VulnerabilityBleeping Computer
7.8 — HIGH
Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days
Today is Microsoft's August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Microsoft released a patch Tuesday that addressed 400 vulnerabilities, including three zero-day exploits, affecting various systems and services across multiple sectors.
⚙️Technical Details
💥Impact Assessment
Severity: High
Who Is at Risk
Users of affected systems, particularly those with unpatched .NET installations
🛡️Recommended Actions
1Apply the latest patch from Microsoft to all affected .NET installations
2Enable Network Segmentation and Monitoring for Azure-based services
3Regularly update and patch all desktops and servers with vulnerable systems
📦Affected Products
.NETActive Directory Certificate ServicesAMD ZenApplication Information ServicesAzure Active DirectoryAzure Confidential LedgerAzure CycleCloudAzure Entra IDAzure Logic AppsAzure Monitor AgentAzure Service BusAzure SQL DatabaseAzure SQL Managed InstanceAzure SRE AgentAzure Storage ExplorerCapability Access Management Service (camsvc)Desktop Window ManagerDynamics Business CentralGitHub Copilot and Visual Studio CodeMicrosoft 365 Admin CenterMicrosoft Azure Attestation service and Device Health Attestation ServiceMicrosoft Azure Kubernetes ServiceMicrosoft COM for WindowsMicrosoft Defender for EndpointMicrosoft Digest AuthenticationMicrosoft Dynamics 365 (on-premises)Microsoft Entra Connect SyncMicrosoft Entra Provisioning Service (SyncFabric)Microsoft Exchange Server
🔐NVD Verified DataVERIFIED
CVE-2026-58641 ↗CVSS 7.8 — HIGH
Attack Vector
LOCAL
Complexity
LOW
Vector String
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWeaknesses
CWE-190
CVE-2026-62901 ↗CVSS 7.5 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWeaknesses
CWE-606
CVE-2026-70354 ↗CVSS 7.8 — HIGH
Attack Vector
LOCAL
Complexity
LOW
Vector String
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWeaknesses
CWE-787
CVE-2026-62899 ↗CVSS 5.9 — MEDIUM
Attack Vector
NETWORK
Complexity
HIGH
Vector String
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NWeaknesses
CWE-444
CVE-2026-62902 ↗CVSS 6.5 — MEDIUM
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NWeaknesses
CWE-693CWE-918CWE-829
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.