CVE Tools
Sign in
Back to feed
Exploited in the wild Windows zero-day QUIC Microsoft privilege-escalation

Microsoft Patch Tuesday August 2026 - SANS ISC

SANS Internet Storm Center·By SANS Internet Storm Center··28 min read
CVE Tools coverage

Microsoft released patches for 418 vulnerabilities this month, addressing a mix of critical issues across its product ecosystem. The most pressing concern is CVE-2026-68820, a privilege escalation flaw in the Windows Ancillary Function Driver for WinSock that is currently being actively exploited in the wild. Additionally, two zero-days were publicly disclosed before release: CVE-2026-62832, affecting the Windows User Profile Service, and CVE-2026-72971, which impacts container isolation via the unionfs.sys driver. Administrators should also prioritize fixing remote code execution vulnerabilities in Microsoft QUIC (CVE-2026-62815) and Windows DNS Server (CVE-2026-62878), both rated Critical with high CVSS scores.

This month we got patches for 418 vulnerabilities. Of these, 62 are critical, 1 is being exploited in the wild, and 2 were publicly disclosed as zero-days. Notable fixes include Windows privilege escalation, container tampering, and critical QUIC and DNS Server remote code execution bugs. 

A few vulnerabilities worth mentioning:…

Continue reading on SANS Internet Storm Center

Related coverage

Other stories on the same CVEs
Worried this affects your company?

See what your business actually exposes to the Internet — a free external review, no install, no obligation.

Check my exposure