On August 11, Microsoft released its August 2026 Patch Tuesday release which patched 398 CVEs with 42 rated critical, 355 rated as important and one rated as moderate. This update includes patches for three zero-days, including one that was exploited in the wild.

CVE-2026-68820 is an EoP vulnerability affecting Windows Ancillary Function Driver for WinSock. It received a CVSSv3 score of 7.0 and was rated as important. A local attacker could exploit this vulnerability to elevate to SYSTEM privileges. According to Microsoft, this vulnerability was exploited in the wild as a zero-day.

CVE-2026-62832 is an elevation of privilege vulnerability affecting Windows User Profile Service. It received a CVSSv3 score of 7.8 and is rated as important. A local attacker could exploit this vulnerability to gain ADMINISTRATOR privileges. It was publicly disclosed prior to a patch being available and was assessed as “Exploitation More Likely.”

CVE-2026-72971 is a tampering vulnerability affecting the Windows Container Isolation FS Filter Driver (unionfs.sys). It received a CVSSv3 score of 5.5 and is rated as important. It was publicly disclosed prior to a patch being available. Successful exploitation would allow a local attacker to perform tampering. Despite being publicly disclosed, Microsoft assesses this vulnerability as “Exploitation Unlikely.”

This month’s update includes patches for:

• .NET
• .NET Core
• .NET Framework
• AMD Zen
• Active Directory Certificate Services (AD CS)
• Application Information Services
• Azure Active Directory
• Azure CycleCloud
• Azure Monitor Agent
• Azure Storage Explorer
• Capability Access Management Service (camsvc)
• Desktop Window Manager
• Dynamics Business Central
• GitHub Copilot and Visual Studio Code
• Microsoft Azure Attestation service and Device Health Attestation Service
• Microsoft COM for Windows
• Microsoft Defender for Endpoint
• Microsoft Digest Authentication
• Microsoft Dynamics 365 (on-premises)
• Microsoft Entra Connect Sync
• Microsoft Exchange Server
• Microsoft High Performance Computing (HPC) Pack
• Microsoft Identity Services
• Microsoft Local Security Authority Server (lsasrv)
• Microsoft Office
• Microsoft Office Access
• Microsoft Office Excel
• Microsoft Office Graphics Component
• Microsoft Office Outlook
• Microsoft Office PowerPoint
• Microsoft Office SharePoint
• Microsoft Office Word
• Microsoft OneDrive
• Microsoft PowerShell
• Microsoft PowerShell Core
• Microsoft QUIC
• Microsoft Remote Registry Service
• Microsoft Teams Mobile
• Microsoft Teams for Android
• Microsoft Windows Codecs Library
• Microsoft Windows Media Foundation
• Microsoft Windows Search Component
• Power BI
• RPC Runtime
• Reliable Multicast Transport Driver (RMCAST)
• Remote Desktop Client
• User-Mode Power Service (UMPS)
• Virtual Hard Disk (VHD) Miniport Driver
• Visual Studio Code
• Visual Studio Code - Python extension
• Visual Studio Code CoPilot Chat Extension
• Windows Accessibility Infrastructure (ATBroker.exe)
• Windows Active Directory
• Windows Ancillary Function Driver for WinSock
• Windows Autopilot
• Windows Backup Engine
• Windows Bind Filter Driver
• Windows Cloud Files Mini Filter Driver
• Windows Common Log File System Driver
• Windows Container Isolation FS Filter Driver (unionfs.sys)
• Windows Cross Device Service
• Windows DHCP Client
• Windows DHCP Server
• Windows DNS
• Windows DWM Core Library
• Windows Defender Firewall Service
• Windows Deployment Services
• Windows Device Association Service
• Windows Display Enhancement Service
• Windows Encrypting File System (EFS)
• Windows Event Logging Service
• Windows GDI
• Windows GDI+
• Windows Graphics Kernel
• Windows HTTP Protocol Stack
• Windows HTTP.sys
• Windows Hello
• Windows Hyper-V
• Windows Imaging Component
• Windows Installer
• Windows Kerberos
• Windows Kernel
• Windows Key Guard
• Windows LDAP - Lightweight Directory Access Protocol
• Windows LUAFV
• Windows License Manager
• Windows MIDI Service Module
• Windows Management Instrumentation
• Windows Management Services
• Windows Message Queuing
• Windows Modern Device Management (MDM)
• Windows NTFS
• Windows Narrator Braille
• Windows Network Address Translation (NAT)
• Windows Network Connection Broker
• Windows Network File System
• Windows Package Manager
• Windows Program Compatibility Assistant Service
• Windows Projected File System
• Windows Push Notifications
• Windows RPC API
• Windows Remote Access API
• Windows Remote Access Connection Manager
• Windows Remote Desktop Services
• Windows Remote Help
• Windows Remote Help Defense
• Windows Routing and Remote Access Service (RRAS)
• Windows SMB Client
• Windows SMB Server
• Windows Schannel
• Windows Secure Socket Tunneling Protocol (SSTP)
• Windows Sensor Data Service
• Windows Shell
• Windows Storage
• Windows Storage Port Driver
• Windows TCP/IP
• Windows Telephony Service
• Windows USB Driver
• Windows Universal Disk Format File System Driver (UDFS)
• Windows User Profile Service
• Windows Win32K
• Windows Wired AutoConfig Service
• Windows Work Folder Service
• Windows iSCSI Target Service
• Winlogon

For more information, please visit our blog.