Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities

Summary: Microsoft's August 2026 security update addresses 421 vulnerabilities across its products, 62 of which it rated critical, including 40 remote code execution flaws. One vulnerability was exploited in the wild: CVE-2026-68820, an elevation of privilege flaw in the Windows Ancillary Function Driver for WinSock with a CVSS base score of 7.0. Microsoft flagged CVE-2026-62893 (Windows Deployment Services TFTP Server, CVSS 9.8) and CVE-2026-65665 (SharePoint Server, CVSS 8.8) among those it considers more likely to be exploited.
Bottom line: One flaw in this release is already being exploited in the wild, and Microsoft rates exploitation of the 9.8-rated Windows Deployment Services TFTP Server flaw as more likely, so patch prioritization cannot wait for the full 421-item cycle.

Read the original at Cisco Talos ↗