Microsoft Releases August 2026 Patch Tuesday Updates, Addressing Zero-Day and Critical Vulnerabilities

Microsoft has issued its August 2026 Patch Tuesday security updates, resolving 398 Common Vulnerabilities and Exposures (CVEs) across various products, including Windows, Office, and Azure. A critical actively exploited zero-day vulnerability (CVE-2026-68820) in the Windows WinSock driver (afd.sys) has been patched, which could allow attackers to execute code with SYSTEM-level privileges. Additionally, a maximum severity improper authorization vulnerability (CVE-2026-58231) in SAP Commerce Cloud's Data Hub Adapter was addressed, posing a risk of arbitrary code execution by unauthenticated remote attackers.