Early access: this site has moved to bugrater.com.

Security releases

Microsoft

August 2026 Early Security Updates

2026-Aug Aug 6, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Aug, revision 2026-08-06T07:00:00Z). 20 vulnerabilities, 19 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

728 lines
Showing 351–400 of 728 · page 8 of 15
CVE-2026-72971 BR2026-0000-005635 unclaimed
Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability
Credited as yhw
CVE-2026-72971 BR2026-0000-005636 unclaimed
Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability
Credited as txz
CVE-2026-70339 BR2026-0000-005637 unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-42976 BR2026-0000-005638 unclaimed
Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
Credited as Howard McGreehan with MSRC V&M
CVE-2026-54981 BR2026-0000-005639 unclaimed
Visual Studio Code Python Extension Security Feature Bypass Vulnerability
Credited as Thomas Neil James Shadwell (zemnmez) with OpenAI
CVE-2026-58641 BR2026-0000-005640 unclaimed
.NET Elevation of Privilege Vulnerability
Credited as Matthew Leibowitz
CVE-2026-58651 BR2026-0000-005641 unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-59119 BR2026-0000-005642 unclaimed
PowerShell Elevation of Privilege Vulnerability
Credited as Trung Nguyen with CyStack
CVE-2026-59122 BR2026-0000-005643 unclaimed
Windows Telephony Service Elevation of Privilege Vulnerability
Credited as Grant Hume
CVE-2026-59125 BR2026-0000-005644 unclaimed
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Credited as Divya Sundar with Microsoft- MSRC V&M
CVE-2026-59131 BR2026-0000-005645 unclaimed
AMD Zen Information Disclosure Vulnerability
Credited as Michael Monwuba with Microsoft
CVE-2026-61349 BR2026-0000-005646 unclaimed
Windows Work Folder Service Elevation of Privilege Vulnerability
Credited as Jongseong Kim (nevul37), SEC-agent team
CVE-2026-61349 BR2026-0000-005647 unclaimed
Windows Work Folder Service Elevation of Privilege Vulnerability
Credited as Hwiwon Lee (hwiwonl), SEC-agent team
CVE-2026-61349 BR2026-0000-005648 unclaimed
Windows Work Folder Service Elevation of Privilege Vulnerability
Credited as Younggi Park (grill66), SEC-agent team
CVE-2026-61349 BR2026-0000-005649 unclaimed
Windows Work Folder Service Elevation of Privilege Vulnerability
Credited as Dongjun Kim (smlijun), SEC-agent team
CVE-2026-61363 BR2026-0000-005650 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-61363 BR2026-0000-005651 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-61363 BR2026-0000-005652 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as PB18
CVE-2026-61363 BR2026-0000-005653 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as wgg
CVE-2026-61363 BR2026-0000-005654 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as @2st__ with Diffract
CVE-2026-61363 BR2026-0000-005655 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-61363 BR2026-0000-005656 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as txz
CVE-2026-61359 BR2026-0000-005657 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-61359 BR2026-0000-005658 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as h4urek with secsys lab
CVE-2026-61359 BR2026-0000-005659 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as z1r0
CVE-2026-61359 BR2026-0000-005660 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as Brandon Fisher
CVE-2026-61359 BR2026-0000-005661 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-61359 BR2026-0000-005662 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-61359 BR2026-0000-005663 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as Dongjun Lee with KAIST Hacking Lab
CVE-2026-61359 BR2026-0000-005664 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as pwn2addr
CVE-2026-61365 BR2026-0000-005665 unclaimed
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Credited as Raymond Reskusich with Microsoft
CVE-2026-61357 BR2026-0000-005666 unclaimed
Application Information Services Elevation of Privilege Vulnerability
Credited as Brandon Fisher
CVE-2026-61357 BR2026-0000-005667 unclaimed
Application Information Services Elevation of Privilege Vulnerability
Credited as Pwnforr777
CVE-2026-61358 BR2026-0000-005668 unclaimed
Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
Credited as Chen Le Qi (@cplearns2h4ck) with STAR Labs SG Pte. Ltd.
CVE-2026-61920 BR2026-0000-005669 unclaimed
Windows DNS Server Remote Code Execution Vulnerability
Credited as k0shl
CVE-2026-61926 BR2026-0000-005670 unclaimed
Windows USB Driver Elevation of Privilege Vulnerability
Credited as grass341 with Viettel Cyber Security
CVE-2026-61926 BR2026-0000-005671 unclaimed
Windows USB Driver Elevation of Privilege Vulnerability
Credited as LC with VGCO - Future Labs
CVE-2026-61918 BR2026-0000-005672 unclaimed
Windows Remote Desktop Client Information Disclosure Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-61921 BR2026-0000-005673 unclaimed
Windows Remote Desktop Client Information Disclosure Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-61938 BR2026-0000-005674 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as h4urek with secsys lab
CVE-2026-62698 BR2026-0000-005675 unclaimed
Microsoft Digest Authentication Elevation of Privilege Vulnerability
Credited as Erik Egsgard with Field Effect
CVE-2026-62698 BR2026-0000-005676 unclaimed
Microsoft Digest Authentication Elevation of Privilege Vulnerability
Credited as Microsoft Red Team with Microsoft
CVE-2026-62698 BR2026-0000-005677 unclaimed
Microsoft Digest Authentication Elevation of Privilege Vulnerability
Credited as WARP
CVE-2026-62698 BR2026-0000-005678 unclaimed
Microsoft Digest Authentication Elevation of Privilege Vulnerability
Credited as ACS teams at Microsoft
CVE-2026-62700 BR2026-0000-005679 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-62700 BR2026-0000-005680 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as npc0vo
CVE-2026-62700 BR2026-0000-005681 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-62700 BR2026-0000-005682 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Minjea Park
CVE-2026-62700 BR2026-0000-005683 unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Jmini
CVE-2026-62701 BR2026-0000-005684 unclaimed
Windows Telephony Service Elevation of Privilege Vulnerability
Credited as pwn2addr