Microsoft August 2026 Patch Tuesday Fixes 400 Flaws, Including Three Zero-days

Microsoft's August 2026 Patch Tuesday addresses ~421 CVEs across Windows, Office, SharePoint, Azure and other products, including 42 critical flaws and three zero-days — one of which (CVE-2026-68820) is being actively exploited by North Korean Lazarus actors to deploy the FudModule kernel-mode rootkit; the other two zero-days were publicly disclosed before fixes. The release breaks down into dozens of elevation-of-privilege, remote code execution, and information-disclosure vulnerabilities and republished two non-Microsoft CVEs related to Windows TPM.