BugRater
Early access: this site has moved to bugrater.com.

Security releases

Microsoft

August 2026 Early Security Updates

2026-Aug Aug 6, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Aug, revision 2026-08-06T07:00:00Z). 20 vulnerabilities, 19 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

724 lines
All 724 CVEs 724 Additional recognition 0 Unclaimed only
Showing 201–250 of 724 · page 5 of 15
CVE-2026-62901 BR2026-0000-005485 unclaimed
.NET Denial of Service Vulnerability
Credited as Kevin Gosse
CVE-2026-62902 BR2026-0000-005486 unclaimed
.NET Information Disclosure Vulnerability
Credited as Ky0toFu
CVE-2026-62908 BR2026-0000-005487 unclaimed
Windows Backup Engine Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-62909 BR2026-0000-005488 unclaimed
.NET Elevation of Privilege Vulnerability
Credited as Kevin Gosse
CVE-2026-62910 BR2026-0000-005489 unclaimed
Microsoft Exchange Server Elevation of Privilege Vulnerability
Credited as Yannic Röcken with Indeno GmbH
CVE-2026-62912 BR2026-0000-005490 unclaimed
Microsoft Exchange Server Denial of Service Vulnerability
Credited as ECooper with Aretiq.AI
CVE-2026-62913 BR2026-0000-005491 unclaimed
Microsoft Exchange Server Remote Code Execution Vulnerability
Credited as Van1sher
CVE-2026-62914 BR2026-0000-005492 unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as P1hcn
CVE-2026-62915 BR2026-0000-005493 unclaimed
Microsoft Exchange Server Security Feature Bypass Vulnerability
Credited as 71C4
CVE-2026-54123 BR2026-0000-005494 unclaimed
Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
Credited as Abhishek Mundhra with PwC
CVE-2026-63513 BR2026-0000-005495 unclaimed
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-63513 BR2026-0000-005496 unclaimed
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Credited as haowei yan
CVE-2026-63513 BR2026-0000-005497 unclaimed
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Credited as xiaozun tang
CVE-2026-63515 BR2026-0000-005498 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as SeaDragnoL with Qrious Secure and grass from Viettel Cyber Security.
CVE-2026-63515 BR2026-0000-005499 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as grass with Viettel Cyber Security
CVE-2026-63515 BR2026-0000-005500 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-63515 BR2026-0000-005501 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Jmini
CVE-2026-63515 BR2026-0000-005502 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Hwiwon Lee (hwiwonl with UIUC
CVE-2026-63515 BR2026-0000-005503 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Jongseong Kim (nevul37 with UIUC
CVE-2026-63515 BR2026-0000-005504 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as DongJun Kim (smlijun) with UIUC
CVE-2026-63517 BR2026-0000-005505 unclaimed
Microsoft Office Graphics Component Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-63517 BR2026-0000-005506 unclaimed
Microsoft Office Graphics Component Information Disclosure Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-63518 BR2026-0000-005507 unclaimed
Microsoft Office Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-63521 BR2026-0000-005508 unclaimed
Microsoft Office Word Information Disclosure Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-63519 BR2026-0000-005509 unclaimed
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-63519 BR2026-0000-005510 unclaimed
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Credited as Minjea Park
CVE-2026-63519 BR2026-0000-005511 unclaimed
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Credited as Jmini
CVE-2026-64922 BR2026-0000-005512 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as Kn1ght
CVE-2026-64922 BR2026-0000-005513 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as P1hcn
CVE-2026-65657 BR2026-0000-005514 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-65657 BR2026-0000-005515 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Sriram Sridhar
CVE-2026-65656 BR2026-0000-005516 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Ben Faull with Microsoft
CVE-2026-65656 BR2026-0000-005517 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Hidetake Jo with Microsoft
CVE-2026-65656 BR2026-0000-005518 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Harry Fokas with Microsoft
CVE-2026-65656 BR2026-0000-005519 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Michael Van Leeuwen with Microsoft
CVE-2026-65658 BR2026-0000-005520 unclaimed
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credited as Q5Ca with VCSLAB of Viettel Cyber Security
CVE-2026-65661 BR2026-0000-005521 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Renzhi Li
CVE-2026-65663 BR2026-0000-005522 unclaimed
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credited as splitline with DEVCORE
CVE-2026-65660 BR2026-0000-005523 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as khoadha
CVE-2026-65664 BR2026-0000-005524 unclaimed
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-65664 BR2026-0000-005525 unclaimed
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Credited as txz
CVE-2026-65665 BR2026-0000-005526 unclaimed
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credited as John Nzyuko
CVE-2026-65665 BR2026-0000-005527 unclaimed
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credited as tuo4n8 with Verichains Cyber Force
CVE-2026-65662 BR2026-0000-005528 unclaimed
Windows GDI Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-65662 BR2026-0000-005529 unclaimed
Windows GDI Information Disclosure Vulnerability
Credited as npc0vo
CVE-2026-65662 BR2026-0000-005530 unclaimed
Windows GDI Information Disclosure Vulnerability
Credited as @2st__ with Diffract
CVE-2026-65671 BR2026-0000-005531 unclaimed
Remote Access API Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-65672 BR2026-0000-005532 unclaimed
Remote Access API Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-65675 BR2026-0000-005533 unclaimed
CoPilot Chat Security Feature Bypass Vulnerability
Credited as Rayhan Destian
CVE-2026-65675 BR2026-0000-005534 unclaimed
CoPilot Chat Security Feature Bypass Vulnerability
Credited as Theodor N. Engoey