patch tuesday

Microsoft’s July 14, 2026 security updates fix CVE-2026-56186, a Windows Secure Channel, or Schannel, information disclosure vulnerability rated 8.1 High. The flaw is an out-of-bounds read in the Windows TLS/SSL implementation and can allow an authorized attacker to disclose information over a...

Microsoft’s July 14 security updates fix CVE-2026-56187, an elevation-of-privilege flaw in the Windows MIDI Service Module affecting current Windows 11 releases. The vulnerability is tracked as Important with a CVSS 3.1 score of 7.0, and Microsoft’s advisory indicates that an authorized local...

Microsoft’s July 14 security release fixes CVE-2026-56183, a high-severity elevation-of-privilege flaw in the Windows MIDI Service Module that affects Windows 11 24H2, 25H2, and 26H1. The practical priority is straightforward: organizations should ensure affected endpoints have reached build...

Microsoft’s July 14, 2026 security updates fix CVE-2026-56182, a Windows NTFS elevation-of-privilege vulnerability that can let a locally authenticated attacker gain higher permissions through an integer-overflow condition in the file system. The flaw is rated Important, with a CVSS 3.1 base...

Microsoft’s July 14, 2026 security updates fix CVE-2026-56175, a High-severity Windows NTFS elevation-of-privilege flaw that can allow a low-privileged local attacker to gain broader control of an affected PC or server. The immediate action is straightforward: deploy the July cumulative update...

Microsoft’s July 2026 Patch Tuesday delivers KB5101650 for Windows 11 versions 25H2 and 24H2, moving supported PCs to builds 26200.8875 and 26100.8875 respectively. Windows 11 23H2 receives KB5099414 and build 22631.7376, although Microsoft has temporarily withheld the newer update from a...

Microsoft patched CVE-2026-55139, an information-disclosure vulnerability affecting supported Microsoft Office editions on Windows and macOS, in its July 14, 2026 security release. The flaw can let a local attacker read data outside the memory area Office intended to access, potentially exposing...

CVE-2026-55053 exposes Microsoft Excel to remote code execution through a heap-based buffer overflow, allowing malicious workbook content to run code with the victim’s permissions. Microsoft released the fix on July 14, 2026, as part of its monthly security updates and rates the vulnerability...

Additional coverage of this story: CVE-2026-56164: Patch Exploited SharePoint Zero-Day Now The coverage adds that CISA has listed the exploited SharePoint flaw in its Known Exploited Vulnerabilities catalog and notes that SharePoint Server 2016 and 2019 reached end of extended support on July...

Microsoft has patched CVE-2026-55038, a Microsoft Word remote code execution vulnerability caused by a stack-based buffer overflow. The flaw carries a CVSS 3.1 score of 7.8 and an Important severity rating, making the July 14, 2026 Office updates the direct fix for affected Windows and Mac...

Microsoft has published updated guidance explaining how monthly Windows servicing now fits together, covering the familiar Patch Tuesday cumulative update, optional preview releases, out-of-band fixes, hotpatching, and gradual Windows 11 feature delivery. The company’s Windows IT Pro Blog says...

Microsoft has patched CVE-2026-55044, a high-severity Microsoft Excel remote code execution vulnerability that can let a malicious workbook run code under the victim’s account. The flaw carries a CVSS 3.1 score of 7.8 and affects Microsoft 365 Apps for enterprise, Excel 2016, Office 2019, Office...

Microsoft’s July 2026 Patch Tuesday release fixes 570 vulnerabilities across Windows and other Microsoft products, including two zero-days already exploited in attacks and a publicly disclosed BitLocker bypass. Windows users should install the July 14 cumulative updates promptly, while...

Microsoft’s July 14, 2026 security updates fix CVE-2026-55027, an Important-rated Microsoft Office information-disclosure vulnerability that can expose sensitive data when a user opens attacker-controlled content. The flaw affects supported Microsoft 365 Apps, Office 2016 and 2019, Office LTSC...

Windows 11 update KB5101650 adds Point-in-Time Restore to versions 24H2 and 25H2, giving compatible PCs a short-term way to roll back the operating system, applications, settings, and local files after a damaging update or configuration change. The July 14, 2026 Patch Tuesday release installs OS...

Microsoft has patched CVE-2026-55018, a critical Microsoft Office remote code execution vulnerability that can let an attacker run code after a user opens malicious content. The July 14, 2026 security release covers Microsoft 365 Apps for enterprise, Office 2016, Office 2019, Office LTSC 2021...

Microsoft has patched CVE-2026-48580, an Important-rated information disclosure vulnerability in Excel that can expose sensitive memory when a user interacts with malicious content. The flaw affects Microsoft 365 Apps, Excel 2016, Office 2019, Office LTSC 2021 and 2024, Office for Mac, and...

Microsoft has patched CVE-2026-54128, a Critical use-after-free vulnerability in the Windows DHCP Client that can lead to arbitrary code execution without attacker privileges or user interaction. The flaw affects Windows 10, Windows 11, and Windows Server releases stretching from Server 2012...

CVE-2026-50692, a high-severity elevation-of-privilege vulnerability in Windows Desktop Window Manager, was fixed in Microsoft’s July 14, 2026 security updates. The flaw affects supported Windows 10, Windows 11, and Windows Server releases, and Microsoft assigns it a CVSS 3.1 score of 8.8 out of...

Microsoft has patched CVE-2026-50690, an Important-rated Windows SMB vulnerability that can let a locally authenticated attacker expose sensitive information. The flaw was addressed in the July 14, 2026 security updates and carries a CVSS 3.1 base score of 5.5. Detailed in Microsoft’s Security...