Microsoft's August 2026 Patch Tuesday Squashes 400 Bugs, Including 3 Zero-Days
Microsoft's latest Patch Tuesday release is one of the biggest in recent memory, addressing roughly 400 vulnerabilities across Windows, Office, and other products. Buried in that huge batch are three zero-day flaws: one that attackers are already exploiting in active campaigns, and two others that were publicly disclosed before Microsoft had a fix ready.
While the company hasn't detailed every flaw in the release, the sheer volume signals a sprawling update covering everything from core OS components to enterprise services. Patch counts this large typically include a mix of privilege escalation, remote code execution, and information disclosure bugs, several of which are rated critical.
Security teams are being urged to prioritize the actively exploited zero-day first, since it represents the most immediate real-world risk, before working through the rest of the update queue.