logo

Microsoft Patch Tuesday for August 2026 Fixed a Zero-Day and Wormable RCE

ID: 0269a1fc-d36e-5ec9-96e3-208af2b47335

STIX ID: report--0269a1fc-d36e-5ec9-96e3-208af2b47335

Feed Name: Security Affairs

Threat Score
88/100

Date Published: 2026-08-12

Date Updated: 2026-08-12

Author: Pierluigi Paganini

...
...

Microsoft's August 2026 Patch Tuesday fixes 398 CVEs across Windows and related products, including an actively exploited WinSock use‑after‑free (CVE-2026-68820) and a wormable, unauthenticated DNS remote code execution (CVE-2026-62878) that could spread rapidly; other critical fixes affect TFTP (WDS), QUIC (HTTP/3), HPC Pack, and an Exchange privilege‑bypass demonstrated at Pwn2Own, making immediate patching of internet‑facing systems essential.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.