Breaking
AviaMasters: Het Hoogvliegende Crash Game dat Spelers Alert HoudtPlay real money slots at Zizobet Casino: enjoy fast payouts and live actionThe Wellness of Tea Goes Beyond What’s in the CupAquaspins Casino: come sfruttare al meglio il bonus di benvenuto nel 2026Bursa Malaysia ends lower as selling pressure in oil-related counters weighs - The StarUCSI University strengthens global health and science diplomacy collaboration with UNU Global HealthAstro Celebrates 30th Anniversary With Free Access to All Channels and Exclusive Offers for CustomersJulia Farhana Initiates Divorce Proceedings Against Dr Che Hafiz After Seven Months of SeparationHarga tiket GP Bahrain di Sepang serendah RM200‘I Never Intended To Hurt Or Kill Rocky,’ Says Man Accused Of Animal CrueltyNo criminal or corruption elements found in KWAP investigationAdam Lee says old debts remain unpaid as new loans are taken.Malaysians To Receive Free 10GB Data From Five Telcos For Merdeka And Malaysia DayTEEAM at “Think Business, Think Hong Kong” SymposiumBrunei Darussalam Capital Market Development Seminar Series: An Introduction to Sukuk IssuanceOver 90% of UGM Educators Are Gemini Certified through Academic Upskilling InitiativeURIIS 2026 sasar percepat pengkomersialan inovasi universitiLelaki disyaki terjun sungai elak pemeriksaan polis ditemukan lemasBangladesh humble Australia with worst total in contest as Hasan takes 6-55How I Got My Career in Foreign Policy: Sadanand DhumeAviaMasters: Het Hoogvliegende Crash Game dat Spelers Alert HoudtPlay real money slots at Zizobet Casino: enjoy fast payouts and live actionThe Wellness of Tea Goes Beyond What’s in the CupAquaspins Casino: come sfruttare al meglio il bonus di benvenuto nel 2026Bursa Malaysia ends lower as selling pressure in oil-related counters weighs - The StarUCSI University strengthens global health and science diplomacy collaboration with UNU Global HealthAstro Celebrates 30th Anniversary With Free Access to All Channels and Exclusive Offers for CustomersJulia Farhana Initiates Divorce Proceedings Against Dr Che Hafiz After Seven Months of SeparationHarga tiket GP Bahrain di Sepang serendah RM200‘I Never Intended To Hurt Or Kill Rocky,’ Says Man Accused Of Animal CrueltyNo criminal or corruption elements found in KWAP investigationAdam Lee says old debts remain unpaid as new loans are taken.Malaysians To Receive Free 10GB Data From Five Telcos For Merdeka And Malaysia DayTEEAM at “Think Business, Think Hong Kong” SymposiumBrunei Darussalam Capital Market Development Seminar Series: An Introduction to Sukuk IssuanceOver 90% of UGM Educators Are Gemini Certified through Academic Upskilling InitiativeURIIS 2026 sasar percepat pengkomersialan inovasi universitiLelaki disyaki terjun sungai elak pemeriksaan polis ditemukan lemasBangladesh humble Australia with worst total in contest as Hasan takes 6-55How I Got My Career in Foreign Policy: Sadanand Dhume
Economy

Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for August 2026, which includes 421 vulnerabilities affecting a range of products, including 62 that Microsoft marked as "critical."

Source: Cisco Talos Intelligence · August 12, 2026 at 7:41 PM · AI-assisted report

KUALA LUMPUR, 13 AUGUST 2026 —

Listen to this article

DomainFork Audio · read aloud

Microsoft has released its monthly security update for August 2026, which includes 421 vulnerabilities affecting a range of products, including 62 that Microsoft marked as "critical." CVE-2026-68820 is an elevation of privilege vulnerability affecting Windows Ancillary Function Driver for WinSock. A Use After Free vulnerability could allow an authorized attacker to elevate privileges locally. This vulnerability has a CVSS base score of 7.0. Out of 62 "critical" vulnerabilities, 40 are remote code execution (RCE) vulnerabilities.

Market Impact

Microsoft considers exploitation of the following vulnerabilities more likely. CVE-2026-62893 is a remote code execution vulnerability affecting Windows Deployment Services TFTP Server. A Use After Free could allow an unauthorized attacker to execute code over a network. This vulnerability has a CVSS base score of 9.8. CVE-2026-65665 is a remote code execution vulnerability affecting Microsoft SharePoint Server. Deserialization of Untrusted Data could allow an authorized attacker to execute code over a network.

This vulnerability has a CVSS base score of 8.8. CVE-2026-62823 is a remote code execution vulnerability affecting Windows DHCP Server. A Heap-based Buffer Overflow could allow an unauthorized attacker to execute code over an adjacent network. This vulnerability has a CVSS base score of 8.8. Microsoft considers exploitation of the following vulnerabilities less likely. CVE-2026-62830 is an elevation of privilege vulnerability affecting Azure SRE Agent.

Missing Authorization could allow an authorized attacker to elevate privileges over a network. This vulnerability has a CVSS base score of 9.9. CVE-2026-50516 is an elevation of privilege vulnerability affecting Microsoft Azure Kubernetes Service. Missing Authentication for Critical Function could allow an unauthorized attacker to elevate privileges over a network. This vulnerability has a CVSS base score of 9.4.

Three remote code execution vulnerabilities, CVE-2026-68794 , CVE-2026-68816 and CVE-2026-68804 , affect Microsoft Excel and have a CVSS base score of 7.8. An unauthorized attacker could execute code locally. CVE-2026-68794 is a Heap-based Buffer Overflow. CVE-2026-68816 is a Stack-based Buffer Overflow. CVE-2026-68804 involves a Numeric Truncation Error and a Heap-based Buffer Overflow. CVE-2026-62911 is an elevation of privilege vulnerability affecting Microsoft Exchange Server.

Authentication Bypass by Capture-replay could allow an authorized attacker to elevate privileges over a network. This vulnerability has a CVSS base score of 8.0. Nine remote code execution vulnerabilities, CVE-2026-63515 , CVE-2026-65657 , CVE-2026-63532 , CVE-2026-64898 , CVE-2026-64903 , CVE-2026-64909 , CVE-2026-64910 , CVE-2026-64911 and CVE-2026-70130 , affect Microsoft Office and could allow an unauthorized attacker to execute code locally.

CVE-2026-63515 involves an Out-of-bounds Read and an Integer Underflow (Wrap or Wraparound) and has a CVSS base score of 7.8. CVE-2026-65657 is a Use After Free and has a CVSS base score of 7.8. CVE-2026-63532 involves an Integer Overflow or Wraparound and a Heap-based Buffer Overflow and has a CVSS base score of 7.8. CVE-2026-64898 involves a Heap-based Buffer Overflow and an Integer Overflow or Wraparound and has a CVSS base score of 7.8.

CVE-2026-64903 involves an Integer Overflow or Wraparound and a Heap-based Buffer Overflow and has a CVSS base score of 7.8. CVE-2026-64909 involves an Integer Underflow (Wrap or Wraparound), an Out-of-bounds Read and a Heap-based Buffer Overflow and has a CVSS base score of 7.8. CVE-2026-64910 is an Untrusted Pointer Dereference and has a CVSS base score of 7.8.

CVE-2026-64911 involves an Integer Overflow or Wraparound and a Heap-based Buffer Overflow and has a CVSS base score of 7.8. CVE-2026-70130 is a Heap-based Buffer Overflow and has a CVSS base score of 8.4. Five remote code execution vulnerabilities, CVE-2026-63513 , CVE-2026-63519 , CVE-2026-65664 , CVE-2026-63526 and CVE-2026-66807 , affect Microsoft Office Graphics Component and have a CVSS base score of 7.8. An unauthorized attacker could execute code locally. CVE-2026-63513 is a Heap-based Buffer Overflow.

CVE-2026-63519 is a Heap-based Buffer Overflow. CVE-2026-65664 is a Heap-based Buffer Overflow. CVE-2026-63526 is a Stack-based Buffer Overflow. CVE-2026-66807 is a Stack-based Buffer Overflow. Three remote code execution vulnerabilities, CVE-2026-63518 , CVE-2026-63525 and CVE-2026-64907 , affect Microsoft Office Word and have a CVSS base score of 7.8. An unauthorized attacker could execute code locally. CVE-2026-63518 is a Heap-based Buffer Overflow. CVE-2026-63525 is a Numeric Truncation Error. CVE-2026-64907 is a Stack-based Buffer Overflow.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62827 Two elevation of privilege vulnerabilities, CVE-2026-62827 and CVE-2026-64921 , affect Microsoft SharePoint Server and have a CVSS base score of 8.8. An authorized attacker could elevate privileges over a network. CVE-2026-62827 involves Improper Authentication. CVE-2026-64921 involves Missing Authentication for Critical Function. CVE-2026-62824 is a remote code execution vulnerability affecting Remote Desktop Client. A Stack-based Buffer Overflow could allow an unauthorized attacker to execute code over a network.

This vulnerability has a CVSS base score of 8.8. CVE-2026-62818 is a remote code execution vulnerability affecting Windows Active Directory Certificate Services (AD CS). A Use After Free could allow an authorized attacker to execute code over a network. This vulnerability has a CVSS base score of 8.8. Three remote code execution vulnerabilities, CVE-2026-62817 , CVE-2026-62820 and CVE-2026-62878 , affect Windows DNS Server.

CVE-2026-62817 is an Out-of-bounds Write that could allow an unauthorized attacker to execute code over an adjacent network and has a CVSS base score of 8.8. CVE-2026-62820 involves Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'), could allow an unauthorized attacker to execute code over a network and has a CVSS base score of 8.1.

CVE-2026-62878 is a Stack-based Buffer Overflow that could allow an unauthorized attacker to execute code over a network and has a CVSS base score of 9.8. Two remote code execution vulnerabilities, CVE-2026-66802 and CVE-2026-71331 , affect Windows Device Health Attestation (DHA), could allow an unauthorized attacker to execute code over a network and have a CVSS base score of 8.1.

CVE-2026-66802 involves Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') and a Use After Free. CVE-2026-71331 involves an Integer Overflow or Wraparound and a Heap-based Buffer Overflow. Two remote code execution vulnerabilities, CVE-2026-62890 and CVE-2026-62822 , affect Windows GDI+. CVE-2026-62890 is a Heap-based Buffer Overflow that could allow an authorized attacker to execute code locally and has a CVSS base score of 7.8.

CVE-2026-62822 involves an Integer Overflow or Wraparound and a Heap-based Buffer Overflow, could allow… (AI-assisted rewrite, based on the original source)

Related: Microsoft

Reporting based on Cisco Talos Intelligence. Figures and claims are subject to revision as the story develops. DomainFork publishes editorial context, not investment advice — see our editorial standards.