Microsoft has once again delivered a hefty Patch Tuesday update this August, addressing 400 Common Vulnerabilities and Exposures (CVEs). Among these, a significant zero-day vulnerability has been actively exploited. Last month saw a record 570 CVEs addressed, making this month's update slightly less extensive but still challenging for organizations lacking automated patching systems. The most pressing concern is a use-after-free vulnerability identified as CVE-2026-68820 in the Windows Ancillary Function Driver for WinSock. This flaw allows a locally authenticated attacker with low privileges to escalate their access, potentially gaining full control over a Windows system. Mike Walters, co-founder of Action1, emphasizes the high impact on confidentiality, integrity, and availability, urging organizations to prioritize this patch despite its 'important' rating. Alongside this, two other zero-day vulnerabilities have been disclosed this month, although they have not yet been exploited in the wild. CVE-2026-62832 is an elevation of privilege vulnerability in the Windows User Profile Service. It could allow an attacker with local account credentials to elevate their privileges, potentially accessing sensitive data. Jack Bicer, Action1's director of vulnerability research, advises prompt patch deployment to mitigate risks of data compromise. The third concern is CVE-2026-72971, a tampering vulnerability in the Windows Container Isolation FS Filter Driver. This flaw could enable attackers to access or alter another user's data. Microsoft has highlighted the improper link resolution issue in the product, which could be exploited without user interaction. This month's patch addresses numerous elevation of privilege and remote code execution flaws, 37 of which are critical RCE bugs. With such a wide range of vulnerabilities, organizations are urged to act swiftly to protect their systems.