Microsoft's security release of 11 August 2026
Patch Tuesday, August 2026, page 5
As of , CISA lists two of the 402 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-65660, Microsoft SharePoint Server Remote Code Execution.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 401 | CVE-2026-61350Windows NTFS Information Disclosure | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 402 | CVE-2026-62829Microsoft SharePoint Server Spoofing | None | Not on CISA's list | 4.6 Medium | 0.00 |