Microsoft Patch Tuesday – July 2026

Microsoft's July 2026 Patch Tuesday addresses 621 vulnerabilities, including two actively exploited zero‑days impacting on‑premises SharePoint Server (missing authentication check enabling privilege elevation) and Active Directory Federation Services (access control weakness enabling privilege escalation from low‑privileged accounts), plus a publicly disclosed BitLocker bypass that can allow attackers with physical access to read encrypted drives; organizations are advised to prioritize patching SharePoint and AD FS deployments immediately.