Microsoft security updates
Microsoft Security Patch Roundup — Week of August 26, 2026
Official Microsoft Security Response Center updates published during the past week, collected for patch planning and review.
Published 26 August 2026 · RCW IT Training
Important: Review the linked Microsoft advisory, affected-product information and available mitigations before deployment. This roundup is an index of official notices, not a substitute for change testing or incident response guidance.
Official MSRC updates
- CVE-2026-59131 AMD Zen Information Disclosure Vulnerability (25 Aug 2026)
- CVE-2026-59130 AMD Zen Information Disclosure Vulnerability (25 Aug 2026)
- CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability (25 Aug 2026)
- CVE-2026-24301 Microsoft Copilot Information Disclosure Vulnerability (25 Aug 2026)
- CVE-2026-69558 Microsoft Partner Center Information Disclosure Vulnerability (20 Aug 2026)
- CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-69543 Azure Virtual Machines Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability (20 Aug 2026)
- CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability (20 Aug 2026)
- CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability (20 Aug 2026)
- CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability (20 Aug 2026)
- CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability (20 Aug 2026)
- CVE-2026-63509 Microsoft Fabric Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-62755 Windows DHCP Client Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability (20 Aug 2026)
- CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability (20 Aug 2026)
- CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability (20 Aug 2026)
- CVE-2026-55015 Microsoft Remote Help Denial of Service Vulnerability (20 Aug 2026)
- CVE-2026-55013 Windows Remote Help Defense Spoofing Vulnerability (20 Aug 2026)
- CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability (20 Aug 2026)
- CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability (20 Aug 2026)
Recommended next steps
- Identify affected assets and confirm update applicability.
- Prioritise actively exploited or internet-facing risk according to your organisation’s process.
- Test patches in a representative ring, deploy in approved windows and verify service health.
- Record exceptions, mitigations and the next review date.