Microsoft Patch Tuesday – August 2026

Microsoft's August 2026 Patch Tuesday addresses 400 vulnerabilities (42 Critical) including three zero-days — one actively exploited by the Lazarus group — with standout issues being a wormable Windows DNS Server RCE, an Exchange Server authentication bypass that can expose all mailboxes, and multiple high-severity RCE and EoP flaws; organisations should prioritise patches for affected DNS servers, on‑premises Exchange, and systems that could see footholds.