Early access: this site has moved to bugrater.com.

Security releases

Microsoft

August 2026 Early Security Updates

2026-Aug Aug 6, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Aug, revision 2026-08-06T07:00:00Z). 20 vulnerabilities, 19 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

724 lines
Showing 51–100 of 724 matching · page 2 of 15 · clear filters
CVE-2026-47299 BR2026-0000-005335 unclaimed
Azure Monitor Agent Elevation of Privilege Vulnerability
Credited as Ron Masas
CVE-2026-47285 BR2026-0000-005336 unclaimed
Visual Studio Code Information Disclosure Vulnerability
Credited as Rayhan
CVE-2026-59124 BR2026-0000-005337 unclaimed
Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability
Credited as P1hcn
CVE-2026-59128 BR2026-0000-005338 unclaimed
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Credited as Mathias Vorreiter Pedersen with Microsoft
CVE-2026-59133 BR2026-0000-005339 unclaimed
Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability
Credited as P1hcn
CVE-2026-59130 BR2026-0000-005340 unclaimed
AMD Zen Information Disclosure Vulnerability
Credited as Michael Monwuba with Microsoft
CVE-2026-59132 BR2026-0000-005341 unclaimed
Windows TCP/IP Denial of Service Vulnerability
Credited as RedRays Security Team with RedRays
CVE-2026-59135 BR2026-0000-005342 unclaimed
Microsoft Windows Search Component Information Disclosure Vulnerability
Credited as Dongjun Lee with KAIST Hacking Lab
CVE-2026-59134 BR2026-0000-005343 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-59134 BR2026-0000-005344 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-59134 BR2026-0000-005345 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as PB18
CVE-2026-59134 BR2026-0000-005346 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as @2st__ with Diffract
CVE-2026-59134 BR2026-0000-005347 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as pwn2addr
CVE-2026-59137 BR2026-0000-005348 unclaimed
Windows Event Logging Service Information Disclosure Vulnerability
Credited as AI's physical interface 001
CVE-2026-59138 BR2026-0000-005349 unclaimed
Microsoft Remote Registry Service Denial of Service Vulnerability
Credited as k0shl
CVE-2026-61345 BR2026-0000-005350 unclaimed
Microsoft Remote Registry Service Denial of Service Vulnerability
Credited as k0shl
CVE-2026-61346 BR2026-0000-005351 unclaimed
Windows Graphics Kernel Elevation of Privilege Vulnerability
Credited as Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
CVE-2026-61346 BR2026-0000-005352 unclaimed
Windows Graphics Kernel Elevation of Privilege Vulnerability
Credited as grass341 with Viettel Cyber Security
CVE-2026-61346 BR2026-0000-005353 unclaimed
Windows Graphics Kernel Elevation of Privilege Vulnerability
Credited as YuilMuil
CVE-2026-61346 BR2026-0000-005354 unclaimed
Windows Graphics Kernel Elevation of Privilege Vulnerability
Credited as YuilMuil(Yoon Jung Hyun)
CVE-2026-61353 BR2026-0000-005355 unclaimed
Windows Telephony Service Elevation of Privilege Vulnerability
Credited as Thanatos Tian with Diffract, __2st with Diffract and wxz
CVE-2026-61361 BR2026-0000-005356 unclaimed
Windows DHCP Client Remote Code Execution Vulnerability
Credited as Milan Justel with Microsoft
CVE-2026-61350 BR2026-0000-005357 unclaimed
Windows NTFS Information Disclosure Vulnerability
Credited as Microsoft Internal with Microsoft
CVE-2026-61350 BR2026-0000-005358 unclaimed
Windows NTFS Information Disclosure Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-61350 BR2026-0000-005359 unclaimed
Windows NTFS Information Disclosure Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-61366 BR2026-0000-005360 unclaimed
Windows Network Connection Broker Elevation of Privilege Vulnerability
Credited as Jongseong Kim (nevul37), SEC-agent team
CVE-2026-61366 BR2026-0000-005361 unclaimed
Windows Network Connection Broker Elevation of Privilege Vulnerability
Credited as Hwiwon Lee (hwiwonl), SEC-agent team
CVE-2026-61366 BR2026-0000-005362 unclaimed
Windows Network Connection Broker Elevation of Privilege Vulnerability
Credited as Younggi Park (grill66), SEC-agent team
CVE-2026-61366 BR2026-0000-005363 unclaimed
Windows Network Connection Broker Elevation of Privilege Vulnerability
Credited as Dongjun Kim (nevul37), SEC-agent team
CVE-2026-61368 BR2026-0000-005364 unclaimed
Windows Hyper-V Information Disclosure Vulnerability
Credited as cyanbamboo
CVE-2026-61368 BR2026-0000-005365 unclaimed
Windows Hyper-V Information Disclosure Vulnerability
Credited as b2ahex
CVE-2026-61924 BR2026-0000-005366 unclaimed
Windows Remote Desktop Client Information Disclosure Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-61925 BR2026-0000-005367 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as JaGoTu with DCIT, a.s.
CVE-2026-61928 BR2026-0000-005368 unclaimed
Windows Hello Tampering Vulnerability
Credited as Brandon Fisher
CVE-2026-61930 BR2026-0000-005369 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
CVE-2026-61937 BR2026-0000-005370 unclaimed
Windows HTTP.sys Elevation of Privilege Vulnerability
Credited as Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
CVE-2026-61937 BR2026-0000-005371 unclaimed
Windows HTTP.sys Elevation of Privilege Vulnerability
Credited as Jongseong Kim (nevul37), UIUC
CVE-2026-61937 BR2026-0000-005372 unclaimed
Windows HTTP.sys Elevation of Privilege Vulnerability
Credited as Hwiwon Lee (hwiwonl), UIUC
CVE-2026-61937 BR2026-0000-005373 unclaimed
Windows HTTP.sys Elevation of Privilege Vulnerability
Credited as Dongjun Kim (smlijun), UIUC
CVE-2026-61937 BR2026-0000-005374 unclaimed
Windows HTTP.sys Elevation of Privilege Vulnerability
Credited as Younggi Park (grill66), UIUC
CVE-2026-61937 BR2026-0000-005375 unclaimed
Windows HTTP.sys Elevation of Privilege Vulnerability
Credited as wisi
CVE-2026-61937 BR2026-0000-005376 unclaimed
Windows HTTP.sys Elevation of Privilege Vulnerability
Credited as Seung Chan Kim
CVE-2026-62692 BR2026-0000-005377 unclaimed
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Credited as Arjun Vasudeva with MSRC V&M - Exploit Research Team
CVE-2026-61932 BR2026-0000-005378 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as namnp with Viettel Cyber Security
CVE-2026-61933 BR2026-0000-005379 unclaimed
Windows DWM Core Library Information Disclosure Vulnerability
Credited as namnp with Viettel Cyber Security
CVE-2026-61934 BR2026-0000-005380 unclaimed
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Credited as hazard
CVE-2026-61936 BR2026-0000-005381 unclaimed
Windows Defender Firewall Service Security Feature Bypass Vulnerability
Credited as Brandon Fisher
CVE-2026-61936 BR2026-0000-005382 unclaimed
Windows Defender Firewall Service Security Feature Bypass Vulnerability
Credited as z1r0
CVE-2026-61939 BR2026-0000-005383 unclaimed
Winlogon Elevation of Privilege Vulnerability
Credited as z1r0
CVE-2026-62695 BR2026-0000-005384 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as Dongjun Lee with KAIST Hacking Lab