August 11, 2026-KB5120708 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 25H2 and Microsoft server operating system 24H2

None None...

August 11, 2026—KB5120238 (OS Build 17763.9121)

None None...

Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an unauthorized attacker to execute code with a physical attack...

Windows DWM Core Library Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Microsoft Windows Search Component Information Disclosure Vulnerability

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

Microsoft Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Powerpoint Information Disclosure Vulnerability

Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PowerShell Elevation of Privilege Vulnerability

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

.NET Elevation of Privilege Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

RPC Runtime Library Remote Code Execution Vulnerability

Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network...

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

Microsoft Office Word Remote Code Execution Vulnerability

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally...

.NET Elevation of Privilege Vulnerability

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Windows Autopilot Elevation of Privilege Vulnerability

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

Microsoft Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally...

Microsoft Office Word Remote Code Execution Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally...