Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days
Reported exploited.NET.NET CoreOur summary
Microsoft has issued its July 2026 Patch Tuesday update, addressing a record-breaking 570 security vulnerabilities across multiple products, including three zero-day flaws—two of which are being actively exploited in attacks. The patched software includes .NET, Office, Windows, Edge, Azure services, Exchange Server, and SQL Server. Among the critical issues is a remotely exploitable flaw in SharePoint Server and an elevation-of-privilege vulnerability in Active Directory Federation Services. Organizations are strongly advised to apply these updates immediately to mitigate potential exploitation risks.
BleepingComputer publishes this story on its own site; we link to it rather than reprint it.
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.