July 2026 Patch Tuesday: Microsoft Patches 622 Vulnerabilities Including Two Exploited Zero-Days

This advisory catalogues a large set of Microsoft vulnerabilities (many rated Critical with CVSS up to 9.9) across products including Windows, Office, SharePoint, DHCP, Exchange, Hyper-V, Azure services and more; it notes attack types (RCE, EoP, security feature bypass), indicates which issues are exploited in the wild or publicly disclosed, and provides mitigation/patch guidance for affected customers.