Microsoft released its largest Patch Tuesday on record in July 2026, fixing 622 vulnerabilities including three zero-days. Two zero-days—CVE-2026-56155 in Active Directory Federation Services and CVE-2026-56164 in SharePoint Server—are actively exploited in attacks and allow privilege escalation. A third zero-day, CVE-2026-50661 (BitLocker bypass), was publicly disclosed but not exploited. The patch batch also includes 59 critical vulnerabilities and addresses infrastructure flaws in identity and collaboration systems.
- Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zer(opens in a new tab)
- Microsoft Patches Record 622 Flaws, Including Two Zero-Days Unde(opens in a new tab)
- Microsoft Patches Active Directory Flaw That Could Let Attackers(opens in a new tab)
- Microsoft Patches Record 622 Vulnerabilities, Including Two Expl(opens in a new tab)
- Microsoft Patch Tuesday for July 2026 — Snort rules and prominen(opens in a new tab)
- Microsoft rolls out massive Windows 11 security update with 416 (opens in a new tab)
// Get alerts for Microsoft Azure