Microsoft’s July 2026 Patch Tuesday Addresses 569 CVEs (CVE-2026-56155, CVE-2026-56164)

Microsoft’s July 2026 Patch Tuesday is the largest on record, addressing 569 CVEs across a broad set of Microsoft products and components (56 critical, 510 important, 3 moderate). The release includes three zero-days — two of which were exploited in the wild — and multiple high-impact issues such as an unauthenticated RCE in Dynamics NAV (CVSS 9.8), AD FS and SharePoint elevation-of-privilege flaws, numerous DHCP RCEs, and multiple Windows Kernel EoP vulnerabilities; Tenable recommends timely patching and scanning to mitigate risk.