August 11, 2026—KB5120233 (OS Build 26100.33296)

None None...

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

Use after free in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

Windows Event Logging Service Information Disclosure Vulnerability

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

Windows Display Enhancement Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

Windows Installer Elevation of Privilege Vulnerability

Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally...

Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...

August 11, 2026—KB5120386 (Monthly Rollup)

None None...

Windows DWM Core Library Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Windows Autopilot Elevation of Privilege Vulnerability

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

Windows DWM Core Library Information Disclosure Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...

Windows Telephony Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

Windows Message Queuing Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse

CVE-2026-6726 is a Spoofing vulnerability in the TPM 2.0 reference implementation involving improper object-slot reuse. MITRE assigned this CVE on behalf of the Trusted Computing Group. This document incorporates updates to Microsoft Windows that address this vulnerability. Please see CVE-2026-67...