vulnerability
August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day
High
Summary
Microsoft released a substantial update addressing 421 vulnerabilities, including a critical zero-day exploit in a kernel-mode driver (afd.sys). Threat actors, potentially including nation-state actors like those linked to North Korea's Lazarus group, have been actively exploiting this flaw to gain SYSTEM privileges on affected systems, without requiring user interaction. The update also includes fixes for numerous other vulnerabilities across Windows, Office, and related products.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data