started · updated
Microsoft releases August 2026 security updates amid active zero-day exploits
Microsoft has released its August 2026 Patch Tuesday security updates, addressing approximately 421 vulnerabilities across its product ecosystem, including Windows, Office, Azure, and SharePoint. The update includes 42 critical vulnerabilities, several of which could allow for remote code execution or privilege escalation.
A primary concern is the actively exploited zero-day vulnerability, CVE-2026-68820, a use-after-free flaw in the Windows Ancillary Function Driver for WinSock (afd.sys). Security researchers from Check Point have linked the exploitation of this flaw to the North Korean threat group Lazarus, specifically within their ‘Operation Dream Job’ campaign targeting the defense and aviation sectors.
Additionally, researcher Nightmare Eclipse has released a proof of concept named ‘ShieldBreak,’ which reportedly bypasses a previous Microsoft Defender patch (CVE-2026-50656) to grant attackers full system-level access. This exploit targets Windows 10, 11, and Windows Server 2025.
Beyond security, the August update for Windows 11 introduces several performance and usability enhancements. These include the expansion of the ‘Low Latency Profile’ to accelerate application startup times, optimizations for systems with lower RAM, and improved File Explorer functionality, such as dynamic file size displays in KB, MB, or GB. Other updates include enhanced Windows Search capabilities and new Voice Isolation features for Voice Access.
Entities
CVE-2026-68820 · Check Point · Check Point Research · Copilot+ · Lazarus · Lazarus Group · Microsoft · Nightmare Eclipse · Windows · Windows 11 · Windows 11
Claims
What the coverage asserts, and how many sources carry each claim.
- [○ 1 SOURCE] Voice Access now includes support for the Korean language.
- [● 3 SOURCES] The Voice Access accessibility feature now supports Voice Isolation to reduce interference from background noise and other speakers. www.thurrott.com
- [○ 1 SOURCE] Users can now uninstall AI models from Copilot+ PCs.
- [○ 1 SOURCE] The Weather widget is now the only widget shown by default on the Lock Screen to reduce distractions. www.thurrott.com
- [● 2 SOURCES] The KB5121003 update for Windows 11 versions 25H2 and 24H2 includes new gesture controls for precision touchpads and Windows Update improvements. www.thurrott.com
- [● 16 SOURCES] Microsoft released the August 2026 Patch Tuesday updates for all supported versions of Windows 11. www.thurrott.com · tinhte.vn · windows.gadgethacks.com · notebook.cnmo.com · cyberinsider.com · +8 more
- [● 3 SOURCES] Windows Hello Enhanced Sign-in Security (ESS) now supports peripheral fingerprint sensors. www.thurrott.com
- [● 2 SOURCES] Taskbar notification badges now use the Windows accent color instead of the default red. www.thurrott.com
- [○ 1 SOURCE] Users can now pause Windows Updates for up to 35 days. www.thurrott.com
- [● 18 SOURCES] Microsoft released the August 2026 Patch Tuesday security updates. www.thurrott.com · www.generation-nt.com · windows.gadgethacks.com · notebook.cnmo.com · cyberinsider.com · +12 more
- [● 4 SOURCES] Taskbar notification badges will now use the Windows accent color instead of the default red. www.thurrott.com · tinhte.vn
- [● 5 SOURCES] The KB5121003 update for Windows 11 versions 25H2 and 24H2 introduces new gesture controls for precision touchpads. www.thurrott.com · tinhte.vn · cyberinsider.com