CVE Tools
Back to feed
Exploited in the wild Windows patch-tuesday SharePoint Server Microsoft zero-day

Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities

Cisco Talos·By Cisco Talos··11 min read
CVE Tools coverage

Microsoft has issued its August 2026 security updates to address 421 vulnerabilities across Windows, SharePoint Server, Exchange Server, and Office, including 62 rated as critical. Notably, one flaw, CVE-2026-68820, a use-after-free error in the Windows Ancillary Function Driver for WinSock, is confirmed to be under active exploitation in the wild.

The release also highlights high-severity remote code execution issues such as CVE-2026-62893 in Windows Deployment Services (CVSS 9.8) and CVE-2026-65665 in Microsoft SharePoint Server (CVSS 8.8). Cisco Talos has published updated Snort rules to detect exploitation attempts against several of these newly disclosed weaknesses.

Microsoft has released its monthly security update for August 2026, which includes 421 vulnerabilities affecting a range of products, including 62 that Microsoft marked as "critical." 

Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild 

CVE-2026-68820">CVE-2026-68820 is an elevation of privilege vulnerability affecting Windows Ancillary Function Driver for WinSock. A Use After Free vulnerability could allow an authorized attacker to elevate privileges locally. This vulnerability has a CVSS base score of 7.0.…

Continue reading on Cisco Talos