Early access: this site has moved to bugrater.com.

Security releases

Microsoft

August 2026 Early Security Updates

2026-Aug Aug 6, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Aug, revision 2026-08-06T07:00:00Z). 20 vulnerabilities, 19 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

724 lines
Showing 501–550 of 724 · page 11 of 15
CVE-2026-63529 BR2026-0000-005785 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-63530 BR2026-0000-005786 unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-63531 BR2026-0000-005787 unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-63532 BR2026-0000-005788 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-63533 BR2026-0000-005789 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-63533 BR2026-0000-005790 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-64897 BR2026-0000-005791 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as Navapon Premkasem
CVE-2026-64897 BR2026-0000-005792 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as Songsit Srisura
CVE-2026-64897 BR2026-0000-005793 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as P1hcn
CVE-2026-64898 BR2026-0000-005794 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-64898 BR2026-0000-005795 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Minjea Park
CVE-2026-64898 BR2026-0000-005796 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as haowei yan
CVE-2026-64898 BR2026-0000-005797 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as xiaozun tang
CVE-2026-64902 BR2026-0000-005798 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as P1hcn
CVE-2026-64899 BR2026-0000-005799 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-64903 BR2026-0000-005800 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-64901 BR2026-0000-005801 unclaimed
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credited as odgrso
CVE-2026-64901 BR2026-0000-005802 unclaimed
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credited as waid
CVE-2026-64901 BR2026-0000-005803 unclaimed
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-64904 BR2026-0000-005804 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-64905 BR2026-0000-005805 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-64907 BR2026-0000-005806 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-64907 BR2026-0000-005807 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-64906 BR2026-0000-005808 unclaimed
Microsoft Access Remote Code Execution Vulnerability
Credited as Shane Groff with Microsoft
CVE-2026-64909 BR2026-0000-005809 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-64910 BR2026-0000-005810 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-64912 BR2026-0000-005811 unclaimed
Microsoft Access Remote Code Execution Vulnerability
Credited as Shane Groff with Microsoft
CVE-2026-64911 BR2026-0000-005812 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-64908 BR2026-0000-005813 unclaimed
Microsoft Access Remote Code Execution Vulnerability
Credited as Shane Groff with Microsoft
CVE-2026-64914 BR2026-0000-005814 unclaimed
Microsoft Access Remote Code Execution Vulnerability
Credited as Shane Groff with Microsoft
CVE-2026-64915 BR2026-0000-005815 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-64916 BR2026-0000-005816 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as DongJun Kim (smlijun) with UIUC, Hwiwon Lee (hwiwonl) with UIUC, Jongseong Kim (nevul37) with UIUC
CVE-2026-64916 BR2026-0000-005817 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as P1hcn
CVE-2026-64920 BR2026-0000-005818 unclaimed
Microsoft Access Remote Code Execution Vulnerability
Credited as Shane Groff with Microsoft
CVE-2026-64917 BR2026-0000-005819 unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-64919 BR2026-0000-005820 unclaimed
Microsoft Access Remote Code Execution Vulnerability
Credited as Shane Groff with Microsoft
CVE-2026-64921 BR2026-0000-005821 unclaimed
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Credited as Kn1ght
CVE-2026-64921 BR2026-0000-005822 unclaimed
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Credited as Michael Maturi with Google/Mandiant
CVE-2026-65673 BR2026-0000-005823 unclaimed
Microsoft Entra Connect Elevation of Privilege Vulnerability
Credited as Shira Hoffman
CVE-2026-65681 BR2026-0000-005824 unclaimed
Windows iSCSI Target Service Denial of Service Vulnerability
Credited as Linzishan
CVE-2026-65681 BR2026-0000-005825 unclaimed
Windows iSCSI Target Service Denial of Service Vulnerability
Credited as Anemone
CVE-2026-65681 BR2026-0000-005826 unclaimed
Windows iSCSI Target Service Denial of Service Vulnerability
Credited as Zhiniang Peng (HUST)
CVE-2026-65679 BR2026-0000-005827 unclaimed
Windows iSCSI Target Service Remote Code Execution Vulnerability
Credited as Linzishan
CVE-2026-65679 BR2026-0000-005828 unclaimed
Windows iSCSI Target Service Remote Code Execution Vulnerability
Credited as Anemone
CVE-2026-65679 BR2026-0000-005829 unclaimed
Windows iSCSI Target Service Remote Code Execution Vulnerability
Credited as Zhiniang Peng (HUST)
CVE-2026-65773 BR2026-0000-005830 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) from DEVCORE Research Team and TwinkleStar03 (@_twinklestar03), working with DEVCORE Internship Program, working with TrendAI Zero Day Initiative
CVE-2026-65774 BR2026-0000-005831 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-65774 BR2026-0000-005832 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-65775 BR2026-0000-005833 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as TrendAI Zero Day Initiative
CVE-2026-65776 BR2026-0000-005834 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as Marcin Wiazowski working with TrendAI Zero Day Initiative