Serial Number: AV26-804
Date: August 11, 2026
Updated:September 25, 2026
As of August 11, 2026, Microsoft is affected by vulnerabilities in the following products:
- .NET 10.0 installed on Linux
- .NET 10.0 installed on Mac OS
- .NET 10.0 installed on Windows
- .NET 8.0 installed on Linux
- .NET 8.0 installed on Mac OS
- .NET 8.0 installed on Windows
- .NET 9.0 installed on Linux
- .NET 9.0 installed on Mac OS
- .NET 9.0 installed on Windows
- App Installer
- Application Insights Profiler
- Azure Active Directory
- Azure Confidential Ledger
- Azure CycleCloud
- Azure Kubernetes Service
- Azure Logic Apps
- Azure Monitor Agent Linux Extension
- Azure SQL Database
- Azure SQL Managed Instance
- Azure SRE Agent
- Azure Service Bus
- Azure Storage Explorer
- Microsoft .NET Framework 3.5
- Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
- Microsoft .NET Framework 3.5 AND 4.7.2
- Microsoft .NET Framework 3.5 AND 4.8
- Microsoft .NET Framework 3.5 AND 4.8.1
- Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
- Microsoft .NET Framework 4.8
- Microsoft .NET Framework 4.8.1
- Microsoft 365 Admin Center
- Microsoft 365 Apps for Enterprise
- Microsoft Access 2016
- Microsoft Defender for Endpoint for Mac
- Microsoft Dynamics 365 (on-premises)
- Microsoft Dynamics 365 Business Central 2024
- Microsoft Dynamics 365 Business Central 2026
- Microsoft Dynamics 365 Business Central Release Wave 1 2025
- Microsoft Dynamics 365 Business Central Release Wave 2 2025
- Microsoft Entra Connect
- Microsoft Entra ID
- Microsoft Entra Provisioning Service
- Microsoft Excel 2016
- Microsoft Exchange Server 2016
- Microsoft Exchange Server 2019
- Microsoft Exchange Server Subscription Edition RTM
- Microsoft Office 2016
- Microsoft Office 2019
- Microsoft Office 365 for Mac
- Microsoft Office LTSC 2021
- Microsoft Office LTSC 2024
- Microsoft Office LTSC for Mac 2021
- Microsoft Office LTSC for Mac 2024
- Microsoft Outlook 2016
- Microsoft Planetary Computer Pro (GeoCatalog)
- Microsoft Power Apps
- Microsoft PowerPoint 2016
- Microsoft Purview eDiscovery
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Online
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
- Microsoft Teams
- Microsoft Teams for Android
- Microsoft Teams for iOS
- Microsoft Visual Studio 2022
- Microsoft Visual Studio 2026
- Microsoft Visual Studio Code CoPilot Chat Extension
- Microsoft Word 2016
- OneDrive for MacOS
- Power BI Report Server
- PowerShell 7.4
- PowerShell 7.5
- PowerShell 7.6
- Python extension for Visual Studio Code
- Visual Studio Code
- Windows 10
- Windows 11
- Windows App Client for Windows Desktop
- Windows Server 2012
- Windows Server 2012 R2
- Windows Server 2016
- Windows Server 2019
- Windows Server 2022
- Windows Server 2025
The Cyber Centre encourages users and administrators to review the web link provided, perform the suggested mitigations, and apply the necessary updates.
Update 1
On August 18, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-33824 and CVE-2026-55040 to their Known Exploited Vulnerabilities (KEV) Database.
Update 2
Open-source reporting indicates that CVE-2026-63520 related to Microsoft SharePoint Server is being exploited in the wild.
Update 3
Open-source reporting indicates that CVE-2026-65660 related to Microsoft SharePoint Server is being exploited in the wild.
Update 4
On September 25, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-65660 to their Known Exploited Vulnerabilities (KEV) Database.