BugRater
Early access: this site has moved to bugrater.com.

Security releases

Microsoft

August 2026 Early Security Updates

2026-Aug Aug 6, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Aug, revision 2026-08-06T07:00:00Z). 20 vulnerabilities, 19 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

724 lines
All 724 CVEs 724 Additional recognition 0 Unclaimed only
Showing 651–700 of 724 · page 14 of 15
CVE-2026-50523 BR2026-0000-008487 unclaimed
Microsoft PowerShell Remote Code Execution Vulnerability
Credited as Rijul JenJen (PortZero Gmbh) with Port Zero GmbH ( Berlin ,Germany )
CVE-2026-55013 BR2026-0000-008488 unclaimed
Windows Remote Help Defense Spoofing Vulnerability
Credited as Nick Agathos with Commonwealth Bank of Australia
CVE-2026-55015 BR2026-0000-008489 unclaimed
Microsoft Remote Help Denial of Service Vulnerability
Credited as Nick Agathos with Commonwealth Bank of Australia
CVE-2026-61363 BR2026-0000-008490 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Daniel R
CVE-2026-62696 BR2026-0000-008491 unclaimed
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-62703 BR2026-0000-008492 unclaimed
Windows DWM Core Library Information Disclosure Vulnerability
Credited as renyimen with minsight-ai.com
CVE-2026-62728 BR2026-0000-008493 unclaimed
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Credited as OOooOO with HUST and GraVity0
CVE-2026-62747 BR2026-0000-008494 unclaimed
Windows Device Association Service Elevation of Privilege Vulnerability
Credited as BochengXiang(@Crispr) with FDU
CVE-2026-62755 BR2026-0000-008495 unclaimed
Windows DHCP Client Elevation of Privilege Vulnerability
Credited as wxz
CVE-2026-62834 BR2026-0000-008496 unclaimed
Azure Data Factory Elevation of Privilege Vulnerability
Credited as Kieran Bloomfield with Microsoft Red Team
CVE-2026-63509 BR2026-0000-008497 unclaimed
Microsoft Fabric Elevation of Privilege Vulnerability
Credited as Sharath Unni
CVE-2026-65770 BR2026-0000-008498 unclaimed
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
Credited as wtm with Offensi
CVE-2026-65786 BR2026-0000-008499 unclaimed
Desktop Window Manager Elevation of Privilege Vulnerability
Credited as Byzero with Kunlun Lab
CVE-2026-65786 BR2026-0000-008500 unclaimed
Desktop Window Manager Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-65801 BR2026-0000-008501 unclaimed
Microsoft Exchange Online Elevation of Privilege Vulnerability
Credited as Varsha Chahal with Microsoft
CVE-2026-65816 BR2026-0000-008502 unclaimed
Azure Arc Elevation of Privilege Vulnerability
Credited as Hodaya Sheer with Microsoft
CVE-2026-66309 BR2026-0000-008503 unclaimed
Azure SQL Database Elevation of Privilege Vulnerability
Credited as Sharath Unni
CVE-2026-66800 BR2026-0000-008504 unclaimed
Azure Data Factory Information Disclosure Vulnerability
Credited as Varsha Chahal with Microsoft
CVE-2026-68782 BR2026-0000-008505 unclaimed
Azure SQL Database Elevation of Privilege Vulnerability
Credited as Sharath Unni
CVE-2026-68789 BR2026-0000-008506 unclaimed
Azure SQL Database Elevation of Privilege Vulnerability
Credited as Sharath Unni
CVE-2026-69400 BR2026-0000-008507 unclaimed
Azure Logic Apps Elevation of Privilege Vulnerability
Credited as Haakon Gulbrandsrud with Binary Security
CVE-2026-69502 BR2026-0000-008508 unclaimed
Azure SQL Database Elevation of Privilege Vulnerability
Credited as Sharath Unni
CVE-2026-69519 BR2026-0000-008509 unclaimed
Azure Stack HCI Information Disclosure Vulnerability
Credited as Hay Mizrachi with Microsoft
CVE-2026-69543 BR2026-0000-008510 unclaimed
Azure Virtual Machines Elevation of Privilege Vulnerability
Credited as Nick Wojciechowski
CVE-2026-69555 BR2026-0000-008511 unclaimed
Azure Arc Elevation of Privilege Vulnerability
Credited as Gal Azaria with Microsoft
CVE-2026-69558 BR2026-0000-008512 unclaimed
Microsoft Partner Center Information Disclosure Vulnerability
Credited as Lucas Gayk with Microsoft
CVE-2026-69836 BR2026-0000-008513 unclaimed
Microsoft Entra ID Remote Code Execution Vulnerability
Credited as Robert Fitzaptrick with Microsoft
CVE-2026-69855 BR2026-0000-008514 unclaimed
Microsoft Copilot in Azure Information Disclosure Vulnerability
Credited as Sam
CVE-2026-70335 BR2026-0000-008515 unclaimed
GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
Credited as Daniel Weglowski
CVE-2026-69836 BR2026-0000-008516 unclaimed
Microsoft Entra ID Remote Code Execution Vulnerability
Credited as Robert Fitzpatrick with Microsoft
CVE-2026-65787 BR2026-0000-008832 unclaimed
Desktop Window Manager Elevation of Privilege Vulnerability
Credited as npc0vo
CVE-2026-65787 BR2026-0000-008833 unclaimed
Desktop Window Manager Elevation of Privilege Vulnerability
Credited as Paul wxz with Diffract
CVE-2026-66804 BR2026-0000-008889 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as Kim Dvash
CVE-2026-70337 BR2026-0000-008890 unclaimed
Microsoft PowerShell Remote Code Execution Vulnerability
Credited as Moath Aloufi
CVE-2026-65779 BR2026-0000-009527 unclaimed
Windows Autopilot Elevation of Privilege Vulnerability
Credited as Hwiwon Lee (hwiwonl), SEC-agent team develacker@gmail.com
CVE-2026-66804 BR2026-0000-009528 unclaimed
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Credited as kaijieguigui working with TrendAI Zero Day Initiative
CVE-2026-68817 BR2026-0000-009529 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Jeongmin Choi with S2W
CVE-2026-68819 BR2026-0000-009530 unclaimed
Windows Network File System Denial of Service Vulnerability
Credited as Linzishan, Anemone
CVE-2026-68819 BR2026-0000-009531 unclaimed
Windows Network File System Denial of Service Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-70329 BR2026-0000-009532 unclaimed
Microsoft Outlook Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-58616 BR2026-0000-009584 unclaimed
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Credited as Gal Weizman (weizmangal@gmail.com / https://x.com/weizmangal)
CVE-2026-62904 BR2026-0000-009585 unclaimed
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Credited as Jattawatt Buranasant
CVE-2026-66323 BR2026-0000-009586 unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66324 BR2026-0000-009587 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66798 BR2026-0000-009588 unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-70309 BR2026-0000-009589 unclaimed
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Credited as Orange Tsai (@orange_8361) with DEVCORE
CVE-2026-70331 BR2026-0000-009590 unclaimed
Microsoft Edge for iOS Spoofing Vulnerability
Credited as Ofek Levin with Enclave
CVE-2026-70341 BR2026-0000-009591 unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-72984 BR2026-0000-009592 unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Nguyen Thanh Dat with Viettel Cyber Security
CVE-2026-64899 BR2026-0000-009690 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Hwiwon Lee (hwiwonl) with UIUC