Security News Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days

[Gandalf_The_Grey]

Content source

https://www.bleepingcomputer.com/news/microsoft/microsoft-july-2026-patch-tuesday-fixes-massive-570-flaws-3-zero-days/

Today is Microsoft's July 2026 Patch Tuesday, and with it comes security updates for a record-breaking 570 flaws, including two zero-day vulnerabilities exploited in attacks and one publicly disclosed.

Patch Tuesday addresses 59 "Critical" vulnerabilities, 48 of which are remote code execution, 9 are elevation of privilege, 1 is a security bypass, and 1 is a spoofing.

The approximate number of bugs in each vulnerability category is listed below:

• 254 Elevation of Privilege Vulnerabilities
• 17 Security Feature Bypass Vulnerabilities
• 145 Remote Code Execution Vulnerabilities
• 102 Information Disclosure Vulnerabilities
• 35 Denial of Service Vulnerabilities
• 16 Spoofing Vulnerabilities

When BleepingComputer reports on Patch Tuesday security updates, we only count those released by Microsoft today.

Therefore, the number of flaws does not include flaws in Mariner, Azure OpenAI, Azure Synapse, M365 Copilot, Microsoft Exchange Online, Microsoft Edge for Android, and Microsoft Entra Provisioning Service that were fixed by Microsoft earlier this month.

There were also a massive 468 Microsoft Edge/Chromium flaws that were fixed by Google this month, which were excluded from this Patch Tuesday roundup. As part of last month's June Patch Tuesday, Google fixed 360 flaws that were later ported to Microsoft Edge.

Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days

Today is Microsoft's July 2026 Patch Tuesday, and with it comes security updates for a record-breaking 570 flaws, including two zero-day vulnerabilities exploited in attacks and one publicly disclosed.

www.bleepingcomputer.com

 

[Gandalf_The_Grey]

ZDI: The July 2026 Security Update Review

Well folks. Here we are. The bug apocalypse has fully descended upon us. I’ll do my best to sort this out in some way meaningful, but this month’s release shows us the nay-sayers were right, and I’ve got to hand it to the nay-sayers here. Excellent call. Take an extended break from your regularly scheduled activities as we let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.

Adobe Patches for July 2026

Adobe has now moved to a bimonthly release schedule, which means they will be releasing patches on the second and fourth Tuesdays of the month. I’ll continue to cover the second Tuesday release here and update this blog should the fourth Tuesday release contain anything significant. I think this is a smart way to break up a monster release into something a bit more manageable. Apple has said they are taking a similar approach. We’ll see if other vendors follow their lead.

For the first part of the July release, Adobe released 12 bulletins addressing 88 unique CVEs in Adobe ColdFusion, Commerce, After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro, and the Content Credentials SDK.

Microsoft Patches for July 2026

Here it is. The Mother of All Releases. To call this record-breaking is an understatement. How to count this mess is anyone’s guess, but I see new Microsoft 621 CVEs for the month of July. Some of these are in online services where no user action is required. They also list about 480 bugs in Chromium and Microsoft Edge (Chromium-based) that I won’t cover here. Here’s how I put this in context. I looked at the last 20 years of Microsoft releases. The CVE count year-to-date exceeds all other years’ totals.

The products covered this month are also astonishing. There are patches for Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Github Copilot, Defender, Exchange Server, Hyper-V, Ages of Empire II, and Minecraft Server (really!). That phrase “Windows components” does some pretty heavy lifting here, too, as just about everything you’ve ever heard of is getting patched. All told, there are 63 rated Critical, six rated Moderate, one rated Low, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program (more on that later). Two CVEs are listed as under active exploit while one other is listed as publicly known.

Looking Ahead

The next Patch Tuesday will be on August 11, just after Hacker Summer Camp in sunny Las Vegas. Should I survive the heat, I’ll be back then to give you my full thoughts on the release – no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!

https://www.zerodayinitiative.com/blog/2026/7/14/the-july-2026-security-update-review

 

[RoboMan]

Is this a preliminary update or a stable one?

 

[Gandalf_The_Grey]

The (hopefully) stable one.

 

[Parkinsond]

easy beezy

 

[Divine_Barakah]

Is this a preliminary update or a stable one?

The (hopefully) stable one.

I have learnt the lesson the hard way. Better safe than sorry. Just wait a couple of days and watch the user reports closely

 

[Divine_Barakah]

easy beezy

View attachment 298808

Please keep us posted if you experience any issues.

 

[Parkinsond]

Please keep us posted if you experience any issues.

I will.

 

[Jonny Quest]

Both laptops updated successfully. There was the initial black screen as it updated, then two restarts (text displayed) then another black screen orb updating, then into the login screen.

 

[Victor M]

570 - maybe their MDASH will patch us all in time.

 

[stonjean633]

Geez, it's been a while(35 days) from last Patch Tuesday until today. Next month is just 28 days.

 

[Sorrento]

No issues so far but I always do a full image before so i could revert if needed, I haven't had to do that with WU for a long time though

 

[Parkinsond]

In an update on its Windows Release Health dashboard, Microsoft has noted that some Dell devices recently began displaying an exclamation mark next to the Intel Innovation Platform Framework Processor Participant driver in Device Manager, indicating a possible issue.

This happened after installing the KB5095093 optional preview update made available on June 23, 2026. For those unaware, this release acts as a precursor to Patch Tuesday, enabling IT admins to preview the bundled enhancements before they become generally available in a couple of weeks. You can read more about Microsoft's Windows Update mechanism here.

PCs which encountered this issue experienced degraded performance, increased temperatures, battery drain, and unexpected shutdowns.

Microsoft claims that Dell reported this issue during internal testing and a subsequent investigation revealed that it was happening due to an incompatibility with an Intel driver and a new Windows USB-C Connection Manager interface made available in KB5095093.

While Microsoft partners with Dell to resolve this issue in a concrete manner, it has decided not to make July 2026's Patch Tuesday (KB5105610) available to affected Dell configurations. This makes sense considering the aforementioned severity of the bug which could drastically hamper workflows.

Microsoft has noted that this incompatibility only affects Windows 11 version 25H2 and 24H2, while server editions and Windows 10 remain unaffected. However, the firm has not shared when it plans to release a fix and it has not revealed any further details about affected configurations either.

https://www.neowin.net/news/microsoft-blocks-patch-tuesday-update-for-some-dell-pcs-due-to-performance-issues/

 

[Minimalist]

I installed update without noticeable issues. During installation process system was restarted three times.

Update also created new, larger Recovery partition so Macrium created new full system image instead of incremental one. Initial 771 MB partition was replaced by new 845 MB.

I like new pause update option, where you can set date using calendar. Now you can also prolong pause period without having to resume updates in the process.

 

[Captain Holly]

I updated today, no problems with it, the only difference is I have a different build number 26200.8875. My laptop only restarted one time.

C.H.

 

[Minimalist]

It seems that pause update option is rolling out slowly as I was today reverted to old way of doing it (without calendar).

I also noticed that my C drive free space is shrinking. After analyzing it with Wiztree I found out that since update new files are created in System Volume Information folder.
If this continues to happen I will have to restore system image taken before the update.



An update: it seems that some of those files are created when VSS is used to create volume shadow copies of drive.

EDIT 2: OK I guess I found the source of the problem. After partitions were modified, old Macrium definition file identified wrong partitions. It looks like it caused problem to VSS which did not delete shadow copies after backup. After recreating Macrium's definition file all is back to normal.

 

[Zero Knowledge]

• 254 Elevation of Privilege Vulnerabilities
• 17 Security Feature Bypass Vulnerabilities
• 145 Remote Code Execution Vulnerabilities
• 102 Information Disclosure Vulnerabilities
• 35 Denial of Service Vulnerabilities
• 16 Spoofing Vulnerabilities

LOL. yeah A.I. is garbage when used in the wrong hands. I think this proves it's pretty good.145 RCE LOL Goodbye bug hunting.

 

[Sorrento]

I deleted my recovery partition many moons ago

 

[Parkinsond]

I deleted my recovery partition many moons ago

View attachment 298852

Me too; useless; I reinstall from usb.

 

[Minimalist]

I figured out what was causing system drive free space shrinking - it was new "Point-in-time restore" function that was creating system snapshots. Luckily it can be disabled.