Microsoft's security release of 11 August 2026
Patch Tuesday, August 2026, page 4
As of , CISA lists two of the 402 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-65660, Microsoft SharePoint Server Remote Code Execution.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 301 | CVE-2026-59126Windows Event Logging Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 302 | CVE-2026-61346Windows Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 303 | CVE-2026-61348Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 304 | CVE-2026-61361Windows DHCP Client Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 305 | CVE-2026-61366Windows Network Connection Broker Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 306 | CVE-2026-61927Windows Bind Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 307 | CVE-2026-61929Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 308 | CVE-2026-61938Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 309 | CVE-2026-61939Winlogon Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 310 | CVE-2026-62690Windows Push Notifications Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 311 | CVE-2026-62693Windows MIDI Service Module Elevation of Privileges | None | Not on CISA's list | 7.0 High | 0.00 |
| 312 | CVE-2026-62705Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 313 | CVE-2026-62723Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 314 | CVE-2026-62724Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 315 | CVE-2026-62725Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 316 | CVE-2026-62726Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 317 | CVE-2026-62728Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 318 | CVE-2026-62729Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 319 | CVE-2026-62734Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 320 | CVE-2026-62748Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 321 | CVE-2026-62749Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 322 | CVE-2026-62753Windows HTTP.sys Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 323 | CVE-2026-62766Windows Kerberos Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 324 | CVE-2026-62773Windows Kerberos Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 325 | CVE-2026-62774Windows Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 326 | CVE-2026-62780Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 327 | CVE-2026-62788Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 328 | CVE-2026-62892Capability Access Management Service (camsvc) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 329 | CVE-2026-62897.NET Framework Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 330 | CVE-2026-62908Windows Backup Engine Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 331 | CVE-2026-65678Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 332 | CVE-2026-65776Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 333 | CVE-2026-65778Windows Autopilot Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 334 | CVE-2026-65779Windows Autopilot Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 335 | CVE-2026-65780Windows Autopilot Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 336 | CVE-2026-65781Windows Autopilot Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 337 | CVE-2026-65782Windows Autopilot Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 338 | CVE-2026-65783Windows Autopilot Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 339 | CVE-2026-65788Desktop Window Manager Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 340 | CVE-2026-70307Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 341 | CVE-2026-62699Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 342 | CVE-2026-62769Windows DNS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 343 | CVE-2026-62881Windows DNS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 344 | CVE-2026-62883Windows DNS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 345 | CVE-2026-65680Microsoft OneDrive for MacOS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 346 | CVE-2026-65795Windows DNS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 347 | CVE-2026-65797Windows DNS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 348 | CVE-2026-65798Windows DNS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 349 | CVE-2026-65799Windows DNS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 350 | CVE-2026-70304Windows DNS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 351 | CVE-2026-70330Windows DNS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 352 | CVE-2026-62708Windows Kernel Elevation of Privilege | None | Not on CISA's list | 6.4 Medium | 0.00 |
| 353 | CVE-2026-59130AMD Zen Information Disclosure | None | Not on CISA's list | 5.6 Medium | 0.00 |
| 354 | CVE-2026-59131AMD Zen Information Disclosure | None | Not on CISA's list | 5.6 Medium | 0.00 |
| 355 | CVE-2026-54123Microsoft Defender for Endpoint for Mac Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 356 | CVE-2026-59128Windows Encrypting File System (EFS) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 357 | CVE-2026-59135Microsoft Windows Search Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 358 | CVE-2026-59136Microsoft COM for Windows Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 359 | CVE-2026-59137Windows Event Logging Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 360 | CVE-2026-61347Windows Event Logging Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 361 | CVE-2026-61360Windows GDI Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 362 | CVE-2026-61928Windows Hello Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 363 | CVE-2026-61933Windows DWM Core Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 364 | CVE-2026-61936Windows Defender Firewall Service Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 365 | CVE-2026-62703Windows DWM Core Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 366 | CVE-2026-62709Windows GDI+ Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 367 | CVE-2026-62730Windows Wired AutoConfig Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 368 | CVE-2026-62738Windows Management Instrumentation Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 369 | CVE-2026-62740Windows Imaging Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 370 | CVE-2026-62743Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 371 | CVE-2026-62746Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 372 | CVE-2026-62775Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 373 | CVE-2026-62786Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 374 | CVE-2026-62793Windows NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 375 | CVE-2026-62796Windows NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 376 | CVE-2026-62798Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 377 | CVE-2026-62887Windows NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 378 | CVE-2026-63521Microsoft Office Word Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 379 | CVE-2026-65662Windows GDI Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 380 | CVE-2026-65784Windows NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 381 | CVE-2026-66806Microsoft Office Word Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 382 | CVE-2026-66809Microsoft Office Graphics Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 383 | CVE-2026-66810Microsoft Office Word Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 384 | CVE-2026-68809Powerpoint Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 385 | CVE-2026-70310Microsoft Word Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 386 | CVE-2026-70312Powerpoint Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 387 | CVE-2026-70315Microsoft Office Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 388 | CVE-2026-70316Powerpoint Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 389 | CVE-2026-70317Microsoft Office Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 390 | CVE-2026-70319Microsoft Office Word Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 391 | CVE-2026-70320Powerpoint Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 392 | CVE-2026-70322Powerpoint Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 393 | CVE-2026-70323Microsoft Office Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 394 | CVE-2026-70325Powerpoint Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 395 | CVE-2026-70348Windows Management Services Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 396 | CVE-2026-72971Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 397 | CVE-2026-70339Microsoft Edge (Chromium-based) Remote Code Execution | None | Not on CISA's list | 5.4 Medium | 0.00 |
| 398 | CVE-2026-62757Windows Schannel Security Feature Bypass | None | Not on CISA's list | 5.3 Medium | 0.00 |
| 399 | CVE-2026-65777Active Directory Security Feature Bypass | None | Not on CISA's list | 5.3 Medium | 0.00 |
| 400 | CVE-2026-61368Windows Hyper-V Information Disclosure | None | Not on CISA's list | 5.0 Medium | 0.00 |