Microsoft
August 2026 Early Security Updates
2026-Aug Aug 6, 2026 Source: Vendor
Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Aug, revision 2026-08-06T07:00:00Z). 20 vulnerabilities, 19 of them carrying an acknowledgement. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
724 lines
Showing 501–550 of 724 · page 11 of 15
CVE-2026-63529
BR2026-0000-005785
unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-63530
BR2026-0000-005786
unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-63531
BR2026-0000-005787
unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-63532
BR2026-0000-005788
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-63533
BR2026-0000-005789
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-63533
BR2026-0000-005790
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-64897
BR2026-0000-005791
unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as Navapon Premkasem
CVE-2026-64897
BR2026-0000-005792
unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as Songsit Srisura
CVE-2026-64897
BR2026-0000-005793
unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as P1hcn
CVE-2026-64898
BR2026-0000-005794
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-64898
BR2026-0000-005795
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Minjea Park
CVE-2026-64898
BR2026-0000-005796
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as haowei yan
CVE-2026-64898
BR2026-0000-005797
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as xiaozun tang
CVE-2026-64902
BR2026-0000-005798
unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as P1hcn
CVE-2026-64899
BR2026-0000-005799
unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-64903
BR2026-0000-005800
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-64901
BR2026-0000-005801
unclaimed
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credited as odgrso
CVE-2026-64901
BR2026-0000-005802
unclaimed
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credited as waid
CVE-2026-64901
BR2026-0000-005803
unclaimed
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-64904
BR2026-0000-005804
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-64905
BR2026-0000-005805
unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-64907
BR2026-0000-005806
unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-64907
BR2026-0000-005807
unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-64906
BR2026-0000-005808
unclaimed
Microsoft Access Remote Code Execution Vulnerability
Credited as Shane Groff with Microsoft
CVE-2026-64909
BR2026-0000-005809
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-64910
BR2026-0000-005810
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-64912
BR2026-0000-005811
unclaimed
Microsoft Access Remote Code Execution Vulnerability
Credited as Shane Groff with Microsoft
CVE-2026-64911
BR2026-0000-005812
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-64908
BR2026-0000-005813
unclaimed
Microsoft Access Remote Code Execution Vulnerability
Credited as Shane Groff with Microsoft
CVE-2026-64914
BR2026-0000-005814
unclaimed
Microsoft Access Remote Code Execution Vulnerability
Credited as Shane Groff with Microsoft
CVE-2026-64915
BR2026-0000-005815
unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-64916
BR2026-0000-005816
unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as DongJun Kim (smlijun) with UIUC, Hwiwon Lee (hwiwonl) with UIUC, Jongseong Kim (nevul37) with UIUC
CVE-2026-64916
BR2026-0000-005817
unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as P1hcn
CVE-2026-64920
BR2026-0000-005818
unclaimed
Microsoft Access Remote Code Execution Vulnerability
Credited as Shane Groff with Microsoft
CVE-2026-64917
BR2026-0000-005819
unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-64919
BR2026-0000-005820
unclaimed
Microsoft Access Remote Code Execution Vulnerability
Credited as Shane Groff with Microsoft
CVE-2026-64921
BR2026-0000-005821
unclaimed
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Credited as Kn1ght
CVE-2026-64921
BR2026-0000-005822
unclaimed
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Credited as Michael Maturi with Google/Mandiant
CVE-2026-65673
BR2026-0000-005823
unclaimed
Microsoft Entra Connect Elevation of Privilege Vulnerability
Credited as Shira Hoffman
CVE-2026-65681
BR2026-0000-005824
unclaimed
Windows iSCSI Target Service Denial of Service Vulnerability
Credited as Linzishan
CVE-2026-65681
BR2026-0000-005825
unclaimed
Windows iSCSI Target Service Denial of Service Vulnerability
Credited as Anemone
CVE-2026-65681
BR2026-0000-005826
unclaimed
Windows iSCSI Target Service Denial of Service Vulnerability
Credited as Zhiniang Peng (HUST)
CVE-2026-65679
BR2026-0000-005827
unclaimed
Windows iSCSI Target Service Remote Code Execution Vulnerability
Credited as Linzishan
CVE-2026-65679
BR2026-0000-005828
unclaimed
Windows iSCSI Target Service Remote Code Execution Vulnerability
Credited as Anemone
CVE-2026-65679
BR2026-0000-005829
unclaimed
Windows iSCSI Target Service Remote Code Execution Vulnerability
Credited as Zhiniang Peng (HUST)
CVE-2026-65773
BR2026-0000-005830
unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) from DEVCORE Research Team and TwinkleStar03 (@_twinklestar03), working with DEVCORE Internship Program, working with TrendAI Zero Day Initiative
CVE-2026-65774
BR2026-0000-005831
unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-65774
BR2026-0000-005832
unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-65775
BR2026-0000-005833
unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as TrendAI Zero Day Initiative
CVE-2026-65776
BR2026-0000-005834
unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as Marcin Wiazowski working with TrendAI Zero Day Initiative