Support NeoGAF

[winjer]

Microsoft Ships Record July Patch Tuesday with 570 Security Fixes and Three Zero-Days

Microsoft has released its July 2026 Patch Tuesday security updates for Windows 10 and Windows 11, setting a new company record by addressing 570 documented vulnerabilities in a single monthly release.

The update significantly surpasses June's already record-setting release and reflects Microsoft's growing use of AI-assisted vulnerability discovery to identify weaknesses across the Windows ecosystem before they can be exploited. Among the vulnerabilities addressed are three zero-day flaws, two of which were actively exploited before patches became available. The affected components include Active Directory Federation Services (CVE-2026-56155), SharePoint Server (CVE-2026-56164), and Windows BitLocker (CVE-2026-50661). The Active Directory Federation Services and SharePoint vulnerabilities have already been observed in real-world attacks, making them high-priority updates for enterprise administrators. The overall breakdown illustrates the scale of this month's security release. Microsoft corrected 254 elevation-of-privilege vulnerabilities, 145 remote code execution flaws, 102 information disclosure vulnerabilities, 35 denial-of-service vulnerabilities, 17 security feature bypass issues, and 16 spoofing vulnerabilities. A total of 59 vulnerabilities are classified as Critical, many of which involve remote code execution.

Microsoft attributes part of the increase in discovered vulnerabilities to its expanding use of AI-powered analysis during internal security reviews. Rather than indicating Windows has suddenly become less secure, the larger number reflects improved detection capabilities capable of identifying more flaws before malicious actors discover them. The company has stated that AI is expected to play an even larger role in future security development.

The cumulative update also includes several Windows 11 improvements outside security. New features include Point-in-Time Restore, allowing users to restore applications, settings, files, and system state to an earlier point, additional Widget customization options, refinements to the Magnifier accessibility feature, and improved Bluetooth compatibility for selected devices.

For enterprise environments, this month's update presents a familiar challenge. While administrators typically validate large cumulative updates before broad deployment to avoid compatibility issues, the presence of two actively exploited zero-days substantially raises the urgency of patching internet-facing infrastructure and authentication services. Home users are encouraged to install the cumulative update through Windows Update as soon as it becomes available.

Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days

Today is Microsoft's July 2026 Patch Tuesday, and with it comes security updates for a record-breaking 570 flaws, including two zero-day vulnerabilities exploited in attacks and one publicly disclosed.

www.bleepingcomputer.com

• 254 Elevation of Privilege Vulnerabilities
• 17 Security Feature Bypass Vulnerabilities
• 145 Remote Code Execution Vulnerabilities
• 102 Information Disclosure Vulnerabilities
• 35 Denial of Service Vulnerabilities
• 16 Spoofing Vulnerabilities

To learn more about the non-security updates released today, you can review our dedicated articles on the Windows 11 KB5101650 & KB5099414 cumulative updates and the Windows 10 KB5099539 extended security update.

 

[SoloCamo]

Now how much are these fixes going to break?

 

[Puscifer]

This is bad how? Windows 11 deserves it but how is it bad that Microsoft is upping its security game to the point that most endpoint solutions are useless.

 

[winjer]

This is bad how? Windows 11 deserves it but how is it bad that Microsoft is upping its security game to the point that most endpoint solutions are useless.

This is for Windows 10 and 11.
It's great that MS is finally fixing these exploits. So go to your settings and click update.
These are only security patches. Not features.

 

[Magic Carpet]

I downloaded that new hardware monitor yesterday due to that Nvidia hotspot temp reading thingamajig thread.
I hope I got the real program from a real site. Those download pages have become a mess of DOWNLOAD buttons that lead to who knows what.

 

[winjer]

I downloaded that new hardware monitor yesterday due to that Nvidia hotspot temp reading thingamajig thread.
I hope I got the real program from a real site. Those download pages have become a mess of DOWNLOAD buttons that lead to who knows what.

Use this, when you are not sure about a file.

VirusTotal

VirusTotal

www.virustotal.com

 

[bender]

Now how much are these fixes going to break?

571