Windows DHCP Server

CVE-2026-65665CVSS 8.8

Microsoft SharePoint Server Remote Code Execution Vulnerability

Critical · Remote Code Execution · Microsoft Office SharePoint

CVE-2026-62815CVSS 9.8

Microsoft QUIC Remote Code Execution Vulnerability

Critical · Remote Code Execution · Microsoft QUIC

CVE-2026-62878CVSS 9.8

Windows DNS Server Remote Code Execution Vulnerability

Critical · Remote Code Execution · Windows DNS

CVE-2026-65791CVSS 9.8

Windows iSCSI Target Service Remote Code Execution Vulnerability

Critical · Remote Code Execution · Windows iSCSI Target Service

CVE-2026-62816CVSS 8.8

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Critical · Remote Code Execution · Reliable Multicast Transport Driver (RMCAST)

CVE-2026-62817CVSS 8.8

Windows DNS Server Remote Code Execution Vulnerability

Critical · Remote Code Execution · Windows DNS

By impact

ImpactCVEs
Elevation of Privilege159
Remote Code Execution112
Information Disclosure85
Spoofing16
Denial of Service11
Security Feature Bypass11
Other4
Tampering4

Most-patched components

ComponentCVEs
Microsoft Office SharePoint29
Microsoft Office29
Microsoft Office Excel28
Microsoft Office Word17
Windows DNS16
Windows DHCP Server14
Windows Win32K13
Windows Telephony Service12
Windows Kernel9
.NET9

How this is made: built automatically from Microsoft's August 2026 release via the MSRC CVRF API. Counted: CVEs assigned by Microsoft and first published on release day; third-party CVEs Microsoft republishes (Chromium for Edge, Linux and Azure Linux packages, open-source libraries) and later re-releases are excluded, so totals can differ slightly from other trackers. Cross-checked against the CISA KEV catalog. Severity, impact and exploitation status are Microsoft's own assessments at release time and can change; always confirm in the Security Update Guide before scheduling changes.

all Patch Tuesdays →

Patching on evidence, every month?

We wire Microsoft's monthly release, CISA KEV and EPSS into your vulnerability workflow, so the few updates that matter ship first, with deadlines an auditor accepts.

Get in touch →