THE August 2026 Patch Tuesday from Microsoft addresses 421 vulnerabilities, with 62 categorized as critical. Notably, CVE-2026-68820, a use-after-free vulnerability in the WinSock driver, has been exploited in the wild. Other vulnerabilities include CVE-2026-62832 and CVE-2026-72971, which are yet to be exploited but are critical. Security teams are urged to prioritize updates for the exploited flaw and the disclosed zero-days, ensuring the patches are applied across various Windows products and services.
Microsoft Patch Tuesday Patches Critical WinSock Exploit
CyberSIXT Evidence Panel
Article by CyberSIXT
Timeline Coverage
Swipe to explore timeline
-
Critical Metabase SQLi flaw lets attackers seize full admin control
securityonline.info
-
CISA Flags Critical Flaws in Metabase, Windows and Cisco Firewall
securityaffairs.com
-
Lazarus Group exploits CVE‑2026‑68820 via fake job offers
-
MS Patch Tuesday patches 421 flaws, Lazarus zero day exploited
malwarebytes.com
-
Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day
infosecurity-magazine.com
-
CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed
-
Lazarus uses fake job offers to exploit Windows CVE-2026-68820
securityweek.com
-
Microsoft Fixes 400 Flaws on August Patch Tuesday
-
Microsoft patches wormable DNS flaw and critical WinSock zero day
-
Lazarus Exploits Windows Zero-Day in Operation Dream Job Attacks
-
Microsoft Patch Tuesday Patches Critical WinSock Exploit
-
CISA Flags Windows Driver Use After Free Flaw CVE-2026-68820
cisa.gov
-
CISA Flags High Risk Windows WinSock Use After Free Flaw in KEV
-
Microsoft's Patch Tuesday Deluge Continues With August Updates
darkreading.com
-
Microsoft Plugs Nearly 400 Security Holes
krebsonsecurity.com
-
Microsoft Fixes 421 Flaws Including SharePoint Zero Day
rapid7.com