Skip to main content
QUIETLYTIC

Results appear below as you type. Use the up and down arrow keys to review them, Enter to open, Escape to dismiss.

Advisory

Microsoft Patch Tuesday August 2026: 1651 Vulnerabilities Fixed

Microsoft's August 11, 2026 Patch Tuesday fixed 1651 vulnerabilities (148 critical, 518 important) — 1 of them is confirmed under active exploitation, per…

Reported by 3 min read
Microsoft Patch Tuesday August 2026: 1651 Vulnerabilities Fixed — Advisory research covering CVE-2026-56162, CVE-2026-63508, CVE-2026-65667, CVE-2026-65770, CVE-2026-65801, CVE-2026-65816, CVE-2026-69502, CVE-2026-69555, CVE-2026-69836, CVE-2026-50481, CVE-2026-50515, CVE-2026-59115, CVE-2026-62830, CVE-2026-63509, CVE-2026-68782, CVE-2026-68789, CVE-2026-69851, CVE-2026-52490, CVE-2026-64562, CVE-2026-64564, CVE-2026-64565, CVE-2026-68121, CVE-2026-68127, CVE-2026-68131, CVE-2026-68132, CVE-2026-68140, CVE-2026-68142, CVE-2026-68143, CVE-2026-68144, CVE-2026-68146, CVE-2026-68153, CVE-2026-68166, CVE-2026-68176, CVE-2026-68180, CVE-2026-68185, CVE-2026-68198, CVE-2026-68207, CVE-2026-68210, CVE-2026-68212, CVE-2026-68214, CVE-2026-68218, CVE-2026-68236, CVE-2026-68287, CVE-2026-68310, CVE-2026-68324, CVE-2026-68325, CVE-2026-68340, CVE-2026-68349, CVE-2026-68354, CVE-2026-68357, CVE-2026-68359, CVE-2026-68360, CVE-2026-68364, CVE-2026-68377, CVE-2026-68391, CVE-2026-68395, CVE-2026-68399, CVE-2026-68402, CVE-2026-68406, CVE-2026-68407, CVE-2026-74345, CVE-2026-80607, CVE-2026-80616, CVE-2026-80637, CVE-2026-80650, CVE-2026-80653, CVE-2026-80654, CVE-2026-80681, CVE-2026-80686, CVE-2026-80694, CVE-2026-80698, CVE-2026-80709, CVE-2026-80715, CVE-2026-80721, CVE-2026-62815, CVE-2026-62873, CVE-2026-62878, CVE-2026-62893, CVE-2026-65791, CVE-2026-50540, CVE-2026-56161, CVE-2026-62896, CVE-2026-69400, CVE-2026-70332, CVE-2026-50516, CVE-2026-59118, CVE-2026-62834, CVE-2026-53791, CVE-2026-68160, CVE-2026-66309, CVE-2026-68823, CVE-2026-24301, CVE-2026-49163, CVE-2026-62816, CVE-2026-62817, CVE-2026-62818, CVE-2026-62822, CVE-2026-62823, CVE-2026-62824, CVE-2026-62827, CVE-2026-62869, CVE-2026-64921, CVE-2026-65665, CVE-2026-65668, CVE-2026-62836, CVE-2026-66800, CVE-2026-69519, CVE-2026-69558, CVE-2026-69419, CVE-2026-69543, CVE-2026-70130, CVE-2026-70460, CVE-2026-62819, CVE-2026-62820, CVE-2026-62889, CVE-2026-65679, CVE-2026-65789, CVE-2026-65796, CVE-2026-66802, CVE-2026-71331, CVE-2026-62911, CVE-2026-62890, CVE-2026-63513, CVE-2026-63515, CVE-2026-63518, CVE-2026-63519, CVE-2026-63522, CVE-2026-63525, CVE-2026-63526, CVE-2026-63532, CVE-2026-64898, CVE-2026-64903, CVE-2026-64907, CVE-2026-64909, CVE-2026-64910, CVE-2026-64911, CVE-2026-65657, CVE-2026-65664, CVE-2026-66799, CVE-2026-66807, CVE-2026-68794, CVE-2026-68804, CVE-2026-68816, CVE-2026-69855, CVE-2026-62918, CVE-2026-70452, CVE-2026-47243, CVE-2026-63385, CVE-2026-64593, CVE-2026-59124
Severity
Critical
Confidence
High
Status
Active

Full CVE Roster

All 150 CVEs from this release, ready to paste into a tracker, ticket, or SIEM search — 1 flagged as actively exploited (KEV).

CVE ID Title CVSS Severity KEV
CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability 10.0 critical
CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability 10.0 critical
CVE-2026-65667 Microsoft Teams Elevation of Privilege Vulnerability 10.0 critical
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability 10.0 critical
CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability 10.0 critical
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability 10.0 critical
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability 10.0 critical
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability 10.0 critical
CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability 10.0 critical Yes
CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability 9.9 critical
CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability 9.9 critical
CVE-2026-59115 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability 9.9 critical
CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability 9.9 critical
CVE-2026-63509 Microsoft Fabric Elevation of Privilege Vulnerability 9.9 critical
CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability 9.9 critical
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability 9.9 critical
CVE-2026-69851 Microsoft Entra ID Elevation of Privilege Vulnerability 9.9 critical
CVE-2026-52490 An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c 9.8 critical
CVE-2026-64562 KVM: nVMX: Hide shadow VMCS right after VMCLEAR 9.8 critical
CVE-2026-64564 sctp: don't free the ASCONF's own transport in DEL-IP processing 9.8 critical
CVE-2026-64565 Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() 9.8 critical
CVE-2026-68121 pppoe: reload header pointer after dev_hard_header() 9.8 critical
CVE-2026-68127 ila: reload IPv6 header after pskb_may_pull in checksum adjust 9.8 critical
CVE-2026-68131 rbd: Reset positive result codes to zero in object map update path 9.8 critical
CVE-2026-68132 super: fix emergency thaw deadlock on frozen block devices 9.8 critical
CVE-2026-68140 net/iucv: fix use-after-free of a severed iucv_path 9.8 critical
CVE-2026-68142 geneve: require CAP_NET_ADMIN in the device netns for changelink 9.8 critical
CVE-2026-68143 net: slip: serialize receive against buffer reallocation 9.8 critical
CVE-2026-68144 phonet: pep: fix use-after-free in pep_get_sb() 9.8 critical
CVE-2026-68146 ftrace: Add global mutex to serialize trace_parser access 9.8 critical
CVE-2026-68153 libceph: remove debugfs files before client teardown 9.8 critical
CVE-2026-68166 userfaultfd: prevent registration of special VMAs 9.8 critical
CVE-2026-68176 tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev 9.8 critical
CVE-2026-68180 intel_th: fix MSC output device reference leak 9.8 critical
CVE-2026-68185 LoongArch: Move jump_label_init() before parse_early_param() 9.8 critical
CVE-2026-68198 wifi: ath6kl: fix use-after-free in aggr_reset_state() 9.8 critical
CVE-2026-68207 media: ti: vpe: unwind v4l2 device registration on probe error 9.8 critical
CVE-2026-68210 media: stm32: dcmi: unregister notifier on probe failure 9.8 critical
CVE-2026-68212 media: saa7134: Fix a possible memory leak in saa7134_video_init1 9.8 critical
CVE-2026-68214 media: rtl2832: fix use-after-free in rtl2832_remove() 9.8 critical
CVE-2026-68218 media: pci: dm1105: Free allocated workqueue 9.8 critical
CVE-2026-68236 drm/amd/display: set new_stream to NULL after release 9.8 critical
CVE-2026-68287 drop_monitor: fix size calculations for 64-bit attributes 9.8 critical
CVE-2026-68310 wifi: mt76: mt7915: guard HE capability lookups 9.8 critical
CVE-2026-68324 iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() 9.8 critical
CVE-2026-68325 iommu/amd: Bound the early ACPI HID map 9.8 critical
CVE-2026-68340 hwmon: occ: validate poll response sensor blocks 9.8 critical
CVE-2026-68349 wifi: carl9170: fix buffer overflow in rx_stream failover path 9.8 critical
CVE-2026-68354 firewire: net: Fix fragmented datagram reassembly 9.8 critical
CVE-2026-68357 watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() 9.8 critical
CVE-2026-68359 hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop 9.8 critical
CVE-2026-68360 hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop 9.8 critical
CVE-2026-68364 drm/amd/display: Fix ISM dc_lock deadlock during suspend 9.8 critical
CVE-2026-68377 net/sched: act_tunnel_key: Defer dst_release to RCU callback 9.8 critical
CVE-2026-68391 Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds 9.8 critical
CVE-2026-68395 ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered 9.8 critical
CVE-2026-68399 bpf: Fix UAF in sock clone early bailouts 9.8 critical
CVE-2026-68402 wifi: cfg80211: bound element ID read when checking non-inheritance 9.8 critical
CVE-2026-68406 wifi: cfg80211: validate PMSR FTM preamble range 9.8 critical
CVE-2026-68407 wifi: nl80211: free RNR data on MBSSID mismatch 9.8 critical
CVE-2026-74345 RDMA/siw: Fix endpoint/socket association handling 9.8 critical
CVE-2026-80607 tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg 9.8 critical
CVE-2026-80616 ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() 9.8 critical
CVE-2026-80637 netfilter: synproxy: fix unaligned memory access in timestamp adjustment 9.8 critical
CVE-2026-80650 media: atomisp: gc2235: fix UAF and memory leak 9.8 critical
CVE-2026-80653 scsi: hisi_sas: Add slave_destroy interface for v3 hw 9.8 critical
CVE-2026-80654 soc: xilinx: Shutdown and free rx mailbox channel 9.8 critical
CVE-2026-80681 vxlan: re-fetch eth header after route_shortcircuit() 9.8 critical
CVE-2026-80686 mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE 9.8 critical
CVE-2026-80694 net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller 9.8 critical
CVE-2026-80698 dmaengine: idxd: fix double free of wq, engine, and group structs 9.8 critical
CVE-2026-80709 s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs 9.8 critical
CVE-2026-80715 igc: remove napi_synchronize() in igc_down() 9.8 critical
CVE-2026-80721 Bluetooth: ISO: ensure no dangling hcon references in iso_conn 9.8 critical
CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability 9.8 critical
CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability 9.8 critical
CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability 9.8 critical
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability 9.8 critical
CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability 9.8 critical
CVE-2026-50540 Kata Containers: Config Path Annotation Arbitrary File Loading 9.6 critical
CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability 9.6 critical
CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability 9.6 critical
CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability 9.6 critical
CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability 9.6 critical
CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability 9.4 critical
CVE-2026-59118 Copilot Cowork Elevation of Privilege Vulnerability 9.3 critical
CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability 9.3 critical
CVE-2026-53791 rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header 9.1 critical
CVE-2026-68160 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() 9.1 critical
CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability 9.1 critical
CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability 9.1 critical
CVE-2026-24301 Microsoft Copilot Information Disclosure Vulnerability 8.8 critical
CVE-2026-49163 Application Insights Profiler Elevation of Privilege Vulnerability 8.8 critical
CVE-2026-62816 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability 8.8 critical
CVE-2026-62817 Windows DNS Server Remote Code Execution Vulnerability 8.8 critical
CVE-2026-62818 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability 8.8 critical
CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability 8.8 critical
CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability 8.8 critical
CVE-2026-62824 Remote Desktop Client Remote Code Execution Vulnerability 8.8 critical
CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability 8.8 critical
CVE-2026-62869 Azure Entra ID Spoofing Vulnerability 8.8 critical
CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability 8.8 critical
CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability 8.8 critical
CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability 8.8 critical
CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability 8.7 critical
CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability 8.6 critical
CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability 8.6 critical
CVE-2026-69558 Microsoft Partner Center Information Disclosure Vulnerability 8.6 critical
CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability 8.5 critical
CVE-2026-69543 Azure Virtual Machines Elevation of Privilege Vulnerability 8.5 critical
CVE-2026-70130 Microsoft Office Remote Code Execution Vulnerability 8.4 critical
CVE-2026-70460 rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink 8.1 critical
CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.1 critical
CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability 8.1 critical
CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability 8.1 critical
CVE-2026-65679 Windows iSCSI Target Service Remote Code Execution Vulnerability 8.1 critical
CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability 8.1 critical
CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability 8.1 critical
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability 8.1 critical
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability 8.1 critical
CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability 8.0 critical
CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability 7.8 critical
CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability 7.8 critical
CVE-2026-63515 Microsoft Office Remote Code Execution Vulnerability 7.8 critical
CVE-2026-63518 Microsoft Office Word Remote Code Execution Vulnerability 7.8 critical
CVE-2026-63519 Microsoft Office Graphics Component Remote Code Execution Vulnerability 7.8 critical
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability 7.8 critical
CVE-2026-63525 Microsoft Office Word Remote Code Execution Vulnerability 7.8 critical
CVE-2026-63526 Microsoft Office Graphics Component Remote Code Execution Vulnerability 7.8 critical
CVE-2026-63532 Microsoft Office Remote Code Execution Vulnerability 7.8 critical
CVE-2026-64898 Microsoft Office Remote Code Execution Vulnerability 7.8 critical
CVE-2026-64903 Microsoft Office Remote Code Execution Vulnerability 7.8 critical
CVE-2026-64907 Microsoft Office Word Remote Code Execution Vulnerability 7.8 critical
CVE-2026-64909 Microsoft Office Remote Code Execution Vulnerability 7.8 critical
CVE-2026-64910 Microsoft Office Remote Code Execution Vulnerability 7.8 critical
CVE-2026-64911 Microsoft Office Remote Code Execution Vulnerability 7.8 critical
CVE-2026-65657 Microsoft Office Remote Code Execution Vulnerability 7.8 critical
CVE-2026-65664 Microsoft Office Graphics Component Remote Code Execution Vulnerability 7.8 critical
CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability 7.8 critical
CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability 7.8 critical
CVE-2026-68794 Microsoft Excel Remote Code Execution Vulnerability 7.8 critical
CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability 7.8 critical
CVE-2026-68816 Microsoft Excel Remote Code Execution Vulnerability 7.8 critical
CVE-2026-69855 Microsoft Copilot in Azure Information Disclosure Vulnerability 7.7 critical
CVE-2026-62918 Microsoft Teams Spoofing Vulnerability 7.5 critical
CVE-2026-70452 rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure 7.4 critical
CVE-2026-47243 Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs — critical
CVE-2026-63385 Libevent: HTTP header handling bugs create risk of access control bypass. — critical
CVE-2026-64593 btrfs: do not trim a device which is not writeable 9.8 high
CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability 9.8 high

Microsoft’s August 11, 2026 Patch Tuesday release covers 1651 CVEs: 148 rated critical, 518 rated important, and 532 rated moderate. Of these, 1 of them is confirmed under active exploitation.

Severity Breakdown

Severity Count
Critical 148
Important 518
Moderate 532
Actively exploited (CISA KEV) 1

Highest-Severity Vulnerabilities

Top 20 of 1651 total, by CVSS/severity:

CVE Title CVSS
CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability 10.0
CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability 10.0
CVE-2026-65667 Microsoft Teams Elevation of Privilege Vulnerability 10.0
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability 10.0
CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability 10.0
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability 10.0
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability 10.0
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability 10.0
CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability 10.0
CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability 9.9
CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability 9.9
CVE-2026-59115 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability 9.9
CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability 9.9
CVE-2026-63509 Microsoft Fabric Elevation of Privilege Vulnerability 9.9
CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability 9.9
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability 9.9
CVE-2026-69851 Microsoft Entra ID Elevation of Privilege Vulnerability 9.9
CVE-2026-52490 An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c 9.8
CVE-2026-64562 KVM: nVMX: Hide shadow VMCS right after VMCLEAR 9.8
CVE-2026-64564 sctp: don’t free the ASCONF’s own transport in DEL-IP processing 9.8

CVSS scores are sourced directly from Microsoft’s CVRF data as of August 11, 2026; exploitation status is cross-checked against CISA’s KEV catalog. Later re-scoring by NVD can shift a CVE’s score after this report was generated.

Why This Matters

With 1 vulnerability already under active exploitation, prioritizing this month’s patches isn’t optional for exposed systems — attackers are demonstrably already using at least one of these flaws. Organizations should prioritize the critical- and important-rated CVEs above, especially any with public proof-of-concept exploits.

Frequently Asked Questions

How many vulnerabilities did Microsoft patch in August 2026? 1651 CVEs, per Microsoft’s August 11, 2026 Patch Tuesday release.

Were any August 2026 Patch Tuesday vulnerabilities actively exploited? Yes — 1 of them is listed in CISA’s Known Exploited Vulnerabilities (KEV) catalog as of August 11, 2026.

Data sourced from Microsoft Security Response Center (MSRC) CVRF v3.0 and CISA’s Known Exploited Vulnerabilities (KEV) catalog, aggregated August 11, 2026. See more vulnerability research.

Report an error

Found a factual error, an outdated figure, or a broken source link? Let us know and our editorial desk will review it.

Sources & evidence

01 Microsoft Security Response Center (MSRC)
02 CISA Known Exploited Vulnerabilities (KEV) Catalog

Related intelligence

advisory

Microsoft Patch Tuesday December 2025: 349 Vulnerabilities Fixed

 advisory

Microsoft Patch Tuesday November 2025: 184 Vulnerabilities Fixed

 advisory

Microsoft Patch Tuesday October 2025: 429 Vulnerabilities Fixed

Cross-referenced intelligence

Vulnerability

CVE-2026-69836

Analyst tools

Analyst Tool

Hash Identifier

 Analyst Tool

CVSS Calculator