Skip to content

Patch Tuesday August 2026

Microsoft’s August 2026 security update release: 457 CVEs, 1 exploited in the wild, 84 rated critical. Severity, CVSS and affected product families from the MSRC Security Update Guide.

← July 2026 September 2026 What's new in August 2026 MSRC release notes
457CVEs, Microsoft CNA
1Exploited in the wild
84Critical
3Publicly disclosed

Exploited in the wild

Patch these first
CVEVulnerabilitySeverityCVSSImpact
CVE-2026-68820Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows

Important7Elevation of Privilege

Publicly disclosed

Details known before the fix
CVEVulnerabilitySeverityCVSSImpact
CVE-2026-69414Microsoft Defender Elevation of Privilege VulnerabilityImportant7.8Elevation of Privilege
CVE-2026-62832Windows User Profile Service Elevation of Privilege Vulnerability

Windows

Important7.8Elevation of Privilege
CVE-2026-72971Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability

Windows

Important5.5Tampering

Critical

Highest CVSS first
CVEVulnerabilitySeverityCVSSImpact
CVE-2026-65770Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

Azure

Critical10Remote Code Execution
CVE-2026-65801Microsoft Exchange Online Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-65816Azure Arc Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-69502Azure SQL Database Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-69555Azure Arc Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-69836Microsoft Entra ID Remote Code Execution VulnerabilityCritical10Remote Code Execution
CVE-2026-56162Azure SQL Database Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-63508Microsoft Planetary Computer Pro Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-65667Microsoft Teams Elevation of Privilege Vulnerability

Teams

Critical10Elevation of Privilege
CVE-2026-63509Microsoft Fabric Elevation of Privilege VulnerabilityCritical9.9Elevation of Privilege
CVE-2026-68782Azure SQL Database Elevation of Privilege Vulnerability

Azure

Critical9.9Elevation of Privilege
CVE-2026-68789Azure SQL Database Elevation of Privilege Vulnerability

Azure

Critical9.9Elevation of Privilege
CVE-2026-69851Microsoft Entra ID Elevation of Privilege VulnerabilityCritical9.9Elevation of Privilege
CVE-2026-50481Azure Active Directory Elevation of Privilege Vulnerability

Azure

Critical9.9Elevation of Privilege
CVE-2026-50515Azure Service Bus Remote Code Execution Vulnerability

Azure

Critical9.9Remote Code Execution
CVE-2026-59115Microsoft Entra Provisioning Service Elevation of Privilege VulnerabilityCritical9.9Elevation of Privilege
CVE-2026-62830Azure SRE Agent Elevation of Privilege Vulnerability

Azure

Critical9.9Elevation of Privilege
CVE-2026-62815Microsoft QUIC Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-62878Windows DNS Server Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-62893Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-65791Windows iSCSI Target Service Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-62873Microsoft 365 Admin Center Elevation of Privilege VulnerabilityCritical9.8Elevation of Privilege
CVE-2026-69400Azure Logic Apps Elevation of Privilege Vulnerability

Azure

Critical9.6Elevation of Privilege
CVE-2026-56161Azure Logic Apps Information Disclosure Vulnerability

Azure

Critical9.6Information Disclosure
CVE-2026-62896Microsoft Teams Elevation of Privilege Vulnerability

Teams

Critical9.6Elevation of Privilege
CVE-2026-70332Microsoft Office SharePoint Spoofing Vulnerability

SharePoint

Critical9.6Spoofing
CVE-2026-50516Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Azure

Critical9.4Elevation of Privilege
CVE-2026-62834Azure Data Factory Elevation of Privilege Vulnerability

Azure

Critical9.3Elevation of Privilege
CVE-2026-59118Copilot Cowork Elevation of Privilege VulnerabilityCritical9.3Elevation of Privilege
CVE-2026-66309Azure SQL Database Elevation of Privilege Vulnerability

Azure

Critical9.1Elevation of Privilege
CVE-2026-68823Azure Confidential Ledger Remote Code Execution Vulnerability

Azure

Critical9.1Remote Code Execution
CVE-2026-24301Microsoft Copilot Information Disclosure VulnerabilityCritical8.8Information Disclosure
CVE-2026-62816Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-62817Windows DNS Server Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-62818Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-62822Windows GDI+ Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-62823Windows DHCP Server Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-62824Remote Desktop Client Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-62827Microsoft SharePoint Server Elevation of Privilege Vulnerability

SharePoint

Critical8.8Elevation of Privilege
CVE-2026-64921Microsoft SharePoint Server Elevation of Privilege Vulnerability

SharePoint

Critical8.8Elevation of Privilege
CVE-2026-65665Microsoft SharePoint Server Remote Code Execution Vulnerability

SharePoint

Critical8.8Remote Code Execution
CVE-2026-49163Application Insights Profiler Elevation of Privilege VulnerabilityCritical8.8Elevation of Privilege
CVE-2026-62869Azure Entra ID Spoofing VulnerabilityCritical8.8Spoofing
CVE-2026-65668Microsoft Purview eDiscovery Elevation of Privilege VulnerabilityCritical8.8Elevation of Privilege
CVE-2026-62836Azure SQL Managed Instance Elevation of Privilege Vulnerability

Azure

Critical8.7Elevation of Privilege
CVE-2026-66800Azure Data Factory Information Disclosure Vulnerability

Azure

Critical8.6Information Disclosure
CVE-2026-69519Azure Stack HCI Information Disclosure Vulnerability

Azure

Critical8.6Information Disclosure
CVE-2026-69558Microsoft Partner Center Information Disclosure VulnerabilityCritical8.6Information Disclosure
CVE-2026-69419Azure Data Manager for Energy Remote Code Execution Vulnerability

Azure

Critical8.5Remote Code Execution
CVE-2026-69543Azure Virtual Machines Elevation of Privilege Vulnerability

Azure

Critical8.5Elevation of Privilege
CVE-2026-70130Microsoft Office Remote Code Execution Vulnerability

Office

Critical8.4Remote Code Execution
CVE-2026-62819Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-62820Windows DNS Server Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-62889Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-65679Windows iSCSI Target Service Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-65789Windows DNS Server Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-65796Windows iSCSI Target Service Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-66802Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-71331Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-62911Microsoft Exchange Server Elevation of Privilege Vulnerability

Exchange Server

Critical8Elevation of Privilege
CVE-2026-62890Windows GDI+ Elevation of Privilege Vulnerability

Windows

Critical7.8Remote Code Execution
CVE-2026-63513Microsoft Office Graphics Component Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-63515Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-63518Microsoft Office Word Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-63519Microsoft Office Graphics Component Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-63525Microsoft Office Word Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-63526Microsoft Office Graphics Component Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-63532Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-64898Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-64903Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-64907Microsoft Office Word Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-64909Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-64910Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-64911Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-65657Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-65664Microsoft Office Graphics Component Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-66799Windows Key Guard Elevation of Privilege Vulnerability

Windows

Critical7.8Elevation of Privilege
CVE-2026-66807Microsoft Office Graphics Component Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-68794Microsoft Excel Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-68804Microsoft Excel Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-68816Microsoft Excel Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-63522Azure SQL Database Elevation of Privilege Vulnerability

Azure

Critical7.8Elevation of Privilege
CVE-2026-69855Microsoft Copilot in Azure Information Disclosure Vulnerability

Azure

Critical7.7Information Disclosure
CVE-2026-62918Microsoft Teams Spoofing Vulnerability

Teams

Critical7.5Spoofing

By impact

Denial of Service12
Elevation of Privilege191
Information Disclosure94
Remote Code Execution122
Security Feature Bypass12
Spoofing22
Tampering4

By product family

.NET14
Azure27
Defender1
Dynamics 3653
Edge12
Exchange Server7
Office90
Other26
SharePoint30
Teams6
Windows241

Counts include CVEs where Microsoft is the assigning CNA. Third-party CVEs (for example Chromium in Edge) are excluded. Severity, CVSS and exploitation status are Microsoft's published values. See the full advisory list to search every CVE.

Type to search every update, post, CVE and roadmap item.

Try