Microsoft Drops Record-Breaking Patch Tuesday with 421 Vulnerabilities

Microsoft's August Patch Tuesday has revealed an astonishing 421 vulnerabilities, including 236 in Windows. Although lower than last month's record-breaking total, this is still one of the largest Patch Tuesday counts ever.

This month's volume is not a return to pre-2026 levels, and Microsoft acknowledges exploitation in the wild for one vulnerability. Two others have been publicly disclosed, although one was omitted from the Security Update Guide's Notable CVEs section.

One notable patch addresses a high-severity remote code execution in Microsoft SharePoint, discovered by Rapid7 Senior Principal Security Researcher Stephen Fewer and published today with Microsoft's coordination.