July 2026 Patch Tuesday: Microsoft Patches 622 Vulnerabilities Including Two Exploited Zero-Days

### Executive Summary: This report catalogs dozens of Microsoft vulnerabilities across Windows, Server, Office, SharePoint, Exchange, Azure services and more, including multiple critical remote code execution and elevation-of-privilege flaws (CVSS up to 9.9). It calls out exploited zero-days (e.g., AD FS and SharePoint), a public PoC (LegacyHive for the User Profile Service), CVE details, mitigation recommendations, and Patch Tuesday coverage for impacted systems.