cve.bz

Microsoft Patch Tuesday, August 2026: the CVEs

Filter

Microsoft Patch Tuesday August 2026: the CVEs Microsoft published on 11 August 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jul 2026, Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025, Sep 2025, Aug 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 9.3CVE-2026-70306EPSS 1.0%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  2. 9.8CVE-2026-65791EPSS 1.0%

    Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.

  3. 9.8CVE-2026-65768EPSS 0.9%

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.

  4. 9.8CVE-2026-62893EPSS 1.0%

    Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

  5. 9.8CVE-2026-62878EPSS 1.0%

    Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.

  6. 9.8CVE-2026-62815EPSS 1.0%

    Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

  7. 9.8CVE-2026-59124EPSS 1.5%

    Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.

  8. 9.6CVE-2026-57104EPSS 0.9%

    Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.

  9. 9.4CVE-2026-50516EPSS 0.8%

    Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.