Microsoft security advisory – August 2026 monthly rollup (AV26-804) – Update 3

Serial Number: AV26-804Date: August 11, 2026Updated: September 24, 2026 As of August 11, 2026, Microsoft is affected by vulnerabilities in the following products: Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft Dynamics 365 Business Central 2024 Microsoft Dynamics 365 Business Central 2026 Microsoft Dynamics 365 Business Central Release Wave 1 2025 Microsoft Dynamics 365 Business Central Release Wave 2 2025 Microsoft Exchange Server Subscription Edition RTM Microsoft Planetary Computer Pro (GeoCatalog) Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition Microsoft Visual Studio Code CoPilot Chat Extension The Cyber Centre encourages users and administrators to review the web link provided, perform the suggested mitigations, and apply the necessary updates. On August 18, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-33824 and CVE-2026-55040 to their Known Exploited Vulnerabilities (KEV) Database. Open-source reporting indicates that CVE-2026-63520 related to Microsoft SharePoint Server is being exploited in the wild. Open-sourc...