--- title: Microsoft August 2026 Patch Tuesday: 400 vulnerabilities... description: Microsoft's August 2026 Patch Tuesday addresses 400 security vulnerabilities across Windows, Office, Azure, Exchange Server, .NET, and more. Of these, 42 are... canonical: https://daily.dev/posts/microsoft-august-2026-patch-tuesday-400-vulnerabilities-fixed-including-3-zero-days-ixbgytd38 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Microsoft August 2026 Patch Tuesday: 400 vulnerabilities fixed, including 3 zero-days | daily.dev og:description: Microsoft's August 2026 Patch Tuesday addresses 400 security vulnerabilities across Windows, Office, Azure, Exchange Server, .NET, and more. Of these, 42 are... og:url: https://daily.dev/posts/microsoft-august-2026-patch-tuesday-400-vulnerabilities-fixed-including-3-zero-days-ixbgytd38 og:image: https://api.daily.dev/og/posts/IXbGYtD38.png og:image:alt: Microsoft August 2026 Patch Tuesday: 400 vulnerabilities fixed, including 3 zero-days og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Microsoft August 2026 Patch Tuesday: 400 vulnerabilities fixed, including 3 zero-days **[Collections](https://daily.dev/sources/collections)** · 1 min read · 1 upvotes · 0 comments ## Summary Microsoft's August 2026 Patch Tuesday addresses 400 security vulnerabilities across Windows, Office, Azure, Exchange Server, .NET, and more. Of these, 42 are rated critical and 355 important. Three zero-days are patched: CVE-2026-68820 (WinSock elevation of privilege, actively exploited), CVE-2026-62832 (User Profile Service elevation of privilege, publicly disclosed), and CVE-2026-72971 (Container Isolation FS Filter Driver tampering, publicly disclosed). Notable critical RCE flaws include CVE-2026-62893 (TFTP Server, CVSS 9.8) and CVE-2026-62823 (DHCP Server, CVSS 8.8). SharePoint received 29 patches, three critical. Elevation of privilege bugs accounted for 40.7% of patches. Cumulative updates for Windows 11 (KB5121003 for 25H2/24H2, KB5120240 for 23H2) also bring feature additions including File Explorer size units, typo-tolerant search, Voice Access improvements, and new touchpad gesture controls. ## Content August's Patch Tuesday landed hard. Depending on which count you trust, Microsoft shipped somewhere between 398 and 421 fixes this month — the discrepancy comes down to how different trackers bucket related CVEs, but either way, it's one of the largest single-month releases on record, following July's already-massive 622-CVE batch. Sysadmins are not having a fun quarter. ## The one you need to patch right now There's an actively exploited zero-day in the Windows Ancillary Function Driver for WinSock, tracked as CVE-2026-68820 (CVSS 7.0). It's an elevation-of-privilege bug being used in a race-condition attack chain, and multiple researchers have tied it to North Korean state actors — the same family of threat groups associated with Lazarus. If you patch nothing else this month, patch this. It gets worse in combination. CVE-2026-62832, nicknamed ## Questions this post answers ### What zero-days were patched in Microsoft's August 2026 Patch Tuesday? Three zero-days were patched: CVE-2026-68820 (Windows Ancillary Function Driver for WinSock, CVSS 7.0, elevation of privilege, actively exploited in the wild), CVE-2026-62832 (Windows User Profile Service, CVSS 7.8, elevation of privilege, publicly disclosed before patching), and CVE-2026-72971 (Windows Container Isolation FS Filter Driver, tampering vulnerability, publicly disclosed before patching). _Teams managing Windows environments track zero-day disclosures like these on daily.dev to prioritize emergency patching._ ### What are the most critical RCE vulnerabilities in the August 2026 Patch Tuesday? Two critical remote code execution flaws stand out: CVE-2026-62893 affecting the Windows Deployment Services TFTP Server with a CVSS score of 9.8, and CVE-2026-62823 affecting the Windows DHCP Server with a CVSS score of 8.8. Both are rated critical and should be prioritized for immediate patching in affected environments. _Security teams deciding which CVEs to remediate first find patch prioritization coverage on daily.dev._ ### What Windows 11 cumulative updates were released in August 2026 Patch Tuesday? Two cumulative updates shipped: KB5121003 for Windows 11 versions 25H2 and 24H2, and KB5120240 for version 23H2. Beyond security fixes, these include File Explorer displaying file sizes in KB/MB/GB, typo-tolerant Windows Search, Voice Access with Voice Isolation and Korean support, new touchpad gesture controls, and Windows Hello Enhanced Sign-in Security support for peripheral fingerprint sensors. _Windows admins rolling out cumulative updates stay ahead of feature changes and regressions on daily.dev._ --- Tags: [#security](https://daily.dev/tags/security), [#microsoft](https://daily.dev/tags/microsoft), [#windows](https://daily.dev/tags/windows), [#vulnerability](https://daily.dev/tags/vulnerability) [View this post on daily.dev](https://daily.dev/posts/microsoft-august-2026-patch-tuesday-400-vulnerabilities-fixed-including-3-zero-days-ixbgytd38) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Microsoft August 2026 Patch Tuesday: 400 vulnerabilities fixed, including 3 zero-days","url":"https://daily.dev/posts/microsoft-august-2026-patch-tuesday-400-vulnerabilities-fixed-including-3-zero-days-ixbgytd38","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/microsoft-august-2026-patch-tuesday-400-vulnerabilities-fixed-including-3-zero-days-ixbgytd38"},"datePublished":"2026-08-11T18:14:16.287Z","dateModified":"2026-08-13T17:51:48.716Z","description":"Microsoft's August 2026 Patch Tuesday addresses 400 security vulnerabilities across Windows, Office, Azure, Exchange Server, .NET, and more. Of these, 42 are...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a588c0970cdd46f415c9643a1cb28cba?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a588c0970cdd46f415c9643a1cb28cba?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/microsoft-august-2026-patch-tuesday-400-vulnerabilities-fixed-including-3-zero-days-ixbgytd38","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,microsoft,windows,vulnerability","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Microsoft August 2026 Patch Tuesday: 400 vulnerabilities fixed, including 3 zero-days"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/microsoft-august-2026-patch-tuesday-400-vulnerabilities-fixed-including-3-zero-days-ixbgytd38#faq","mainEntity":[{"@type":"Question","name":"What zero-days were patched in Microsoft's August 2026 Patch Tuesday?","acceptedAnswer":{"@type":"Answer","text":"Three zero-days were patched: CVE-2026-68820 (Windows Ancillary Function Driver for WinSock, CVSS 7.0, elevation of privilege, actively exploited in the wild), CVE-2026-62832 (Windows User Profile Service, CVSS 7.8, elevation of privilege, publicly disclosed before patching), and CVE-2026-72971 (Windows Container Isolation FS Filter Driver, tampering vulnerability, publicly disclosed before patching). Teams managing Windows environments track zero-day disclosures like these on daily.dev to prioritize emergency patching."}},{"@type":"Question","name":"What are the most critical RCE vulnerabilities in the August 2026 Patch Tuesday?","acceptedAnswer":{"@type":"Answer","text":"Two critical remote code execution flaws stand out: CVE-2026-62893 affecting the Windows Deployment Services TFTP Server with a CVSS score of 9.8, and CVE-2026-62823 affecting the Windows DHCP Server with a CVSS score of 8.8. Both are rated critical and should be prioritized for immediate patching in affected environments. Security teams deciding which CVEs to remediate first find patch prioritization coverage on daily.dev."}},{"@type":"Question","name":"What Windows 11 cumulative updates were released in August 2026 Patch Tuesday?","acceptedAnswer":{"@type":"Answer","text":"Two cumulative updates shipped: KB5121003 for Windows 11 versions 25H2 and 24H2, and KB5120240 for version 23H2. Beyond security fixes, these include File Explorer displaying file sizes in KB/MB/GB, typo-tolerant Windows Search, Voice Access with Voice Isolation and Korean support, new touchpad gesture controls, and Windows Hello Enhanced Sign-in Security support for peripheral fingerprint sensors. Windows admins rolling out cumulative updates stay ahead of feature changes and regressions on daily.dev."}}]} ```