Microsoft’s massive Patch Tuesday releases continue as AI reshapes bug discovery
Microsoft patches 419 vulnerabilities in record-breaking Patch Tuesday; Windows Winsock zero-day CVE-2026-68820 is actively exploited by Lazarus Group.
Microsoft's August Patch Tuesday fixes 419 vulnerabilities (62 critical, 357 important), among the largest monthly counts on record, following 206 fixes in June and 622 in July as AI-assisted discovery drives unprecedented volume. Three flaws are zero-days; Windows Winsock bug CVE-2026-68820 is exploited in the wild by Lazarus Group in job-themed attacks using PDFs with a trojanised reader. CVE-2026-62832, publicly disclosed by researcher Nightmare Eclipse via the LegacyHive PoC, is also patched. Microsoft now lists bugs by product family instead of itemized CVEs, which defenders warn complicates triage.
- Microsoft fixed 419 vulnerabilities including 62 critical; monthly counts surged with AI-assisted discovery (206 in June, 622 in July)
- Three zero-days; CVE-2026-68820 in Windows Winsock is exploited in the wild by Lazarus Group
- CVE-2026-62832 matches the LegacyHive PoC published by pseudonymous researcher Nightmare Eclipse
- Five Eyes and the UK NCSC warned AI is transforming offensive and defensive capabilities and accelerating patch tempo
- Microsoft's clustered summary-table format makes triage harder for defenders
- Vendors
- Microsoft
- Products
- Windows
- Threat actors
- Lazarus Group
- Organizations
- UK National Cyber Security CentreFive Eyes
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-62832 | Local Privilege Escalation via Link Following in Windows User Profile Service | 7.8 | 3% | ||
| CVE-2026-68820 | Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver | 7.0 | 9% | KEV | KEV |
From the original article
2 min read at therecord.media
Microsoft on Tuesday released fixes for 419 security vulnerabilities, one of the largest monthly counts on record and the latest sign that artificial intelligence is dramatically increasing the number of software flaws security teams must contend with.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.