Microsoft's security release of 11 August 2026
Patch Tuesday, August 2026, page 2
As of , CISA lists two of the 402 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-65660, Microsoft SharePoint Server Remote Code Execution.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2026-62839Microsoft SharePoint Server Spoofing | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 102 | CVE-2026-62902.NET Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 103 | CVE-2026-62915Microsoft Exchange Server Security Feature Bypass | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 104 | CVE-2026-63512Microsoft SharePoint Server Tampering | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 105 | CVE-2026-65769Microsoft Teams iOS Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 106 | CVE-2026-65785Windows DHCP Client Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 107 | CVE-2026-65794Windows SMB Client Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 108 | CVE-2026-65806Azure CycleCloud Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 109 | CVE-2026-65813Microsoft Exchange Server Elevation of Privilege | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 110 | CVE-2026-66301Microsoft Dynamics 365 (On-Premises) Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 111 | CVE-2026-70327Microsoft Excel Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 112 | CVE-2026-70328Microsoft Excel Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 113 | CVE-2026-62899.NET Security Feature Bypass | None | Not on CISA's list | 5.9 Medium | 0.01 |
| 114 | CVE-2026-62900.NET Information Disclosure | None | Not on CISA's list | 5.9 Medium | 0.01 |
| 115 | CVE-2026-68819Windows Network File System Denial of Service | None | Not on CISA's list | 5.9 Medium | 0.01 |
| 116 | CVE-2026-62842Microsoft Office Graphics Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 117 | CVE-2026-63517Microsoft Office Graphics Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 118 | CVE-2026-63524Microsoft Office Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 119 | CVE-2026-63528Microsoft Office Word Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 120 | CVE-2026-63529Microsoft Office Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 121 | CVE-2026-63530Microsoft Office Word Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 122 | CVE-2026-63531Microsoft Office Word Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 123 | CVE-2026-64899Microsoft Office Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 124 | CVE-2026-64917Microsoft Office Word Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 125 | CVE-2026-68797Microsoft Excel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 126 | CVE-2026-68799Microsoft Excel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 127 | CVE-2026-68802Microsoft Excel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 128 | CVE-2026-68808Microsoft Excel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 129 | CVE-2026-68813Microsoft Excel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 130 | CVE-2026-70314Microsoft Office Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 131 | CVE-2026-70318Microsoft Excel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 132 | CVE-2026-62917Microsoft SharePoint Server Spoofing | None | Not on CISA's list | 4.6 Medium | 0.01 |
| 133 | CVE-2026-64897Microsoft SharePoint Server Spoofing | None | Not on CISA's list | 4.6 Medium | 0.01 |
| 134 | CVE-2026-64902Microsoft SharePoint Server Spoofing | None | Not on CISA's list | 4.6 Medium | 0.01 |
| 135 | CVE-2026-64916Microsoft SharePoint Server Spoofing | None | Not on CISA's list | 4.6 Medium | 0.01 |
| 136 | CVE-2026-64922Microsoft SharePoint Server Spoofing | None | Not on CISA's list | 4.6 Medium | 0.01 |
| 137 | CVE-2026-62882Microsoft Outlook Spoofing | None | Not on CISA's list | 4.3 Medium | 0.01 |
| 138 | CVE-2026-62869Azure Entra ID Spoofing | None | Not on CISA's list | 8.8 High | 0.00 |
| 139 | CVE-2026-70130Microsoft Office Remote Code Execution | None | Not on CISA's list | 8.4 High | 0.00 |
| 140 | CVE-2026-56179Windows Network Address Translation (NAT) Spoofing | None | Not on CISA's list | 8.3 High | 0.00 |
| 141 | CVE-2026-42976Remote Access Management service/API (RPC server) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 142 | CVE-2026-54981Visual Studio Code Python Extension Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.00 |
| 143 | CVE-2026-54984Windows Imaging Component Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 144 | CVE-2026-56174Windows Narrator Braille Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 145 | CVE-2026-58641.NET Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 146 | CVE-2026-58650Visual Studio Code Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.00 |
| 147 | CVE-2026-58651Microsoft Word Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 148 | CVE-2026-59127Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 149 | CVE-2026-61349Windows Work Folder Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 150 | CVE-2026-61353Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 151 | CVE-2026-61355Windows Sensor Data Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 152 | CVE-2026-61356Windows Remote Desktop Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 153 | CVE-2026-61357Application Information Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 154 | CVE-2026-61358Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 155 | CVE-2026-61359Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 156 | CVE-2026-61364Windows Remote Desktop Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 157 | CVE-2026-61365Windows Remote Desktop Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 158 | CVE-2026-61367Windows Remote Desktop Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 159 | CVE-2026-61923Windows Display Enhancement Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 160 | CVE-2026-61925Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 161 | CVE-2026-61926Windows USB Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 162 | CVE-2026-61930Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 163 | CVE-2026-61932Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 164 | CVE-2026-61934Windows Bind Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 165 | CVE-2026-61937Windows HTTP.sys Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 166 | CVE-2026-62688Windows MIDI Service Module Elevation of Privileges | None | Not on CISA's list | 7.8 High | 0.00 |
| 167 | CVE-2026-62692Windows Remote Desktop Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 168 | CVE-2026-62695Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 169 | CVE-2026-62696Windows Program Compatibility Assistant Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 170 | CVE-2026-62698Microsoft Digest Authentication Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 171 | CVE-2026-62700Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 172 | CVE-2026-62701Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 173 | CVE-2026-62707Windows Modern Device Management (MDM) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 174 | CVE-2026-62710Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 175 | CVE-2026-62711Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 176 | CVE-2026-62712Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 177 | CVE-2026-62713Windows Cloud Files Mini Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 178 | CVE-2026-62717Windows Message Queuing Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 179 | CVE-2026-62719Windows Message Queuing Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 180 | CVE-2026-62721Windows User-Mode Power Service (UMPS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 181 | CVE-2026-62722Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 182 | CVE-2026-62732Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 183 | CVE-2026-62733Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 184 | CVE-2026-62735Windows HTTP.sys Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 185 | CVE-2026-62736Windows DHCP Client Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 186 | CVE-2026-62737Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 187 | CVE-2026-62739Windows HTTP.sys Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 188 | CVE-2026-62741Windows HTTP.sys Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 189 | CVE-2026-62747Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 190 | CVE-2026-62751Windows Projected File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 191 | CVE-2026-62752Windows Kerberos Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 192 | CVE-2026-62754Windows Kerberos Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 193 | CVE-2026-62755Windows DHCP Client Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 194 | CVE-2026-62758Windows Remote Access Connection Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 195 | CVE-2026-62761Windows DHCP Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 196 | CVE-2026-62768Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 197 | CVE-2026-62770Windows Shell Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 198 | CVE-2026-62771Windows Cloud Files Mini Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 199 | CVE-2026-62772Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 200 | CVE-2026-62776Windows DHCP Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |