Microsoft released its August 2026 Patch Tuesday security updates on Tuesday, addressing 398 newly disclosed vulnerabilities across its software ecosystem. The monthly bulletin is headlined by two critical flaws: an actively exploited zero-day and a wormable DNS vulnerability that enables unauthenticated remote code execution.
The zero-day vulnerability is currently being exploited in the wild, according to Microsoft’s security advisory. The company has not yet published technical specifics regarding the attack vector, the affected component, or threat actor attribution, leaving administrators to monitor official channels for forthcoming indicators of compromise.
The second high-priority patch addresses a wormable DNS flaw. Because the vulnerability can be triggered without authentication, it presents a significant risk of automatic lateral movement across unpatched corporate networks. Microsoft has classified the issue as critical and flagged it for rapid deployment to prevent potential exploitation.
This month’s security updates span a broad range of Microsoft products, including Windows, Office, Azure, Exchange Server, SharePoint, Teams, .NET, and GitHub Copilot. The inclusion of GitHub Copilot extends Microsoft’s monthly security coverage to encompass cloud-native and AI-assisted development tools alongside traditional enterprise software.
Administrators are advised to review the official security guidance and prioritise testing and deployment of the critical patches. Microsoft typically releases detailed technical advisories and remediation guidance in the days following the Patch Tuesday release.
Microsoft 於週二推出2026年8月Patch Tuesday安全更新，修復其軟件生態系統內398個新披露的漏洞。是次月度安全公告的重點為兩個嚴重缺陷：一個正遭利用的零日漏洞，以及一個容許未經認證進行遠程代碼執行的可蠕蟲傳播DNS漏洞。
根據Microsoft的安全公告，該零日漏洞目前正遭外界利用。該公司尚未公布有關攻擊途徑、受影響組件或威脅行為者歸屬的技術細節，系統管理員需密切留意官方渠道，以獲取即將發布的入侵指標。
第二項高優先級修補程式則針對一個可蠕蟲傳播的DNS缺陷。由於該漏洞可在未經認證的情況下觸發，對未修補的企業網絡構成嚴重的自動橫向移動風險。Microsoft已將此問題列為「嚴重」級別，並建議盡快部署相關更新，以防漏洞遭利用。
是次安全更新涵蓋多款Microsoft產品，包括Windows、Office、Azure、Exchange Server、SharePoint、Teams、.NET及GitHub Copilot。將GitHub Copilot納入修補範圍，標誌Microsoft的月度安全覆蓋範圍已擴展至雲端原生及AI輔助開發工具，與傳統企業軟件看齊。
建議系統管理員審閱官方安全指引，並優先測試及部署相關嚴重漏洞的修補程式。Microsoft通常會在Patch Tuesday發布後的數日內，公布詳細的技術公告及修復指引。