Microsoft security updates
Microsoft Security Patch Roundup — Week of September 1, 2026
Official Microsoft Security Response Center updates published during the past week, collected for patch planning and review.
Published 01 September 2026 · RCW IT Training
Important: Review the linked Microsoft advisory, affected-product information and available mitigations before deployment. This roundup is an index of official notices, not a substitute for change testing or incident response guidance.
Official MSRC updates
- CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability (31 Aug 2026)
- CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability (31 Aug 2026)
- CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (31 Aug 2026)
- CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability (31 Aug 2026)
- CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability (31 Aug 2026)
- CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (31 Aug 2026)
- CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability (31 Aug 2026)
- CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability (31 Aug 2026)
- CVE-2026-26174 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability (31 Aug 2026)
- Chromium: CVE-2026-79131 Out of bounds write in ANGLE (28 Aug 2026)
- Chromium: CVE-2026-79130 Buffer overflow in ANGLE (28 Aug 2026)
- Chromium: CVE-2026-79128 Use after free in Views (28 Aug 2026)
- Chromium: CVE-2026-79127 Out of bounds write in ANGLE (28 Aug 2026)
- Chromium: CVE-2026-79126 Incorrect provision of specified functionality in Proxy (28 Aug 2026)
- Chromium: CVE-2026-79125 Information leak in XR (28 Aug 2026)
- Chromium: CVE-2026-79124 Information leak in Intents (28 Aug 2026)
- Chromium: CVE-2026-79123 Improper input validation in NTP Footer (28 Aug 2026)
- Chromium: CVE-2026-79122 Information leak in SignIn (28 Aug 2026)
- Chromium: CVE-2026-79121 Improper input validation in Chromecast (28 Aug 2026)
- Chromium: CVE-2026-79120 Uninitialized resource in ANGLE (28 Aug 2026)
- Chromium: CVE-2026-79119 Use after free in PDF (28 Aug 2026)
- Chromium: CVE-2026-79118 Uninitialized resource in ANGLE (28 Aug 2026)
- Chromium: CVE-2026-79116 Missing authorization in Viz (28 Aug 2026)
- Chromium: CVE-2026-79112 Out of bounds read in Skia (28 Aug 2026)
- Chromium: CVE-2026-79111 Improper input validation in Dawn (28 Aug 2026)
- Chromium: CVE-2026-79110 Missing authorization in Preload (28 Aug 2026)
- Chromium: CVE-2026-79109 Improper input validation in Printing (28 Aug 2026)
- Chromium: CVE-2026-79108 UI misrepresentation in Web Authentication (Passkeys & Security Keys) (28 Aug 2026)
- Chromium: CVE-2026-79107 Incorrect authorization in TabGroups (28 Aug 2026)
- Chromium: CVE-2026-79106 Improper input validation in Input (28 Aug 2026)
Recommended next steps
- Identify affected assets and confirm update applicability.
- Prioritise actively exploited or internet-facing risk according to your organisation’s process.
- Test patches in a representative ring, deploy in approved windows and verify service health.
- Record exceptions, mitigations and the next review date.