Critical Windows licensing bugs – plus two others under attack – top Patch Tuesday

July Patch Tuesday addresses more than 130 Microsoft CVEs and additional flaws from Adobe, SAP, Fortinet, Citrix and Android. The bulletin highlights two Microsoft vulnerabilities confirmed under active exploitation (a Hyper-V elevation-of-privilege CVE-2024-38080 and an MSHTML platform spoofing CVE-2024-38112), multiple critical remote code execution issues including three 9.8-rated RDS licensing RCEs, and other high-severity bugs across widely deployed products; organizations are advised to prioritize testing and deployment of updates and to reduce internet exposure of vulnerable services.