September 2026 Patch Tuesday forecast: High patch volumes may continue
Summary
August 2026 Patch Tuesday resolved 398 CVEs. The article highlights selected vulnerabilities and patching challenges, then forecasts continued high patch volumes and urges timely updates and layered network defenses.
Key points
- Microsoft resolved 398 CVEs in August 2026 Patch Tuesday: 42 Critical, 355 Important, and one Moderate.
- The article says one vulnerability was confirmed actively exploited and two were publicly disclosed before patches.
- It says SharePoint CVE-2026-55040 and CVE-2026-63520 have been chained for authentication bypass and remote code execution; fixes were released in July and August, respectively.
- Exchange Server CVE-2026-62911 is an elevation-of-privilege flaw rated CVSS 8.0; the article says it could let attackers take over user mailboxes.
- The article identifies Microsoft Defender’s publicly disclosed ShieldBreak flaw, CVE-2026-69414, as having proof-of-concept exploit code; Microsoft was working on a fix.
- The article recommends methodically deploying updates and using network controls to reduce exposure while patching is underway.
- It forecasts that high patch volumes may continue in September and notes Chrome CVE-2026-85046 was reported by Google as exploited in the wild.
Article Details
- Event Type
- Monthly security update and patch forecast covering August 2026 Patch Tuesday and expected September releases.
- Impact
- August 2026 Patch Tuesday resolved 398 CVEs. The article reports active exploitation of SharePoint vulnerabilities CVE-2026-55040 and CVE-2026-63520 in a chain enabling authentication bypass and remote code execution, and reports that Chrome CVE-2026-85046 was exploited in the wild. It also highlights publicly disclosed Microsoft Defender vulnerability CVE-2026-69414, for which PoC exploit code is available, and Exchange Server CVE-2026-62911, which could enable mailbox takeover. Delayed patching leaves affected systems exposed; the article recommends timely patching and network controls as interim risk reduction.
CVE
CVE-2026-55040#SharePointCVE-2026-62911#SharePointCVE-2026-63520#SharePointCVE-2026-65801CVE-2026-65816 and CVE-2026-69555 both in Azure Arc, and CVE-2026-65801 in Exchange Server Online were all rated Critical and carried a CVSS of 10.0.CVE-2026-65816CVE-2026-65816 and CVE-2026-69555 both in Azure Arc, and CVE-2026-65801 in Exchange Server Online were all rated Critical and carried a CVSS of 10.0.CVE-2026-69414#SharePointCVE-2026-69555CVE-2026-65816 and CVE-2026-69555 both in Azure Arc, and CVE-2026-65801 in Exchange Server Online were all rated Critical and carried a CVSS of 10.0.CVE-2026-85046#SharePoint
People
Vendors
GoogleBe aware that this week’s update – 152.0.7977.82/.83 addressed 12 CVEs and Google reported CVE-2026-85046 is exploited in the wild.MicrosoftSharePoint, Exchange Server, Azure Arc, Microsoft Defender, and Chrome all featured high-risk issues, including actively exploited and publicly disclosed flaws that demand fast patching and layered network defenses.
Products
Azure ArcSharePoint, Exchange Server, Azure Arc, Microsoft Defender, and Chrome all featured high-risk issues, including actively exploited and publicly disclosed flaws that demand fast patching and layered network defenses.Google ChromeSharePoint, Exchange Server, Azure Arc, Microsoft Defender, and Chrome all featured high-risk issues, including actively exploited and publicly disclosed flaws that demand fast patching and layered network defenses.Microsoft Defender Antimalware PlatformSharePoint, Exchange Server, Azure Arc, Microsoft Defender, and Chrome all featured high-risk issues, including actively exploited and publicly disclosed flaws that demand fast patching and layered network defenses.Microsoft Exchange ServerSharePoint, Exchange Server, Azure Arc, Microsoft Defender, and Chrome all featured high-risk issues, including actively exploited and publicly disclosed flaws that demand fast patching and layered network defenses.Microsoft SharePointSharePoint, Exchange Server, Azure Arc, Microsoft Defender, and Chrome all featured high-risk issues, including actively exploited and publicly disclosed flaws that demand fast patching and layered network defenses.