Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month
ID: 757e766b-8a98-5de8-a5ab-ac687db1c5b8
STIX ID: report--757e766b-8a98-5de8-a5ab-ac687db1c5b8
Feed Name: Security Affairs
Threat Score
**Microsoft July 2026 Patch Tuesday:** Microsoft released fixes for a record 621 CVEs, including two actively exploited vulnerabilities (an AD FS elevation-of-privilege and a SharePoint unauthenticated elevation), multiple critical unauthenticated RCEs (SharePoint, RDP, DHCP, Exchange/OWA stored XSS treated as RCE), and a high-risk Hyper-V VMSwitch VM escape (CVE-2026-57092, CVSS 9.9); organizations are urged to prioritize immediate patching of exposed and internet-facing services.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.