Product
August 2026 Microsoft Security Update Analysis
1 TTP 5 CVEsMicrosoft's August 2026 security release addresses 415 vulnerabilities, including a zero-day (CVE-2026-68820) exploited in the wild that enables local privilege escalation in the Windows Ancillary Function Driver for WinSock.
CVE-2026-40369 - Windows Kernel Untrusted Pointer Dereference Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-40369 is an untrusted pointer dereference vulnerability in the Windows Kernel that allows a locally authorized attacker to escalate privileges.
CVE-2026-35420 - Windows Kernel Heap-Based Buffer Overflow Local Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-35420 is a heap-based buffer overflow vulnerability in the Windows Kernel that allows an authorized local attacker to elevate privileges.
CVE-2026-33841 Heap-Based Buffer Overflow in Windows Kernel Allows Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-33841 is a heap-based buffer overflow vulnerability in the Windows Kernel that allows a locally authorized attacker to elevate privileges.
Untrusted Driver Loaded by Windows Kernel
3 rules 1 TTP 4 IOCsAn untrusted driver loaded by the Windows kernel may indicate an attempt to bypass code signing policies and execute unsigned or self-signed kernel code, potentially leading to defense evasion.