Microsoft has begun rolling out its August security update , a patch packed with important fixes and some noticeable changes for everyday use. As is customary on Patch Tuesday, the company has released cumulative updates for Windows 11 and Windows 10, but this time the focus is on a zero-day vulnerability that was already being exploited by attackers. Users should install the update as soon as possible to avoid risks.
Specifically, the KB5121003 and KB5120240 packages cover Windows 11 versions 24H2 and 25H2, while Windows 10 receives KB5120249. All of these include security fixes that affect not only the operating system but also products such as Office, SharePoint, Azure, .NET, and Visual Studio Code. In total, more than 400 vulnerabilities have been patched, making this one of the most extensive security bulletins of the year.
A critical vulnerability that has already been exploited requires an immediate update.
The most concerning detail in the bulletin is the existence of a privilege escalation vulnerability in the WinSock helper driver, identified as CVE-2026-68820. This flaw allows an attacker with local access to gain system privileges and take control of the computer . Although exploiting it is not straightforward and requires several conditions, Microsoft has confirmed that attempts to exploit it have already been detected, making the patch installation urgent.
The vulnerability affects Windows 10 versions 1607 through 22H2, Windows 11 versions 23H2 through 26H1, and Windows Server versions 2012 through 2025. Although the CVSS score is 7,0 (high severity), the fact that it has already been exploited in the wild leads experts to recommend treating it as an emergency. It cannot be attacked remotely, but if a cybercriminal gains initial access, they could control application permissions in Windows 11 and quickly escalate privileges.
In addition to this flaw, two other zero-day vulnerabilities have been patched. These vulnerabilities had not been exploited, but their combined effect increases the risk. The company is also continuing to work on renewing Secure Boot certificates, a process that began in June and is being rolled out gradually to more devices.
File Explorer, Windows Hello, and Voice Access are improved with this update
Beyond security, the patch introduces changes you'll notice in everyday use. File Explorer now displays the size of each file in the most appropriate unit, whether KB, MB, or GB, making it easier to compare file sizes without mental calculations. The ability to open a folder in a new tab by middle-clicking from the address bar or the home page has also been added.
Another key new feature is the expansion of Windows Hello with Enhanced Secure Sign-In (ESS). Previously, this feature only worked with built-in fingerprint sensors, but the update now also supports external readers. This allows for hardware-isolated biometric authentication on desktop computers and other PCs without a built-in sensor, including Copilot+ PCs. Setup is done through Settings, Accounts, and Sign-in options.
Voice Access now includes Voice Isolation, a feature that filters out other voices and background noise for better command recognition. This improvement is especially useful in noisy or shared environments. Korean language support has also been added, expanding the list of available languages. The precision touchpads have also received tweaks: scrolling and zoom speeds are now configurable, with an optional toggle for accelerated scrolling.
How to install the patches and key dates to keep in mind
Installation is performed automatically through Windows Update. Simply go to Settings, Update & Security, and click Check for updates. For IT administrators, standalone packages can be downloaded from the Microsoft Update Catalog, allowing for centralized deployment in corporate environments. Microsoft recommends restarting your computer after installation to complete the process.
One date worth marking on your calendar is October 13, 2026, when Windows 11 24H2 Home and Pro editions will stop receiving security updates. Those who haven't yet migrated to 25H2 have a short window to do so. Meanwhile, Windows 10 users must be enrolled in the Extended Security Updates (ESU) program to continue receiving patches, as mainstream support ended some time ago.
Experts insist that keeping your system updated is the best defense against cyber threats. Each patch not only fixes security flaws but also closes vulnerabilities that hackers exploit to steal data or hijack computers. In this case, the existence of an already exploited vulnerability makes the update especially critical.
In short, August's Patch Tuesday brings an essential security package for all Windows users. The fix for the zero-day vulnerability, along with improvements to features like File Explorer and Windows Hello, make it well worth installing the update as soon as possible. Don't forget to restart your computer for all the changes to take effect.
