Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
Monthly Patch

August 2026 Monthly Patch

12 August 2026

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

The vulnerabilities that have been classified as Critical in severity are listed in the table below.

For the full list of security patches released by Microsoft, please refer to https://msrc.microsoft.com/update-guide/en-us/releaseNote/2026-Aug (opens in new tab)

CRITICAL VULNERABILITIES

Table caption

CVE Number

CVE Name

Base Score

Reference

CVE-2026-65667

Microsoft Teams Elevation of Privilege Vulnerability

10.0

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65667 (opens in new tab)

CVE-2026-63508

Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

10.0

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63508 (opens in new tab)

CVE-2026-56162

Azure SQL Database Elevation of Privilege Vulnerability

10.0

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56162 (opens in new tab)

CVE-2026-59115

Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

9.9

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-59115 (opens in new tab)

CVE-2026-50515

Azure Service Bus Remote Code Execution Vulnerability

9.9

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-50515 (opens in new tab)

CVE-2026-62830

Azure SRE Agent Elevation of Privilege Vulnerability

9.9

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62830 (opens in new tab)

CVE-2026-50481

Azure Active Directory Elevation of Privilege Vulnerability

9.9

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-50481 (opens in new tab)

CVE-2026-64564

sctp: don't free the ASCONF's own transport in DEL-IP processing

9.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64564 (opens in new tab)

CVE-2026-65791

Windows iSCSI Target Service Remote Code Execution Vulnerability

9.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65791 (opens in new tab)

CVE-2026-62893

Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

9.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62893 (opens in new tab)

CVE-2026-62878

Windows DNS Server Remote Code Execution Vulnerability

9.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62878 (opens in new tab)

CVE-2026-62815

Microsoft QUIC Remote Code Execution Vulnerability

9.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62815 (opens in new tab)

CVE-2026-62873

Microsoft 365 Admin Center Elevation of Privilege Vulnerability

9.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62873 (opens in new tab)

CVE-2026-64562

KVM: nVMX: Hide shadow VMCS right after VMCLEAR

9.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64562 (opens in new tab)

CVE-2026-64565

Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()

9.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64565 (opens in new tab)

CVE-2026-62896

Microsoft Teams Elevation of Privilege Vulnerability

9.6

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62896 (opens in new tab)

CVE-2026-70332

Microsoft Office SharePoint Spoofing Vulnerability

9.6

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-70332 (opens in new tab)

CVE-2026-56161

Azure Logic Apps Information Disclosure Vulnerability

9.6

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56161 (opens in new tab)

CVE-2026-50516

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

9.4

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-50516 (opens in new tab)

CVE-2026-59118

Copilot Cowork Elevation of Privilege Vulnerability

9.3

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-59118 (opens in new tab)

CVE-2026-68823

Azure Confidential Ledger Remote Code Execution Vulnerability

9.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68823 (opens in new tab)

CVE-2026-62816

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62816 (opens in new tab)

CVE-2026-62822

Windows GDI+ Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62822 (opens in new tab)

CVE-2026-62817

Windows DNS Server Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62817 (opens in new tab)

CVE-2026-62823

Windows DHCP Server Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62823 (opens in new tab)

CVE-2026-62818

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62818 (opens in new tab)

CVE-2026-62824

Remote Desktop Client Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62824 (opens in new tab)

CVE-2026-65665

Microsoft SharePoint Server Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65665 (opens in new tab)

CVE-2026-64921

Microsoft SharePoint Server Elevation of Privilege Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64921 (opens in new tab)

CVE-2026-62827

Microsoft SharePoint Server Elevation of Privilege Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62827 (opens in new tab)

CVE-2026-65668

Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65668 (opens in new tab)

CVE-2026-62869

Azure Entra ID Spoofing Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62869 (opens in new tab)

CVE-2026-49163

Application Insights Profiler Elevation of Privilege Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-49163 (opens in new tab)

CVE-2026-62836

Azure SQL Managed Instance Elevation of Privilege Vulnerability

8.7

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62836 (opens in new tab)

CVE-2026-70130

Microsoft Office Remote Code Execution Vulnerability

8.4

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-70130 (opens in new tab)

CVE-2026-62889

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62889 (opens in new tab)

CVE-2026-62819

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62819 (opens in new tab)

CVE-2026-71331

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-71331 (opens in new tab)

CVE-2026-66802

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-66802 (opens in new tab)

CVE-2026-65789

Windows DNS Server Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65789 (opens in new tab)

CVE-2026-62820

Windows DNS Server Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62820 (opens in new tab)

CVE-2026-62911

Microsoft Exchange Server Elevation of Privilege Vulnerability

8.0

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62911 (opens in new tab)

CVE-2026-66799

Windows Key Guard Elevation of Privilege Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-66799 (opens in new tab)

CVE-2026-62890

Windows GDI+ Elevation of Privilege Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62890 (opens in new tab)

CVE-2026-64907

Microsoft Office Word Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64907 (opens in new tab)

CVE-2026-63525

Microsoft Office Word Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63525 (opens in new tab)

CVE-2026-63518

Microsoft Office Word Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63518 (opens in new tab)

CVE-2026-65657

Microsoft Office Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65657 (opens in new tab)

CVE-2026-64911

Microsoft Office Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64911 (opens in new tab)

CVE-2026-64910

Microsoft Office Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64910 (opens in new tab)

CVE-2026-64909

Microsoft Office Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64909 (opens in new tab)

CVE-2026-64903

Microsoft Office Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64903 (opens in new tab)

CVE-2026-64898

Microsoft Office Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-64898 (opens in new tab)

CVE-2026-63532

Microsoft Office Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63532 (opens in new tab)

CVE-2026-63515

Microsoft Office Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63515 (opens in new tab)

CVE-2026-66807

Microsoft Office Graphics Component Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-66807 (opens in new tab)

CVE-2026-65664

Microsoft Office Graphics Component Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-65664 (opens in new tab)

CVE-2026-63526

Microsoft Office Graphics Component Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63526 (opens in new tab)

CVE-2026-63519

Microsoft Office Graphics Component Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63519 (opens in new tab)

CVE-2026-63513

Microsoft Office Graphics Component Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63513 (opens in new tab)

CVE-2026-68816

Microsoft Excel Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68816 (opens in new tab)

CVE-2026-68804

Microsoft Excel Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68804 (opens in new tab)

CVE-2026-68794

Microsoft Excel Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68794 (opens in new tab)

CVE-2026-63522

Azure SQL Database Elevation of Privilege Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-63522 (opens in new tab)

CVE-2026-62918

Microsoft Teams Spoofing Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-62918 (opens in new tab)