Windows users should install Microsoft’s August 2026 security updates promptly. CISA added a Windows vulnerability identified as CVE-2026-68820 to its Known Exploited Vulnerabilities catalog on August 11 after evidence of active exploitation.
The practical response: Update Windows promptly, restart the computer, verify the update completed, and keep endpoint protection enabled. The official sources do not report a Salem County-specific campaign.
What happened?
The issue affects the Windows Ancillary Function Driver for WinSock. Microsoft says a locally authenticated attacker could run a specially crafted application and, if exploitation succeeds, gain SYSTEM-level privileges—the highest level of control on a Windows computer.
Microsoft rates the vulnerability Important with a CVSS 3.1 base score of 7.0 and says exploitation has been detected. CISA added it to the federal Known Exploited Vulnerabilities catalog on August 11, 2026.
This does not mean every Windows computer is infected, and the official sources do not identify a Salem County or South Jersey campaign. It does mean the update deserves priority because exploitation has been observed in the real world.
Which Windows systems are affected?
Microsoft’s August 2026 security data lists current Windows 11 releases—including versions 23H2, 24H2, 25H2, and 26H1—as affected on supported platforms. It also lists several Windows 10 and Windows Server releases.
You do not need to match technical build numbers against a third-party list. Use Windows Update or your organization’s approved management system to install the security update offered for the device. Computers running unsupported Windows versions may need separate lifecycle guidance.
What home users and remote workers should do
- Open Settings and select Windows Update.
- Select Check for updates.
- Install the August 2026 cumulative security update offered for the computer.
- Restart when prompted.
- Return to Windows Update after the restart and confirm that no additional security update is pending.
Use Windows Update only. Do not install a “manual patch” offered through an email, pop-up, social-media advertisement, unexpected message, or unfamiliar website. Scammers often borrow urgent security language to push malicious downloads.
What small businesses should check
- Confirm that the August Windows security updates are approved and deploying through the normal management platform.
- Identify remote, offline, unmanaged, or restart-pending computers that could otherwise be missed.
- Prioritize remotely accessed, shared, privileged, and administrator workstations while completing deployment across the fleet.
- Keep endpoint detection and antivirus protection enabled and investigate unexpected administrator activity or unfamiliar local applications.
- Maintain tested, independent backups. CISA currently lists known ransomware use for this vulnerability as unknown, but recovery readiness remains important.
What the update does—and does not do
The security update closes the vulnerability. It does not prove that a device was attacked, and it does not remove malware that may already be present.
If a computer shows unexpected administrator activity, endpoint-security alerts, disabled protection, unfamiliar applications, or other signs of compromise, disconnect it from networks without erasing evidence. Preserve alerts and timestamps and seek qualified incident-response help before returning the device to normal use.
What remains uncertain
- CISA and Microsoft confirm exploitation, but the reviewed sources do not say how widespread it is.
- No Salem County-specific targeting has been identified in the reviewed official sources.
- CISA marks known ransomware use as unknown.
- This is a local privilege-escalation vulnerability. It generally helps an attacker who already has authenticated local access or code execution; it is not described as a one-click remote takeover of an otherwise untouched computer.
Primary sources
Reviewed August 12, 2026. Guidance may change as vendors publish additional information. No specific targeting of Salem County has been identified in the reviewed official sources.
Need help checking a Windows computer?
Leon’s Computer Shop provides owner-led Windows support and practical cybersecurity guidance for Salem County homes and small businesses. Describe the computer and what you are seeing—but never send passwords, verification codes, recovery keys, or sensitive client information through the contact form.