Microsoft's August update fixes a Windows flaw that's already being attacked

PCWorld reports that Microsoft's August update patches a significant number of security vulnerabilities, including one Windows Winsock flaw already being actively exploited by attackers in the wild. The update covers critical risks across Windows, Office, Exchange Server, and cloud services, with some flaws allowing remote code execution or full account takeover without user interaction. Users are strongly advised to install these updates immediately to protect their systems from potential exploitation. As part of August's Patch Tuesday, Microsoft released security updates that address 398 new vulnerabilities. Alongside Windows and Office, other products and services are also affected: Teams, Exchange Server, Hyper-V, Windows Defender, Visual Studio, and Microsoft's cloud services. Microsoft classifies 42 of the vulnerabilities as critical. Among the remainder, all but one are classified as high risk. One Windows flaw is already being exploited in the wild, while two vulnerabilities were already publicly known beforehand. The next scheduled Patch Tuesday will be on September 8th, 2026.