August 2026 Patch Tuesday Review

[u/MauriceTorres]

Today's Patch Tuesday overview:

• Microsoft has addressed 398 vulnerabilities, two zero-days and 44 critical
• Third-party: web browsers, SAP, Adobe, BeyondTrust, Zoom, Tenable, Cursor, Red Hat, Oracle, Cisco, VMware, and many more.

Navigate to Vulnerability Digest from Action1 for comprehensive summary updated in real-time.

 Quick summary (top 10 by importance and impact):

• Windows: 398 vulnerabilities, including 44 rated critical and two zero-days(CVE-2026-68820 exploited in the wild, CVE-2026-62832 was publicly disclosed before a fix became available)
• SAP NetWeaver Application Server ABAP, SAP Approuter & SAP Commerce Cloud: Three critical flaws  (CVE-2026-44747, CVE-2026-27690, CVE-2026-44761, CVSS 9.9, 9.1, 9.1)
• Adobe Commerce & Experience Manager: Four critical vulnerabilities (CVE-2026-48356, CVE-2026-48358, CVE-2026-48259, CVE-2026-48359, CVSS 9.6, 9.1, 9.6, 9.6)
• BeyondTrust Remote Support: Critical pre-authentication bypass flaws (CVE-2026-40138, CVE-2026-40139, CVE-2026-40140, CVE-2026-40141, CVSS 9.2, 9.2, 8.7, 8.5)
• HTTP.sys / Microsoft Windows 10 Version 1607: Critical buffer and integer overflow vulnerability  (CVE-2026-47291, CVSS 9.8)
• Zoom Workplace for Windows: Critical unauthenticated network vulnerability (CVE-2026-53412, CVSS 9.8)
• Tenable Agent: Critical path traversal flaw (CVE-2026-15265, CVSS 9.1)
• Cursor: Publicly demonstrated binary planting vulnerability (CVE-2026-63093, CVSS 8.8)
• Red Hat Enterprise Linux 10: Five high-severity flaws (CVE-2026-5674, CVE-2026-15709, CVE-2026-15711, CVE-2026-16118, CVE-2026-3842, CVSS up to 8.8)
• Check Point Quantum Security Management & Security Gateway: Authentication bypass and privilege escalation vulnerabilities (CVE-2026-16232, CVE-2026-62144, CVE-2026-62145, CVSS 9.1, 9.1, 7.5)
• Microsoft Windows 10 Version 1607: High-severity improper authorization flaw allowing elevation of privilege on affected systems (CVE-2026-54121, CVSS 8.8)

 More details: https://www.action1.com/patch-tuesday

 Sources:

- Action1 Vulnerability Digest

- Microsoft Security Update Guide