cve.bz

Microsoft Patch Tuesday, August 2026: the CVEs, page 4

Filter

Microsoft Patch Tuesday August 2026: the CVEs Microsoft published on 11 August 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jul 2026, Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025, Sep 2025, Aug 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.8CVE-2026-62719EPSS 0.3%

    Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

  2. 6.5CVE-2026-62718EPSS 0.5%

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

  3. 7.8CVE-2026-62717EPSS 0.3%

    Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

  4. 6.5CVE-2026-62716EPSS 0.5%

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

  5. 6.5CVE-2026-62715EPSS 0.5%

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

  6. 6.5CVE-2026-62714EPSS 0.5%

    Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

  7. 7.8CVE-2026-62713EPSS 0.3%

    Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  8. 7.8CVE-2026-62712EPSS 0.3%

    Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2026-62711EPSS 0.3%

    Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

  10. 7.8CVE-2026-62710EPSS 0.3%

    Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  11. 5.5CVE-2026-62709EPSS 0.4%

    Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

  12. 6.4CVE-2026-62708EPSS 0.3%

    Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

  13. 7.8CVE-2026-62707EPSS 0.3%

    Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

  14. 7.0CVE-2026-62705EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  15. 5.5CVE-2026-62703EPSS 0.4%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  16. 8.6CVE-2026-62702EPSS 1.0%

    Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.

  17. 7.8CVE-2026-62701EPSS 0.3%

    Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  18. 7.8CVE-2026-62700EPSS 0.3%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

  19. 6.8CVE-2026-62699EPSS 0.4%

    Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

  20. 7.8CVE-2026-62698EPSS 0.3%

    Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.

  21. 7.8CVE-2026-62696EPSS 0.3%

    Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

  22. 7.8CVE-2026-62695EPSS 0.3%

    Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

  23. 7.0CVE-2026-62693EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

  24. 7.8CVE-2026-62692EPSS 0.3%

    Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  25. 7.0CVE-2026-62690EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  26. 7.8CVE-2026-62688EPSS 0.3%

    Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

  27. 7.0CVE-2026-61939EPSS 0.3%

    Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

  28. 7.0CVE-2026-61938EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  29. 7.8CVE-2026-61937EPSS 0.3%

    Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

  30. 5.5CVE-2026-61936EPSS 0.3%

    Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.

  31. 7.8CVE-2026-61934EPSS 0.3%

    Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  32. 5.5CVE-2026-61933EPSS 0.4%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  33. 7.8CVE-2026-61932EPSS 0.3%

    Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  34. 7.8CVE-2026-61930EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  35. 7.0CVE-2026-61929EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  36. 5.5CVE-2026-61928EPSS 0.2%

    Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

  37. 7.0CVE-2026-61927EPSS 0.2%

    Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2026-61926EPSS 0.3%

    Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

  39. 7.8CVE-2026-61925EPSS 0.3%

    Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

  40. 7.5CVE-2026-61924EPSS 0.9%

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  41. 7.8CVE-2026-61923EPSS 0.3%

    Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

  42. 6.5CVE-2026-61921EPSS 0.9%

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  43. 6.6CVE-2026-61920EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.

  44. 7.5CVE-2026-61918EPSS 0.9%

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  45. 5.5CVE-2026-61368EPSS 0.4%

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.

  46. 7.8CVE-2026-61367EPSS 0.3%

    Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  47. 7.0CVE-2026-61366EPSS 0.3%

    Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

  48. 7.8CVE-2026-61365EPSS 0.3%

    Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  49. 7.8CVE-2026-61364EPSS 0.3%

    Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  50. 8.1CVE-2026-61363EPSS 0.7%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  51. 7.0CVE-2026-61361EPSS 0.3%

    Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.

  52. 5.5CVE-2026-61360EPSS 0.4%

    Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

  53. 7.8CVE-2026-61359EPSS 0.3%

    Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

  54. 7.8CVE-2026-61358EPSS 0.4%

    Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.

  55. 7.8CVE-2026-61357EPSS 0.3%

    Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.

  56. 7.8CVE-2026-61356EPSS 0.3%

    Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  57. 7.8CVE-2026-61355EPSS 0.3%

    Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

  58. 7.8CVE-2026-61353EPSS 0.3%

    Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  59. 8.1CVE-2026-61352EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  60. 4.6CVE-2026-61350EPSS 0.5%

    Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

  61. 7.8CVE-2026-61349EPSS 0.3%

    Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

  62. 7.0CVE-2026-61348EPSS 0.3%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  63. 5.5CVE-2026-61347EPSS 0.4%

    Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

  64. 7.0CVE-2026-61346EPSS 0.3%

    Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  65. 6.5CVE-2026-61345EPSS 1.1%

    Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

  66. 6.5CVE-2026-59138EPSS 1.1%

    Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

  67. 5.5CVE-2026-59137EPSS 0.4%

    Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

  68. 5.5CVE-2026-59136EPSS 0.4%

    Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.

  69. 5.5CVE-2026-59135EPSS 0.4%

    Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

  70. 8.1CVE-2026-59134EPSS 0.7%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  71. 8.8CVE-2026-59133EPSS 0.9%

    Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.

  72. 7.5CVE-2026-59132EPSS 1.2%

    Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

  73. 5.6CVE-2026-59131EPSS 0.3%

    No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

  74. 5.6CVE-2026-59130EPSS 0.4%

    No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

  75. 5.5CVE-2026-59128EPSS 0.4%

    Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

  76. 7.8CVE-2026-59127EPSS 0.3%

    Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

  77. 7.0CVE-2026-59126EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

  78. 7.0CVE-2026-59125EPSS 0.3%

    Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

  79. 9.8CVE-2026-59124EPSS 1.5%

    Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.

  80. 7.0CVE-2026-59122EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  81. 7.3CVE-2026-59119EPSS 0.4%

    Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

  82. 8.8CVE-2026-59113EPSS 0.8%

    Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  83. 7.8CVE-2026-58651EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  84. 7.8CVE-2026-58650EPSS 0.3%

    Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  85. 7.8CVE-2026-58641EPSS 0.5%

    Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

  86. 6.5CVE-2026-58639EPSS 0.9%

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  87. 7.5CVE-2026-58612EPSS 0.9%

    Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.

  88. 5.4CVE-2026-57105EPSS 0.6%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  89. 9.6CVE-2026-57104EPSS 0.9%

    Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.

  90. 8.3CVE-2026-56179EPSS 0.3%

    Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.

  91. 7.8CVE-2026-56174EPSS 0.5%

    Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

  92. 7.8CVE-2026-54984EPSS 0.5%

    Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.

  93. 7.8CVE-2026-54981EPSS 0.5%

    Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

  94. 5.5CVE-2026-54123EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.

  95. 7.5CVE-2026-54113EPSS 1.2%

    Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.

  96. 9.4CVE-2026-50516EPSS 0.8%

    Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.

  97. 7.0CVE-2026-50472EPSS 0.3%

    Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

  98. 8.8CVE-2026-49179EPSS 0.9%

    Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network.

  99. 7.2CVE-2026-47299EPSS 1.0%

    Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.

  100. 6.5CVE-2026-47285EPSS 0.9%

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.