Microsoft Patch Tuesday, August 2026: the CVEs, page 5

Microsoft Patch Tuesday August 2026: the CVEs Microsoft published on 11 August 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jul 2026, Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025, Sep 2025, Aug 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.8CVE-2026-42976EPSS 0.3%2026-08-11

   Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.

2. 6.5CVE-2026-40375EPSS 0.8%2026-08-11

   Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.