Windows 11’s August 2026 Patch Tuesday update has been released, addressing a substantial 421 security vulnerabilities. While this update is not as extensive as the previous month’s release, which tackled a record-breaking 570 flaws, Microsoft strongly advises users to implement the update within three days to ensure their systems remain secure.
As part of its regular cadence, Microsoft rolls out Patch Tuesday updates on the second Tuesday of each month for all supported products. The trend of increasingly larger updates has been noted, with Microsoft attributing this growth to the escalating threats posed by artificial intelligence. The August update specifically rectifies at least 37 remote code execution bugs and five elevation-of-privilege vulnerabilities.
Of the 421 bugs addressed in this month’s update, the total number of fixes attributed to the Patch Tuesday release alone is 400. This figure includes patches for other Microsoft products such as Entra, Office, and Teams, which were released earlier in the month.
| Month | Flaws fixed in 2025 | Flaws fixed in 2026 | Year-over-year change |
|---|---|---|---|
| January | 159 | 114 | -28.3% |
| February | 55 | 58 | +5.5% |
| March | 57 | 79 | +38.6% |
| April | 134 | 167 | +24.6% |
| May | 72 | 120 | +66.7% |
| June | 66 | 200 | +203% |
| July | 137 | 570 | +316.1% |
| August | 107 | 400 | +273.8% |
| January–August total | 787 | 1,708 | +117.0% |
This data does not include fixes rolled out in August outside the Patch Tuesday cycle, which is why we have 400 flaws rather than 421. Sourced from Microsoft’s security portal.
How to verify if your Windows 11 installation received the 400+ security fixes
For users of Teams, Office, Edge, and other Microsoft products, the total number of fixes rises to 421. These applications typically update automatically, ensuring users are protected. However, Windows 11 users should confirm that updates haven’t been inadvertently paused and that they are operating on the recommended version. As of August 12, Microsoft suggests running Windows 11 Build 26200.9168 for 25H2 users and 26100.9168 for those on 24H2. This can be verified by navigating to Settings > System > About and checking the build number.
If your build number aligns with or exceeds the 26200.xxxx or 26100.xxxx series, you are up to date. Otherwise, visit Windows Update to ensure updates are enabled and check for the latest updates. The August 2026 Update is identified as KB5121003, and it may require up to two reboots to fully apply due to Secure Boot processes.
How big is the August 2026 Update for Windows 11?
The August 2026 Update encompasses a significant array of fixes, particularly for critical security vulnerabilities across various Windows components. Key areas receiving attention include the kernel, Remote Desktop, DNS, DHCP, SMB, Windows Defender Firewall, Desktop Window Manager, Windows Installer, Kerberos, LDAP, and the networking stack.
Among the critical vulnerabilities addressed are remote code execution flaws in the Remote Desktop Client and Windows DNS Server, as well as multiple elevation-of-privilege vulnerabilities affecting the Windows kernel and Desktop Window Manager. Additional remote code execution vulnerabilities have been patched in the SMBv3 Server, Remote Desktop Services, and core components like Windows LDAP.
Microsoft wants you to stop pausing Windows updates, and they are not wrong
Despite Microsoft’s efforts to enhance security, Windows remains vulnerable due to its legacy components, which can harbor bugs, especially in the context of AI-driven debugging. The company has acknowledged that the surge in vulnerabilities is not exclusive to Windows, as the entire industry grapples with the rapid identification and exploitation of software flaws, often accelerated by AI technologies.
In light of these developments, Microsoft has reiterated the importance of timely updates. Their updated recommendations suggest limiting the deferral period for quality updates to less than three days, with deadlines set to zero or one day and a maximum grace period of two days for updates.
