Weekly briefing

Week 33 · 10 Aug – 16 Aug 2026 UTC · assess the changes, then plan the next dates.

What to assess first

10 Aug – 16 Aug · dates to 15 Sep Check coverage

Act on3

11Aug
Security11 Aug 2026
Microsoft 365 Apps / SharePoint · 29 security records
CVE-2026-65660
Related evidence (6)
- Microsoft Office SharePoint Spoofing Vulnerability
  Public source · Shared KB KB5002893
- Microsoft SharePoint Server Spoofing Vulnerability
  Public source · Shared KB KB5002893
- Microsoft SharePoint Server Elevation of Privilege Vulnerability
  Public source · Shared KB KB5002893
- Microsoft SharePoint Server Spoofing Vulnerability
  Public source · Shared KB KB5002893
- Microsoft SharePoint Server Information Disclosure Vulnerability
  Public source · Shared KB KB5002893
- Microsoft SharePoint Server Spoofing Vulnerability
  Public source · Shared KB KB5002893
11Aug
Security11 Aug 2026
Windows / Windows Server · 209 security records
CVE-2026-68820
Related evidence (6)
- Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
  Public source · Shared KB KB5120228
- Windows Active Directory Domain Services Remote Code Execution Vulnerability
  Public source · Shared KB KB5120228
- Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
  Public source · Shared KB KB5120228
- Remote Procedure Call Denial of Service Vulnerability
  Public source · Shared KB KB5120228
- Windows Imaging Component Remote Code Execution Vulnerability
  Public source · Shared KB KB5120228
- Windows Narrator Braille Elevation of Privilege Vulnerability
  Public source · Shared KB KB5120228
11Aug
Exploited11 Aug 2026
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
CVE-2026-20349

Coming up8

17Aug
Model retirementDue 17 Aug 2026
Google Gemini: imagen-4.0-generate-001, imagen-4.0-ultra-generate-001 and imagen-4.0-fast-generate-001
20Aug
Message Center action dateDue 20 Aug 2026
MC1443510: Microsoft 365: One-time cleanup of aged pending requests in All AgentsMicrosoft 365 Message Center Archive by Merill Fernando
21Aug
CISA KEV deadlineDue 21 Aug 2026
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
CVE-2026-33824
Same day: CISA KEV deadline: Microsoft SharePoint Weak Authentication Vulnerability
25Aug
CISA KEV deadlineDue 25 Aug 2026
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
CVE-2026-68820
29Aug
CISA KEV deadlineDue 29 Aug 2026
Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2019-1068
31Aug
RetirementDue 31 Aug 2026
Retirement: 2 products
Azure AI Document Intelligence (formerly known as Azure Form Recognizer) v2.0 API; Azure document Intelligence v2.1 Container
Same day: Model retirement: Google Gemini: gemini-robotics-er-1.6-preview; Recorded guidance date: Power Platform deprecations
1Sep
Message Center action dateDue 1 Sep 2026
MC1387814: (Updated) Microsoft Teams: RTMP-In port and domain changes requiredMicrosoft 365 Message Center Archive by Merill Fernando
Same day: Message Center action date: MC1411577: Microsoft Defender: Automated investigation and response (AIR) integrated into antivirus with manual triggering removed; Message Center action date: MC1448373: Teams device management begins transitioning from Teams admin center to Teams Rooms Pro management portal
8Sep
Patch TuesdayScheduled for 8 Sep 2026
Patch Tuesday, 8 September 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

Changed1

14Aug
Security14 Aug 2026
Microsoft Defender Elevation of Privilege Vulnerability
CVE-2026-69414

How this list is chosen

Changes from 10 Aug 2026 – 16 Aug 2026 UTC and dates due up to 15 Sep 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.