Microsoft Fixes 421 Vulnerabilities and a Zero-Day Exploit in August Patch Tuesday

Microsoft released a massive update with 421 fixes, including a zero-day vulnerability that grants SYSTEM privileges. Users are urged to install the patch immediately.

• Microsoft fixed 421 vulnerabilities in its August Patch Tuesday, most of which affect products like Office, Exchange, and Azure.
• A zero-day vulnerability in the wild allows an attacker to gain system privileges on Windows 11 and Windows 10.
• The update also includes improvements to File Explorer, Windows Hello, and touchpad controls.

A Massive and Urgent Patch

Microsoft released its monthly security update for August's Patch Tuesday this Tuesday. The company fixed a total of 421 vulnerabilities in its software ecosystem.

The number is slightly lower than the 570 flaws fixed in July, but it still demonstrates an aggressive stance against cyber threats. The volume of monthly patches has steadily increased over the past year.

According to the specialized publication ZDNET, the package covers products including Office, Exchange, Azure, and SharePoint, in addition to the Windows operating system. This is not a single-component update.

However, the most relevant piece of information in the bulletin is not the total number, but the presence of a zero-day vulnerability that has already been exploited by malicious actors. This flaw could grant an attacker system privileges on a Windows PC.

For this reason, Microsoft and several security experts urge all users to install the update immediately. They also recommend restarting the computer to complete the process.

The Zero-Day Vulnerability in the Wild

The main flaw fixed in August is technically called "Windows WinSock Auxiliary Function Driver Privilege Escalation Vulnerability." Its name is not as relevant as its destructive potential.

An attacker exploiting this error could gain system privileges on a Windows 11 or Windows 10 PC without the user taking any action. To achieve this, the person would already need to have low-level initial access to the compromised machine.

From that initial intrusion, system privileges would allow the attacker to view or delete files, compromise the device's security, and create user accounts. They could also install malware or enlist the computer in a botnet.

The severity of the vulnerability was highlighted by patch management provider Action1 in a post about the update. The company noted that the main threat is local privilege escalation.

Action1 explained that an attacker with low privileges could exploit the vulnerability to gain SYSTEM privileges. This would give them extensive control over the affected system.

The company also warned that exploitation has already been detected in the wild. Therefore, it recommended prioritizing the deployment of this patch, although Microsoft classified the flaw as Important rather than Critical.

Two Other Known Zero-Day Vulnerabilities

The August package also addresses two other zero-day vulnerabilities that have not yet been exploited. The first is identified as "Windows User Profile Service Privilege Escalation Vulnerability."

This flaw could allow an attacker to gain administrative privileges on a computer that has already been compromised. Although active exploitation has not been observed, its existence was publicly known before this month's update.

Microsoft assesses that exploitation of this vulnerability is "more likely" in the near future. That detail underscores the importance of not delaying the installation of the patch.

The third zero-day vulnerability fixed in August is also related to privilege escalation. However, the original report from ZDNET does not provide additional technical details about this third flaw.

All these vulnerabilities share a common pattern: they allow an attacker to move from limited access to full control of the system. This type of escalation is one of the most commonly used tactics in cyber espionage and ransomware campaigns.

For this reason, security teams often prioritize privilege escalation patches even when they are not classified as critical. The chained exploitation of multiple flaws can be devastating.

The Role of Artificial Intelligence in Flaw Detection

Microsoft has been fixing security vulnerabilities at an accelerated pace in recent months. Part of this progress is due to the use of artificial intelligence tools to identify real flaws in Windows.

The company employs an internal "multi-model agent scanning framework" codenamed MDASH. This AI-driven tool attempts to detect genuine vulnerabilities and reduce the number of false positives.

The MDASH system sends results to Microsoft engineers faster than traditional methods. This allows for a shorter window during which attackers can exploit zero-day vulnerabilities.

The adoption of AI in cybersecurity is not exclusive to Microsoft. Several tech companies have begun using language models and machine learning to enhance threat detection.

However, experts warn that AI can also be used by attackers to discover new flaws. The race between defense and offense has become more complex with these tools.

Still, Microsoft's case shows that automation can increase the productivity of security teams. In August, this effort resulted in 421 patches published in a single day.

Minor Improvements in Windows Features

In addition to security fixes, the Patch Tuesday update includes some usability enhancements. These are not critical but add value for everyday users of the operating system.

In File Explorer, Windows will now show the size of large files in megabytes or gigabytes instead of kilobytes. This simplifies reading for those handling videos or databases.

The behavior of the middle-click in the address bar and on the homepage has also been corrected. Now, middle-clicking on a folder consistently opens a new tab or window.

File thumbnails in the Recommended section should be easier to read after the update. Microsoft did not provide technical details about the change but assured that it improves readability.

Windows Hello now supports external fingerprint readers. This addition will allow desktop PC users to connect a reader and use their fingerprint to log in.

The Voice Access feature introduces "Voice Isolation" to improve speech recognition. The goal is to reduce background noise and the voices of nearby people.

For laptops, there are two new touchpad controls. One adjusts scrolling or zoom speed, and the other enables accelerated scrolling.

How to Update Your System and What to Consider

Patch Tuesday updates are mandatory and should be downloaded and installed automatically on all compatible PCs. However, Microsoft recommends manually verifying that the process has been completed.

For Windows 11 users, the path is Settings > Windows Update and then clicking the Check for updates button. After installation, the computer should be restarted when prompted.

Those still using Windows 10 must enroll in the free Extended Security Updates (ESU) program to continue receiving patches. Otherwise, they will not receive the August fixes.

In that system, the path is Settings > Update & Security > Windows Update. The lack of support for Windows 10 without ESU increases the risk of exposure to vulnerabilities such as the zero-day patched this month.

System administrators in corporate environments should prioritize the deployment of these patches. Action1 recommended treating the WinSock vulnerability as an emergency, even with a Critical classification.

The active exploitation of a privilege escalation vulnerability is often combined with other techniques to compromise entire networks. Therefore, delaying the update increases the risk of serious incidents.