Security Alert: Microsoft Releases August 2026 Security Updates
Actively exploited. At least one CVE in this advisory is listed in the CISA Known Exploited Vulnerabilities catalog — exploitation has been observed in the wild. Treat remediation as urgent.
JPCERT-AT-2026-0022
JPCERT/CC
2026-08-12
I. Overview
Microsoft has released August 2026 Security Updates to address the vulnerabilities in their products. Attackers leveraging these vulnerabilities may be able to execute arbitrary code remotely without authentication or elevate privileges locally after authentication, etc.
Microsoft Corporation
August 2026 Security Updates
https://msrc.microsoft.com/update-guide/en-US/releaseNote/2026-Aug
According to Microsoft, among the vulnerabilities, the following vulnerability has been confirmed to be exploited in the wild. Please refer to the latest information provided by Microsoft and implement the measures described in "II. Solution."
CVE-2026-68820
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-68820
II. Solution
Please apply the security update programs through Microsoft Update, Windows Update, etc.
Microsoft Update Catalog
https://www.catalog.update.microsoft.com/
Windows Update: FAQ
https://support.microsoft.com/en-us/help/12373/windows-update-faq
III. References
Microsoft Corporation
Release Notes
https://msrc.microsoft.com/update-guide/
If you have any information regarding this alert, please contact JPCERT/CC.
JPCERT Coordination Center (Cyber Security Coordination Group)
MAIL: ew-info@jpcert.or.jp
https://www.jpcert.or.jp/english/
CSIRTS triage
- What
- Elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock.
- Who is affected
- Windows users running affected versions.
- Urgency
- Critical; CVE-2026-68820 is actively exploited in the wild.
- Action
- Apply Microsoft August 2026 Security Updates.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Windows Ancillary Function Driver for WinSock
Get an email when a new Windows Ancillary Function Driver for WinSock advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.jpcert.or.jp/english/at/2026/at260022.html
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Exploitation confirmedCVE-2026-68820Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 26% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-68820 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownexploitedMicrosoft Monthly Security Update (August 2026)hkcert
- unknownexploitedMultiple vulnerabilities in Microsoft Windows (August 12, 2026)cert-fr-avis
- unknownexploitedNCSC-2026-0284 [1.00] [M/H] Vulnerabilities patched in Microsoft Windowsncsc-nl
- highexploitedCVE-2026-68820: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker …nvd
- highexploitedCISA Adds Three Known Exploited Vulnerabilities to Catalogcisa
- highexploitedCVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerabilitymsrc
- criticalexploitedCVE-2026-68820: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerabilitycisa-kev
More from JPCERT/CC Security Alerts
- unknownSecurity Alert: [Updated] Microsoft Releases July 2026 Security Updates2026-07-31
- unknownSecurity Alert: Microsoft Releases June 2026 Security Updates2026-06-10
- unknownSecurity Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)2026-06-10
- unknownSecurity Alert: [Updated] Alert Regarding Multiple Vulnerabilities in Trend Micro Products Including TrendAI A…2026-05-22
- unknownSecurity Alert: Microsoft Releases May 2026 Security Updates2026-05-13