Patch Tuesday August 2026: what Microsoft shipped

Microsoft published its security updates on Tuesday, 11 August 2026.

On the day, the briefing reads Microsoft's advisories and this page lists what carried a flag. It stays here afterwards as the record.

Which flaws were flagged?

One flagged by Microsoft as exploited at release.

2 flagged by Microsoft as publicly disclosed.

One is in the CISA KEV catalog.

• CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Exploited at release · In KEV
• CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability Publicly disclosed
• CVE-2026-72971 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability Publicly disclosed

What PlainSec published

• Defender flaw now has a PoC and federal clock (2026-08-25)
• UAT-10147 Hides SPECTRE Inside Server Intrusions (2026-08-25)
• Azure Tenant Dumps Expose the Org Chart (2026-08-19)
• StopAndProtect Used WordPress as Campaign Infrastructure (2026-08-19)
• Tenable Tracks Storm-0501’s Azure Tenant Ransomware (2026-08-18)
• CISA’s KEV Update Spans Four Live Exploits (2026-08-17)
• Windows 11 DIMM Metadata Rewrite Bypasses Defenses (2026-08-17)
• SharePoint JWT Flaw Is Being Exploited (2026-08-14)
• Gunra Shifts Ransomware to Perimeter Break-ins (2026-08-13)
• Akira Used Safe Mode to Silence EDR (2026-08-13)
• Defender Cloud Scan Opens a SYSTEM Path (2026-08-13)
• VulnCheck Chains SharePoint Bypass Into RCE (2026-08-11)

What the last cycles held

July 2026: 6 flagged.

June 2026: 4 flagged.

May 2026: 5 flagged.

We hold 404 CVEs from Microsoft's 2026-Aug document. That is what our records reach, not the size of the release: it grows for weeks after the day.