Microsoft has released a security advisory on the 11th of August 2026 in line with their regular monthly patch schedule which includes updates to address vulnerabilities in one (1) high risk and twelve (12) medium risk products.
These updates address vulnerabilities which may impact services through Elevation of Privilege, Denial of Service, Remote Code Execution, Information Disclosure, Data Manipulation, Security Restriction Bypass, and Spoofing.
For more information please see: Microsoft Security Update
This release consists of 421 Microsoft CVEs (security updates) and 2 non-Microsoft CVE’s for the following products, features and roles:
- Azure
- Defender
- Developer Tools
- Exchange Server
- Microsoft Office
- Microsoft Office 2016
- SharePoint Server
- Microsoft Windows
- Windows
- Windows TPM (MITRE)
CVE-2026-68820 is being exploited. A locally authenticated attacker could run a specially crafted application on an affected system to trigger a race condition. Successful exploitation could allow the attacker to gain SYSTEM privileges. User interaction is not required.
Proof of Concept exploit code is publicly known and available for CVE-2026-62832. An authenticated attacker who has credentials for another local account could run a specially crafted application to load another user’s registry hive. Successful exploitation could allow the attacker to access or modify another user’s data and gain administrator privileges. User interaction is not required.
Proof of Concept exploit code is publicly known and available for CVE-2026-72971. Improper link resolution before file access (‘link following’) in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
Matsco recommends any affected systems are updated as soon as convenient.