Updated
Updated · Computerworld · Aug 14
Microsoft Ships 751 August Fixes, Patching 1 Exploited Windows Flaw and 108 Critical Bugs
Updated
Updated · Computerworld · Aug 14

Microsoft Ships 751 August Fixes, Patching 1 Exploited Windows Flaw and 108 Critical Bugs

2 articles · Updated · Computerworld · Aug 14

Summary

  • 751 CVE entries landed in Microsoft’s August 2026 Patch Tuesday, including 108 critical flaws and an already exploited Windows WinSock driver privilege-escalation bug, CVE-2026-68820.
  • Windows, Office and Exchange were all flagged for immediate patching because critical exposure clusters hit network-facing server roles, especially Windows DNS Server RCEs and 14 DHCP Server vulnerabilities.
  • Two other flaws were publicly disclosed but not exploited: CVE-2026-62832 in the User Profile Service—patched after the LegacyHive protest disclosure—and CVE-2026-72971.
  • Microsoft listed no new known issues for the August client and server updates, but unresolved documentation gaps remain around WSUS synchronization details and a Windows Server 2022 BitLocker recovery prompt.
  • No SQL Server updates shipped this month, while Microsoft’s guidance put testing priority on printing and fonts, Remote Desktop, and a WinSock smoke test before broader enterprise deployment.

Insights

Could unpatched zero-days from this ongoing protest still be lurking inside your enterprise network today?
Why did Microsoft refuse to credit the rogue researcher who exposed this critical Windows flaw?
How did a simple registry trick force defenders to rely on unofficial patches for weeks?