Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120249 · MSRC
CVE tracker
Microsoft Patch Tuesday
What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.
All CVEs – Patch Tuesday August 2026
457 vulnerabilities
Azure SQL Database Elevation of Privilege Vulnerability
Azure · MSRC
Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
Other · MSRC
Microsoft Teams Elevation of Privilege Vulnerability
Microsoft Office · MSRC
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
Azure · MSRC
Microsoft Exchange Online Elevation of Privilege Vulnerability
Server software (Exchange, SharePoint …) · MSRC
Azure Arc Elevation of Privilege Vulnerability
Azure · MSRC
Azure SQL Database Elevation of Privilege Vulnerability
Azure · MSRC
Azure Arc Elevation of Privilege Vulnerability
Azure · MSRC
Microsoft Entra ID Remote Code Execution Vulnerability
Azure · MSRC
Azure Active Directory Elevation of Privilege Vulnerability
Azure · MSRC
Azure Service Bus Remote Code Execution Vulnerability
Microsoft Office · MSRC
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
Azure · MSRC
Azure SRE Agent Elevation of Privilege Vulnerability
Azure · MSRC
Microsoft Fabric Elevation of Privilege Vulnerability
Microsoft Office · MSRC
Azure SQL Database Elevation of Privilege Vulnerability
Azure · MSRC
Azure SQL Database Elevation of Privilege Vulnerability
Azure · MSRC
Microsoft Entra ID Elevation of Privilege Vulnerability
Azure · MSRC
Microsoft QUIC Remote Code Execution Vulnerability
Microsoft 365 Admin Center Elevation of Privilege Vulnerability
Azure · MSRC
Windows DNS Server Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120233 · MSRC
Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120233 · MSRC
Windows iSCSI Target Service Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120233 · MSRC
Azure Logic Apps Information Disclosure Vulnerability
Azure · MSRC
Microsoft Teams Elevation of Privilege Vulnerability
Microsoft Office · MSRC
Azure Logic Apps Elevation of Privilege Vulnerability
Azure · MSRC
Microsoft Office SharePoint Spoofing Vulnerability
Microsoft Office · MSRC
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Azure · MSRC
Copilot Cowork Elevation of Privilege Vulnerability
Microsoft Dynamics · MSRC
Azure Data Factory Elevation of Privilege Vulnerability
Azure · MSRC
Azure SQL Database Elevation of Privilege Vulnerability
Azure · MSRC
Azure Confidential Ledger Remote Code Execution Vulnerability
Azure · MSRC
Microsoft Copilot Information Disclosure Vulnerability
Other · MSRC
Application Insights Profiler Elevation of Privilege Vulnerability
Azure · MSRC
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120249 · MSRC
Windows DNS Server Remote Code Execution Vulnerability
Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120233 · MSRC
Windows GDI+ Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120249 · MSRC
Windows DHCP Server Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120233 · MSRC
Remote Desktop Client Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5120418 KB5120386 KB5120385 · MSRC
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Microsoft Office · KB5002905 KB5002906 KB5002894 KB5002896 · MSRC
Azure Entra ID Spoofing Vulnerability
Azure · MSRC
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Microsoft Office · KB5002905 KB5002906 KB5002894 KB5002896 · MSRC
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
Azure · MSRC
Azure SQL Managed Instance Elevation of Privilege Vulnerability
Microsoft Office · MSRC
Azure Data Factory Information Disclosure Vulnerability
Azure · MSRC
Azure Stack HCI Information Disclosure Vulnerability
Azure · MSRC
Microsoft Partner Center Information Disclosure Vulnerability
Azure · MSRC
Azure Data Manager for Energy Remote Code Execution Vulnerability
Azure · MSRC
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.