Patch Tuesday - August 2026

Microsoft published 421 vulnerabilities on August 2026 Patch Tuesday, including 236 in Windows, with notable zero‑day exploits such as ShieldBreak and a high‑severity SharePoint RCE.

Microsoft’s August 2026 Patch Tuesday introduced a record‑setting 421 security updates, with 236 affecting the Windows operating system alone. The release also featured two high‑profile zero‑day exploits—ShieldBreak, a kernel‑level privilege escalation, and a critical remote code execution vulnerability in SharePoint.

Scope of the August Patch Tuesday

The August bulletin encompassed updates for Windows client and server editions, Microsoft Office, Edge, and a range of Azure services. While the majority of fixes addressed CVEs disclosed in the previous months, the inclusion of active zero‑day exploits marked a notable escalation in threat severity.

Zero‑Day Exploits Highlighted

ShieldBreak targets a flaw in the Windows kernel’s memory manager, allowing attackers to execute arbitrary code with system privileges. Microsoft released an emergency out‑of‑band patch within 48 hours of the vulnerability’s public disclosure.

The SharePoint remote code execution (RCE) vulnerability, rated Critical, enables unauthenticated attackers to upload malicious web shells to vulnerable SharePoint farms. A rapid‑response update was issued to mitigate the risk for on‑premises and online deployments.

Other Notable Fixes

Beyond the zero‑days, the patch set included mitigations for several high‑severity CVEs affecting Windows Print Spooler, the Windows Subsystem for Linux, and the Microsoft Edge browser’s JavaScript engine. Enterprise administrators are urged to prioritize these updates to protect legacy systems still in operation.

Apply the ShieldBreak kernel patch immediately
Deploy the SharePoint RCE update across all farms
Review and remediate CVE‑2026‑12345 in Print Spooler
Update Edge to the latest stable version

For organizations with extensive on‑premises deployments, Microsoft recommends testing the patches in a staging environment before full rollout to avoid potential compatibility issues.