Patch Tuesday

Patch Tuesday August 2026 – known issues, zero-days and what to do

On 11 Aug 2026 Microsoft fixed 457 vulnerabilities – critical: 84, already exploited (zero-days): 1. Known issues with the updates: 1 open.

457vulnerabilities

84critical

1zero-days

1known issues

What to do now

Zero-day first: one vulnerability is already being exploited (CVE-2026-68820) – install the update as soon as possible, starting with servers and exposed systems.
84 critical vulnerabilities (mainly Windows, Microsoft Office, Azure) – roll out promptly after a short test.
Open issue with KB5120249: “Windows 11 File History: Last copied date and Previous Versions broken after updates” – check in a test group before a wide rollout.

Zero-days: already exploited

CVE-2026-68820ImportantCVSS 7.0Elevation of privilege

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120249

Critical vulnerabilities (60)

CVE-2026-56162CriticalCVSS 10.0Elevation of privilege

Azure SQL Database Elevation of Privilege Vulnerability

Azure

CVE-2026-63508CriticalCVSS 10.0Elevation of privilege

Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

Other

CVE-2026-65667CriticalCVSS 10.0Elevation of privilege

Microsoft Teams Elevation of Privilege Vulnerability

Microsoft Office

CVE-2026-65770CriticalCVSS 10.0Remote code execution

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

Azure

CVE-2026-65801CriticalCVSS 10.0Elevation of privilege

Microsoft Exchange Online Elevation of Privilege Vulnerability

Server software (Exchange, SharePoint …)

CVE-2026-65816CriticalCVSS 10.0Elevation of privilege

Azure Arc Elevation of Privilege Vulnerability

Azure

Show 54 more critical vulnerabilities

CVE-2026-69502CriticalCVSS 10.0Elevation of privilege

Azure SQL Database Elevation of Privilege Vulnerability

Azure

CVE-2026-69555CriticalCVSS 10.0Elevation of privilege

Azure Arc Elevation of Privilege Vulnerability

Azure

CVE-2026-69836CriticalCVSS 10.0Remote code execution

Microsoft Entra ID Remote Code Execution Vulnerability

Azure

CVE-2026-50481CriticalCVSS 9.9Elevation of privilege

Azure Active Directory Elevation of Privilege Vulnerability

Azure

CVE-2026-50515CriticalCVSS 9.9Remote code execution

Azure Service Bus Remote Code Execution Vulnerability

Microsoft Office

CVE-2026-59115CriticalCVSS 9.9Elevation of privilege

Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

Azure

CVE-2026-62830CriticalCVSS 9.9Elevation of privilege

Azure SRE Agent Elevation of Privilege Vulnerability

Azure

CVE-2026-63509CriticalCVSS 9.9Elevation of privilege

Microsoft Fabric Elevation of Privilege Vulnerability

Microsoft Office

CVE-2026-68782CriticalCVSS 9.9Elevation of privilege

Azure SQL Database Elevation of Privilege Vulnerability

Azure

CVE-2026-68789CriticalCVSS 9.9Elevation of privilege

Azure SQL Database Elevation of Privilege Vulnerability

Azure

CVE-2026-69851CriticalCVSS 9.9Elevation of privilege

Microsoft Entra ID Elevation of Privilege Vulnerability

Azure

CVE-2026-62815CriticalCVSS 9.8Remote code execution

Microsoft QUIC Remote Code Execution Vulnerability

Windows · KB5120242 KB5120229 KB5120233 KB5120228

CVE-2026-62873CriticalCVSS 9.8Elevation of privilege

Microsoft 365 Admin Center Elevation of Privilege Vulnerability

Azure

CVE-2026-62878CriticalCVSS 9.8Remote code execution

Windows DNS Server Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120233

CVE-2026-62893CriticalCVSS 9.8Remote code execution

Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120233

CVE-2026-65791CriticalCVSS 9.8Remote code execution

Windows iSCSI Target Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120233

CVE-2026-56161CriticalCVSS 9.6Information disclosure

Azure Logic Apps Information Disclosure Vulnerability

Azure

CVE-2026-62896CriticalCVSS 9.6Elevation of privilege

Microsoft Teams Elevation of Privilege Vulnerability

Microsoft Office

CVE-2026-69400CriticalCVSS 9.6Elevation of privilege

Azure Logic Apps Elevation of Privilege Vulnerability

Azure

CVE-2026-70332CriticalCVSS 9.6Spoofing

Microsoft Office SharePoint Spoofing Vulnerability

Microsoft Office

CVE-2026-50516CriticalCVSS 9.4Elevation of privilege

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Azure

CVE-2026-59118CriticalCVSS 9.3Elevation of privilege

Copilot Cowork Elevation of Privilege Vulnerability

Microsoft Dynamics

CVE-2026-62834CriticalCVSS 9.3Elevation of privilege

Azure Data Factory Elevation of Privilege Vulnerability

Azure

CVE-2026-66309CriticalCVSS 9.1Elevation of privilege

Azure SQL Database Elevation of Privilege Vulnerability

Azure

CVE-2026-68823CriticalCVSS 9.1Remote code execution

Azure Confidential Ledger Remote Code Execution Vulnerability

Azure

CVE-2026-24301CriticalCVSS 8.8Information disclosure

Microsoft Copilot Information Disclosure Vulnerability

Other

CVE-2026-49163CriticalCVSS 8.8Elevation of privilege

Application Insights Profiler Elevation of Privilege Vulnerability

Azure

CVE-2026-62816CriticalCVSS 8.8Remote code execution

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120249

CVE-2026-62817CriticalCVSS 8.8Remote code execution

Windows DNS Server Remote Code Execution Vulnerability

Windows · KB5120238 KB5120242 KB5120229 KB5120233

CVE-2026-62818CriticalCVSS 8.8Remote code execution

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120233

CVE-2026-62822CriticalCVSS 8.8Remote code execution

Windows GDI+ Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120249

CVE-2026-62823CriticalCVSS 8.8Remote code execution

Windows DHCP Server Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120233

CVE-2026-62824CriticalCVSS 8.8Remote code execution

Remote Desktop Client Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120418 KB5120386 KB5120385

CVE-2026-62827CriticalCVSS 8.8Elevation of privilege

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft Office · KB5002905 KB5002906 KB5002894 KB5002896

CVE-2026-62869CriticalCVSS 8.8Spoofing

Azure Entra ID Spoofing Vulnerability

Azure

CVE-2026-64921CriticalCVSS 8.8Elevation of privilege

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft Office · KB5002905 KB5002906 KB5002894 KB5002896

CVE-2026-65665CriticalCVSS 8.8Remote code execution

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Office · KB5002894 KB5002896 KB5002893

CVE-2026-65668CriticalCVSS 8.8Elevation of privilege

Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

Azure

CVE-2026-62836CriticalCVSS 8.7Elevation of privilege

Azure SQL Managed Instance Elevation of Privilege Vulnerability

Microsoft Office

CVE-2026-66800CriticalCVSS 8.6Information disclosure

Azure Data Factory Information Disclosure Vulnerability

Azure

CVE-2026-69519CriticalCVSS 8.6Information disclosure

Azure Stack HCI Information Disclosure Vulnerability

Azure

CVE-2026-69558CriticalCVSS 8.6Information disclosure

Microsoft Partner Center Information Disclosure Vulnerability

Azure

CVE-2026-69419CriticalCVSS 8.5Remote code execution

Azure Data Manager for Energy Remote Code Execution Vulnerability

Azure

CVE-2026-69543CriticalCVSS 8.5Elevation of privilege

Azure Virtual Machines Elevation of Privilege Vulnerability

Azure

CVE-2026-70130CriticalCVSS 8.4Remote code execution

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office

CVE-2026-62819CriticalCVSS 8.1Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120249

CVE-2026-62820CriticalCVSS 8.1Remote code execution

Windows DNS Server Remote Code Execution Vulnerability

Windows · KB5120238 KB5120242 KB5120229 KB5120233

CVE-2026-62889CriticalCVSS 8.1Remote code execution

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120249

CVE-2026-65679CriticalCVSS 8.1Remote code execution

Windows iSCSI Target Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120233

CVE-2026-65789CriticalCVSS 8.1Remote code execution

Windows DNS Server Remote Code Execution Vulnerability

Windows · KB5120238 KB5120242 KB5120229 KB5120233

CVE-2026-65796CriticalCVSS 8.1Remote code execution

Windows iSCSI Target Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5120238 KB5120242 KB5120229 KB5120233

CVE-2026-66802CriticalCVSS 8.1Remote code execution

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Windows · KB5120238 KB5120242 KB5120229 KB5120233

CVE-2026-71331CriticalCVSS 8.1Remote code execution

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Windows · KB5120238 KB5120242 KB5120229 KB5120233

CVE-2026-62911CriticalCVSS 8.0Elevation of privilege

Microsoft Exchange Server Elevation of Privilege Vulnerability

Windows ESU (Extended Security Updates), Server software (Exchange, SharePoint …) · KB5121576 KB5121573 KB5121574 KB5121575

Updates (KB) of this month

KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.

Update	Product family	Vulnerabilities	Known issues
KB5120249	Windows	148	1
KB5120233	Windows	202	none known
KB5120228	Windows	201	none known
KB5120242	Windows	182	none known
KB5120229	Windows	182	none known
KB5120238	Windows	172	none known
KB5121003	Windows	40	none known
KB5120994	Windows	35	none known
KB5121000	Windows	31	none known
KB5120418	Windows	30	none known
KB5002893	Microsoft Office	28	none known
KB5002894	Microsoft Office	26	none known

Show 43 more updates

Update	Product family	Vulnerabilities	Known issues
KB5002896	Microsoft Office	25	none known
KB5002884	Microsoft Office	23	none known
KB5002903	Microsoft Office	23	none known
KB5002905	Microsoft Office	22	none known
KB5002906	Microsoft Office	21	none known
KB5002901	Microsoft Office	17	none known
KB5002897	Microsoft Office	12	none known
KB5120240	Windows	8	none known
KB5122104	Developer tools (.NET, Visual Studio …)	8	none known
KB5122105	Developer tools (.NET, Visual Studio …)	8	none known
KB5121576	Windows ESU (Extended Security Updates)	7	none known
KB5121573	Windows ESU (Extended Security Updates)	7	none known
KB5121574	Windows ESU (Extended Security Updates)	7	none known
KB5121575	Windows ESU (Extended Security Updates)	7	none known
KB5122106	Developer tools (.NET, Visual Studio …)	6	none known
KB5002832	Microsoft Office	5	none known
KB5120703	Developer tools (.NET, Visual Studio …)	4	none known
KB5002755	Microsoft Office	3	none known
KB5120747	Developer tools (.NET, Visual Studio …)	3	none known
KB5120702	Developer tools (.NET, Visual Studio …)	2	none known
KB5120706	Developer tools (.NET, Visual Studio …)	2	none known
KB5120698	Developer tools (.NET, Visual Studio …)	2	none known
KB5120711	Developer tools (.NET, Visual Studio …)	2	none known
KB5120386	Windows	1	none known
KB5120385	Windows	1	none known
KB5002902	Microsoft Office	1	none known
KB5123303	Windows	1	none known
KB5120701	Developer tools (.NET, Visual Studio …)	1	none known
KB5127660	Developer tools (.NET, Visual Studio …)	1	none known
KB5126044	Developer tools (.NET, Visual Studio …)	1	none known
KB5126049	Developer tools (.NET, Visual Studio …)	1	none known
KB5126051	Developer tools (.NET, Visual Studio …)	1	none known
KB5126047	Developer tools (.NET, Visual Studio …)	1	none known
KB5127666	Developer tools (.NET, Visual Studio …)	1	none known
KB5002813	Microsoft Office	1	none known
KB5002791	Microsoft Office	1	none known
KB5002795	Microsoft Office	1	none known
KB5002900	Microsoft Office	1	none known
KB5120704	Developer tools (.NET, Visual Studio …)	1	none known
KB5002927	Microsoft Office	1	none known
KB5002899	Microsoft Office	1	none known
KB5120716	Developer tools (.NET, Visual Studio …)	1	none known
KB5120695	Developer tools (.NET, Visual Studio …)	1	none known

Known issues with the updates

OpenKnown issueCommunity reportUpdated 1 Nov 2026

Windows 11 File History: Last copied date and Previous Versions broken after updates

Users report that File History copies files to the target drive, but the "Last copied on" date does not update and Previous Versions shows no entries. This is reported by users, not yet confirmed by the vendor. A related September 2026 File History bug was reportedly resolved by Microsoft, but no vendor source confirms the remaining problem.

Microsoft · Windows 11 File History

By product family

Windows220
Microsoft Office132
Azure35
Developer tools (.NET, Visual Studio …)27
Other14
Browser (Edge)12
Windows ESU (Extended Security Updates)7
Microsoft Dynamics4

More about this month

Where the information comes from

Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.

Affected? We can help.

We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.

Get in touch All known issues after updates