Microsoft Security Updates 02 August 2026

By /
  • 263/2026
  • Critical

Microsoft has released security updates to address vulnerabilities affecting multiple Microsoft products.

The addressed vulnerabilities could allow the attacker to perform server-side request forgery attacks, obtain sensitive information, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Microsoft Azure Cosmos DB Improper Access Control RCE Vulnerability (CVE-2026-66803):

  • CVSS: 10
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

2. Microsoft Edge Origin Validation Error Information Disclosure Vulnerability (CVE-2026-66318):

  • CVSS: 8.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Obtain Information
Vulnerabilities
Mitigations

Microsoft MSRC

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft MSRC

References

Microsoft MSRC