Patch Tuesday, August 2026
Microsoft's monthly security release, Tuesday, August 11, 2026. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
22 CVEs · 0 critical · 1 exploited · 0 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
22 CVEs · 0 critical · 1 exploited · 0 with public exploit code
- 7.0HighAug 11, 2026Microsoft Windows Ancillary Function Driver for WinSock Memory corruptionCVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.Exploited
- 8.8HighAug 11, 2026Microsoft Exchange Server 2016 Cumulative Update 23 Memory corruptionCVE-2026-62913Microsoft Exchange Server Unauthorized code execution Patch Microsoft Exchange Server with the latest security updates.
- 8.8HighAug 11, 2026Microsoft PowerShell 7.4 Path traversal / file handlingCVE-2026-70337Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
- 8.0HighAug 11, 2026Microsoft Exchange Server 2016 Cumulative Update 23 Auth bypass / access controlCVE-2026-62911Microsoft Exchange Server is affected. An attacker gains elevated network privileges. Patch Microsoft Exchange Server with the latest security updates.Detection
- 7.8HighAug 11, 2026Microsoft Windows 11 version 23H2 Memory corruptionCVE-2026-61359Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- 7.8HighAug 11, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-62752Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- 7.8HighAug 11, 2026Microsoft .net Memory corruptionCVE-2026-62871Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
- 7.8HighAug 11, 2026Microsoft Office 365 for Mac Memory corruptionCVE-2026-62877Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- 7.8HighAug 11, 2026Microsoft visual studio 2022 Memory corruptionCVE-2026-62886Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
- 7.8HighAug 11, 2026Microsoft visual studio 2022CVE-2026-62909Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
- 7.8HighAug 11, 2026Microsoft Windows 10 Version 22H2 Auth bypass / access controlCVE-2026-66804Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
- 7.8HighAug 11, 2026Microsoft 365 apps Memory corruptionCVE-2026-68807Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 7.8HighAug 11, 2026Microsoft PowerShell 7.4 Code / command injectionCVE-2026-70338Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
- 7.8HighAug 11, 2026Microsoft visual studio 2022 Memory corruptionCVE-2026-70354Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
- 7.5HighAug 11, 2026Microsoft visual studio 2022 Memory corruptionCVE-2026-62898Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.1% likely
- 7.5HighAug 11, 2026Microsoft visual studio 2022CVE-2026-62901Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.1.2% likely
- 7.0HighAug 11, 2026Microsoft .net framework Memory corruptionCVE-2026-62897Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
- 6.5MediumAug 11, 2026Microsoft dynamics 365 business central 2024 Auth bypass / access controlCVE-2026-40375Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
- 6.5MediumAug 11, 2026Microsoft visual studio 2022CVE-2026-62902Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
- 5.9MediumAug 11, 2026Microsoft visual studio 2022CVE-2026-62899Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.
- 5.9MediumAug 11, 2026Microsoft visual studio 2022 Information disclosureCVE-2026-62900Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.
- 5.5MediumAug 11, 2026Microsoft Office 365 for Mac Memory corruptionCVE-2026-62740Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
Adobe
No tracked Adobe CVEs in this window.
SAP
4 CVEs · 0 critical · 0 exploited · 0 with public exploit code
- 7.0HighAug 11, 2026Sap approuterCVE-2026-58230SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated attacker could send a specially crafted token to cause sensitive credential material to be sent to an attacker-controlled destination. The attack complexity is high due to non-default preconditions required in the target environment. This results in a high impact on confidentiality and a low impact on integrity and availability.
- 5.9MediumAug 11, 2026Sap approuter Auth bypass / access controlCVE-2026-58237WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with low privileges could exploit this to access restricted functionality. Successful exploitation could allow the attacker to read sensitive information and perform limited modifications, resulting in a high impact on confidentiality and a low impact on integrity. There is no impact on availability.
- 5.9MediumAug 11, 2026Sap approuter Denial of serviceCVE-2026-58238SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific runtime conditions to be met, making the attack complex to execute. This results in a high impact on availability. There is no impact on confidentiality and integrity.
- 3.7LowAug 11, 2026Sap approuterCVE-2026-58239SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially crafted requests to spoof the tenant context under conditions not fully within their control. Successful exploitation could allow limited access to another tenant's information, resulting in a low impact on confidentiality. There is no impact on integrity and availability.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.