microsoft patch tuesday

Microsoft’s July 14 Patch Day is not simply a large Windows update. It is a triage event spanning enterprise identity and collaboration services, Windows endpoint components, Minecraft Bedrock Dedicated Server, Age of Empires II, Lenovo BIOS firmware, and Supermicro baseboard management...

Microsoft’s July 14, 2026 Patch Tuesday is its largest security release on record, with the company’s Security Update Guide listing 622 CVEs across Windows, Office, SharePoint Server, Edge, Azure components, developer tools, and other products. That is more than triple June’s already unusual...

Microsoft has fixed CVE-2026-50684, a cross-site scripting vulnerability in Active Directory Federation Services that can let an authenticated attacker spoof content presented through an AD FS web flow. The flaw carries a CVSS 3.1 score of 4.8, placing it in the Medium severity band, but its...

Microsoft has patched CVE-2026-50461, a heap-based buffer overflow in Windows NTFS that can lead to remote code execution when a user interacts with malicious content. The flaw carries a CVSS 3.1 score of 7.8 and affects supported Windows 10, Windows 11, and Windows Server releases, including...

Microsoft’s July 14, 2026 security updates fix CVE-2026-50387, a high-severity Windows Graphics Device Interface vulnerability that could let a locally authenticated attacker elevate privileges. The flaw affects supported Windows 10, Windows 11, and Windows Server releases, making July’s...

Additional coverage of this story: CVE-2026-56164 SharePoint Exploit: Patch July 14 Now It emphasizes that exploited SharePoint flaw CVE-2026-56164 has only a 5.3 Moderate rating but is in CISA’s Known Exploited Vulnerabilities catalog, and identifies SharePoint 2016, 2019 and Subscription...

CVE-2026-50463 is a remotely reachable Windows Kernel information-disclosure flaw that can expose sensitive memory without authentication or user interaction. Microsoft addressed the vulnerability in its July 14, 2026 security updates, and administrators should prioritize supported Windows...

CVE-2026-50356 is a newly patched Microsoft Windows App Store race-condition vulnerability that can let a locally authenticated attacker elevate privileges, potentially gaining broad control over an affected PC or server. Microsoft addressed the flaw in its July 14, 2026 security updates, making...

Microsoft has patched CVE-2026-48564, a critical remote code execution vulnerability in the Windows DHCP Server service that could let a low-privileged attacker run code across a network. The flaw carries a CVSS 3.1 score of 8.8 and affects supported Windows Server releases from Windows Server...

Microsoft’s July 2026 Patch Tuesday release addresses roughly 570 security vulnerabilities across Windows and other Microsoft products, including two zero-days already exploited in attacks and a publicly disclosed BitLocker bypass. Windows 11 users should prioritize KB5101650 or KB5099414, while...

CVE-2026-26153 is a Windows Encrypted File System (EFS) elevation-of-privilege vulnerability that Microsoft rates as Important, with a CVSS base score of 7.8 and no indication in the public advisory that it is being actively exploited or requires user interaction. The disclosure places it...