Microsoft

August 2026 Early Security Updates

2026-Aug Aug 6, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Aug, revision 2026-08-06T07:00:00Z). 20 vulnerabilities, 19 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug

Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

724 lines

Showing 1–50 of 724 · page 1 of 15

CVE-2026-62836 BR2026-0000-004514 unclaimed

Azure SQL Managed Instance Elevation of Privilege Vulnerability

Credited as wtm with Offensi

CVE-2026-62896 BR2026-0000-004515 unclaimed

Microsoft Teams Elevation of Privilege Vulnerability

Credited as Henrique Pereira with Microsoft

CVE-2026-65668 BR2026-0000-004516 unclaimed

Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

Credited as Henrique Pereira with Microsoft

CVE-2026-59118 BR2026-0000-004517 unclaimed

Microsoft Power Apps Elevation of Privilege Vulnerability

Credited as Ilan Kalendarov with Cymulate

CVE-2026-59118 BR2026-0000-004518 unclaimed

Microsoft Power Apps Elevation of Privilege Vulnerability

Credited as Elad Beber with Cymulate

CVE-2026-59118 BR2026-0000-004519 unclaimed

Microsoft Power Apps Elevation of Privilege Vulnerability

Credited as Ben Zamir with Cymulate

CVE-2026-50516 BR2026-0000-004520 unclaimed

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Credited as Shay Shavit with Microsoft

CVE-2026-62918 BR2026-0000-004521 unclaimed

Microsoft Teams Spoofing Vulnerability

Credited as Vaibhavi Kalgutkar

CVE-2026-68823 BR2026-0000-004522 unclaimed

Azure Confidential Ledger Remote Code Execution Vulnerability

Credited as XBREACH TEAM with https://xbreach.ai/

CVE-2026-70332 BR2026-0000-004523 unclaimed

Microsoft Office SharePoint Spoofing Vulnerability

Credited as Keanu Nys with Spotit

CVE-2026-56161 BR2026-0000-004524 unclaimed

Azure Logic Apps Information Disclosure Vulnerability

Credited as Haakon Gulbrandsrud with Binary Security

CVE-2026-62830 BR2026-0000-004525 unclaimed

Azure SRE Agent Elevation of Privilege Vulnerability

Credited as wtm with Offensi

CVE-2026-65667 BR2026-0000-004526 unclaimed

Microsoft Teams Elevation of Privilege Vulnerability

Credited as Henrique Pereira with Microsoft

CVE-2026-56162 BR2026-0000-004527 unclaimed

Azure SQL Database Elevation of Privilege Vulnerability

Credited as Sam

CVE-2026-50515 BR2026-0000-004528 unclaimed

Azure Service Bus Remote Code Execution Vulnerability

Credited as Sharath Unni

CVE-2026-63522 BR2026-0000-004529 unclaimed

Azure SQL Database Elevation of Privilege Vulnerability

Credited as Sharath Unni

CVE-2026-63508 BR2026-0000-004530 unclaimed

Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

Credited as Noa Royzman with Microsoft

CVE-2026-50472 BR2026-0000-005302 unclaimed

Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

Credited as Souhail Hammou

CVE-2026-56174 BR2026-0000-005303 unclaimed

Windows Narrator Braille Elevation of Privilege Vulnerability

Credited as Dongjun Lee (m0nd2y), with with KAIST Hacking Lab

CVE-2026-58650 BR2026-0000-005304 unclaimed

Visual Studio Code Security Feature Bypass Vulnerability

Credited as 陳宥升 (CheN..)

CVE-2026-65768 BR2026-0000-005305 unclaimed

Microsoft Teams Remote Code Execution Vulnerability

Credited as Ofek Levin with Enclave

CVE-2026-57105 BR2026-0000-005306 unclaimed

Microsoft Office SharePoint Spoofing Vulnerability

Credited as P1hcn

CVE-2026-62829 BR2026-0000-005307 unclaimed

Microsoft SharePoint Server Spoofing Vulnerability

Credited as P1hcn

CVE-2026-62827 BR2026-0000-005308 unclaimed

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Credited as Ivan Vagunin

CVE-2026-62837 BR2026-0000-005309 unclaimed

Microsoft SharePoint Server Information Disclosure Vulnerability

Credited as Rafael Resende

CVE-2026-63514 BR2026-0000-005310 unclaimed

Microsoft SharePoint Server Remote Code Execution Vulnerability

Credited as MEOW

CVE-2026-63512 BR2026-0000-005311 unclaimed

Microsoft SharePoint Server Tampering Vulnerability

Credited as Henrique Pereira with Microsoft

CVE-2026-63520 BR2026-0000-005312 unclaimed

Microsoft SharePoint Server Remote Code Execution Vulnerability

Credited as Stephen Fewer with Rapid7

CVE-2026-40375 BR2026-0000-005313 unclaimed

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Credited as nhienit with Galaxy One

CVE-2026-54113 BR2026-0000-005314 unclaimed

Remote Procedure Call Denial of Service Vulnerability

Credited as Microsoft

CVE-2026-54984 BR2026-0000-005315 unclaimed

Windows Imaging Component Remote Code Execution Vulnerability

Credited as Kagan Capar (kagancapar) working with TrendAI Zero Day Initiative

CVE-2026-49179 BR2026-0000-005316 unclaimed

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Credited as Microsoft

CVE-2026-58612 BR2026-0000-005317 unclaimed