CRITICALZero Day
Global

August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day

·Source: SecurityWeek

Updated:

Executive Summary

A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges. The post August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day appeared first on SecurityWeek .

Analysis

A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges. The post August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day appeared first on SecurityWeek .
Source Attribution

Originally published by SecurityWeek on Aug 11, 2026.

Related Threats

MEDIUMZero Day

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to access that was already there and defenses that assumed nobody would look too closely. So, nothing magical. Just a

The Hacker News
CRITICALZero Day

Microsoft working on Defender patch for ShieldBreak zero-day

Microsoft is working on a security patch for the "ShieldBreak" zero-day vulnerability disclosed last week by security researcher "Nightmare Eclipse" and now tracked as CVE-2026-69414. [...]

CVE-2026-69414
BleepingComputer
CRITICALZero Day

Microsoft Faces Fresh Nightmare Eclipse Zero-Day

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/shield-breaks-microsoft-faces-fresh-nightmare-eclipse-zero-day-image_small-10-a-32573.jpg" align=right hspace=4><b>Attack Manipulates Defender Cloud Hydration to Install an Attacker DLL</b><br>Security researchers reproduced ShieldBreak, a claimed Windows Defender zero-day that manipulates cloud hydration and privileged Windows pr

Bank Info Security