Monthly Patch
August 2026 Monthly Patch
12 August 2026
Microsoft has released security patches to address multiple vulnerabilities in their software and products.
Microsoft has released security patches to address multiple vulnerabilities in their software and products.
The vulnerabilities that have been classified as Critical in severity are listed in the table below.
For the full list of security patches released by Microsoft, please refer to https://msrc.microsoft.com/update-guide/en-us/releaseNote/2026-Aug
CRITICAL VULNERABILITIES
Table caption
CVE Number | CVE Name | Base Score | Reference |
|---|---|---|---|
CVE-2026-65667 | Microsoft Teams Elevation of Privilege Vulnerability | 10.0 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65667 |
CVE-2026-63508 | Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability | 10.0 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63508 |
CVE-2026-56162 | Azure SQL Database Elevation of Privilege Vulnerability | 10.0 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56162 |
CVE-2026-59115 | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability | 9.9 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-59115 |
CVE-2026-50515 | Azure Service Bus Remote Code Execution Vulnerability | 9.9 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-50515 |
CVE-2026-62830 | Azure SRE Agent Elevation of Privilege Vulnerability | 9.9 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62830 |
CVE-2026-50481 | Azure Active Directory Elevation of Privilege Vulnerability | 9.9 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-50481 |
CVE-2026-68407 | wifi: nl80211: free RNR data on MBSSID mismatch | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68407 |
CVE-2026-68310 | wifi: mt76: mt7915: guard HE capability lookups | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68310 |
CVE-2026-68406 | wifi: cfg80211: validate PMSR FTM preamble range | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68406 |
CVE-2026-68402 | wifi: cfg80211: bound element ID read when checking non-inheritance | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68402 |
CVE-2026-68349 | wifi: carl9170: fix buffer overflow in rx_stream failover path | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68349 |
CVE-2026-68198 | wifi: ath6kl: fix use-after-free in aggr_reset_state() | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68198 |
CVE-2026-68357 | watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68357 |
CVE-2026-68166 | userfaultfd: prevent registration of special VMAs | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68166 |
CVE-2026-68176 | tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68176 |
CVE-2026-68132 | super: fix emergency thaw deadlock on frozen block devices | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68132 |
CVE-2026-64564 | sctp: don't free the ASCONF's own transport in DEL-IP processing | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64564 |
CVE-2026-68131 | rbd: Reset positive result codes to zero in object map update path | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68131 |
CVE-2026-68121 | pppoe: reload header pointer after dev_hard_header() | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68121 |
CVE-2026-68144 | phonet: pep: fix use-after-free in pep_get_sb() | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68144 |
CVE-2026-68143 | net: slip: serialize receive against buffer reallocation | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68143 |
CVE-2026-68377 | net/sched: act_tunnel_key: Defer dst_release to RCU callback | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68377 |
CVE-2026-68140 | net/iucv: fix use-after-free of a severed iucv_path | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68140 |
CVE-2026-68207 | media: ti: vpe: unwind v4l2 device registration on probe error | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68207 |
CVE-2026-68210 | media: stm32: dcmi: unregister notifier on probe failure | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68210 |
CVE-2026-68212 | media: saa7134: Fix a possible memory leak in saa7134_video_init1 | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68212 |
CVE-2026-68214 | media: rtl2832: fix use-after-free in rtl2832_remove() | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68214 |
CVE-2026-68218 | media: pci: dm1105: Free allocated workqueue | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68218 |
CVE-2026-68153 | libceph: remove debugfs files before client teardown | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68153 |
CVE-2026-68324 | iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68324 |
CVE-2026-68325 | iommu/amd: Bound the early ACPI HID map | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68325 |
CVE-2026-68180 | intel_th: fix MSC output device reference leak | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68180 |
CVE-2026-68127 | ila: reload IPv6 header after pskb_may_pull in checksum adjust | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68127 |
CVE-2026-68340 | hwmon: occ: validate poll response sensor blocks | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68340 |
CVE-2026-68359 | hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68359 |
CVE-2026-68360 | hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68360 |
CVE-2026-68142 | geneve: require CAP_NET_ADMIN in the device netns for changelink | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68142 |
CVE-2026-68146 | ftrace: Add global mutex to serialize trace_parser access | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68146 |
CVE-2026-68354 | firewire: net: Fix fragmented datagram reassembly | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68354 |
CVE-2026-68287 | drop_monitor: fix size calculations for 64-bit attributes | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68287 |
CVE-2026-68236 | drm/amd/display: set new_stream to NULL after release | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68236 |
CVE-2026-68364 | drm/amd/display: Fix ISM dc_lock deadlock during suspend | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68364 |
CVE-2026-68399 | bpf: Fix UAF in sock clone early bailouts | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68399 |
CVE-2026-68395 | ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68395 |
CVE-2026-65791 | Windows iSCSI Target Service Remote Code Execution Vulnerability | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65791 |
CVE-2026-62893 | Windows Deployment Services TFTP Server Remote Code Execution Vulnerability | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62893 |
CVE-2026-62878 | Windows DNS Server Remote Code Execution Vulnerability | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62878 |
CVE-2026-62815 | Microsoft QUIC Remote Code Execution Vulnerability | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62815 |
CVE-2026-62873 | Microsoft 365 Admin Center Elevation of Privilege Vulnerability | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62873 |
CVE-2026-68185 | LoongArch: Move jump_label_init() before parse_early_param() | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68185 |
CVE-2026-64562 | KVM: nVMX: Hide shadow VMCS right after VMCLEAR | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64562 |
CVE-2026-64565 | Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64565 |
CVE-2026-68391 | Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds | 9.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68391 |
CVE-2026-62896 | Microsoft Teams Elevation of Privilege Vulnerability | 9.6 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62896 |
CVE-2026-70332 | Microsoft Office SharePoint Spoofing Vulnerability | 9.6 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-70332 |
CVE-2026-50540 | Kata Containers: Config Path Annotation Arbitrary File Loading | 9.6 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-50540 |
CVE-2026-56161 | Azure Logic Apps Information Disclosure Vulnerability | 9.6 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56161 |
CVE-2026-50516 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | 9.4 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-50516 |
CVE-2026-59118 | Copilot Cowork Elevation of Privilege Vulnerability | 9.3 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-59118 |
CVE-2026-68160 | ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() | 9.1 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68160 |
CVE-2026-68823 | Azure Confidential Ledger Remote Code Execution Vulnerability | 9.1 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68823 |
CVE-2026-34191 | Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle | 9.1 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-34191 |
CVE-2026-62816 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | 8.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62816 |
CVE-2026-62822 | Windows GDI+ Remote Code Execution Vulnerability | 8.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62822 |
CVE-2026-62817 | Windows DNS Server Remote Code Execution Vulnerability | 8.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62817 |
CVE-2026-62823 | Windows DHCP Server Remote Code Execution Vulnerability | 8.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62823 |
CVE-2026-62818 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability | 8.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62818 |
CVE-2026-62824 | Remote Desktop Client Remote Code Execution Vulnerability | 8.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62824 |
CVE-2026-65665 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65665 |
CVE-2026-64921 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | 8.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64921 |
CVE-2026-62827 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | 8.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62827 |
CVE-2026-65668 | Microsoft Purview eDiscovery Elevation of Privilege Vulnerability | 8.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65668 |
CVE-2026-62869 | Azure Entra ID Spoofing Vulnerability | 8.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62869 |
CVE-2026-49163 | Application Insights Profiler Elevation of Privilege Vulnerability | 8.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-49163 |
CVE-2026-62836 | Azure SQL Managed Instance Elevation of Privilege Vulnerability | 8.7 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62836 |
CVE-2026-70130 | Microsoft Office Remote Code Execution Vulnerability | 8.4 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-70130 |
CVE-2026-62889 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 8.1 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62889 |
CVE-2026-62819 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 8.1 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62819 |
CVE-2026-71331 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | 8.1 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-71331 |
CVE-2026-66802 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | 8.1 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-66802 |
CVE-2026-65789 | Windows DNS Server Remote Code Execution Vulnerability | 8.1 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65789 |
CVE-2026-62820 | Windows DNS Server Remote Code Execution Vulnerability | 8.1 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62820 |
CVE-2026-62911 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 8.0 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62911 |
CVE-2026-66799 | Windows Key Guard Elevation of Privilege Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-66799 |
CVE-2026-62890 | Windows GDI+ Elevation of Privilege Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62890 |
CVE-2026-64907 | Microsoft Office Word Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64907 |
CVE-2026-63525 | Microsoft Office Word Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63525 |
CVE-2026-63518 | Microsoft Office Word Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63518 |
CVE-2026-65657 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65657 |
CVE-2026-64911 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64911 |
CVE-2026-64910 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64910 |
CVE-2026-64909 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64909 |
CVE-2026-64903 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64903 |
CVE-2026-64898 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64898 |
CVE-2026-63532 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63532 |
CVE-2026-63515 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63515 |
CVE-2026-66807 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-66807 |
CVE-2026-65664 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65664 |
CVE-2026-63526 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63526 |
CVE-2026-63519 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63519 |
CVE-2026-63513 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63513 |
CVE-2026-68816 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68816 |
CVE-2026-68804 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68804 |
CVE-2026-68794 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68794 |
CVE-2026-63522 | Azure SQL Database Elevation of Privilege Vulnerability | 7.8 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63522 |
CVE-2026-62918 | Microsoft Teams Spoofing Vulnerability | 7.5 | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62918 |
CVE-2026-47243 | Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs | TBD | https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-47243 |