PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs

crowdstrike.com | vulnerability | #zero-day | #vulnerability-management | #microsoft | #windows | #crowdstrike | #patch-tuesday | #exploited
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CrowdStrike analyzes Microsoft's August 2026 Patch Tuesday: 415 vulnerabilities fixed, including one exploited zero-day in the Windows Ancillary Function Driver for WinSock and 62 critical flaws.
Published
Collected

Related coverage

blog · crowdstrike.com
October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
Microsoft has released security updates for 1,413 vulnerabilities, including one exploited zero-day, two publicly disclosed zero-days, and 75 critical, in its October 2026 Patch Tuesday rollout.
blog · crowdstrike.com
September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs
CrowdStrike on Microsoft's record September 2026 Patch Tuesday: 972 CVEs, double August, two exploited zero-days, 113 Criticals and 12 zero-click Office bugs; plus a Defender PoC, ShieldCrash.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
blog · wiz.io
Supply Chain Zero Days: Closing the Gap Between Publication and Detection
Attackers use compromised npm packages to spread malware in minutes. Discover how Wiz detects malicious packages at publication using AI and dynamic analysis.
tool · github.com
LogonStealer: Windows Credential Provider DLL for Stealing Plaintext Passwords via CredProvDataModel Hooks
Demonstrates an effective post-exploitation technique targeting the modern Windows 11 WinRT logon architecture to harvest plaintext credentials while bypassing PPL.
blog · projectzero.google
Project Zero Patch Tuesday roundup, November 2014
A Google Project Zero roundup of the November 2014 Patch Tuesday advisories covering bugs reported by the team.
Back