IN August 2026, Microsoft released fixes for 421 unique CVEs during its Patch Tuesday, including two zero-day vulnerabilities. The bulk of these vulnerabilities (236) affect Windows, with 98 impacting Office products. Among the critical issues, CVE-2026-68820, an elevation of privilege vulnerability, is actively exploited.
Experts emphasize prioritizing vulnerabilities due to the overwhelming number of patches, urging security teams to focus on the most critical threats, particularly those with high CVSS scores, like CVE-2026-62878 and CVE-2026-62815, which are remote code execution vulnerabilities. Microsoft's shift toward larger update volumes is attributed to AI tools enhancing vulnerability identification.