Quote:Microsoft has released the July 2026 Patch Tuesday security updates, addressing a record 570 vulnerabilities. This includes two zero-day exploits used in attacks and one zero-day vulnerability that has been publicly disclosed.

The update fixes 59 vulnerabilities rated as Critical. These include 48 issues related to remote code execution, nine privileges elevation flaws, one security bypass, and one spoofing vulnerability. Users are advised to install the update promptly through Windows Update.

Microsoft has linked the increase in patched vulnerabilities to an AI-powered vulnerability discovery system that has identified more security flaws across the Windows codebase.

Vulnerability Breakdown and Three Zero-Days Fixed

The 570 vulnerabilities are categorized as follows:

• 254 are Elevation of Privilege issues,
  
• 145 are Remote Code Execution problems,
  
• 102 involve Information Disclosure, 35 are related to Denial of Service,
  
• 17 are Security Feature Bypass vulnerabilities, and
  
• 16 pertain to Spoofing.
  

This count does not include individual fixes for Mariner, Azure OpenAI, Azure Synapse, M365 Copilot, Microsoft Exchange Online, Microsoft Edge for Android, and Microsoft Entra Provisioning Service, which were addressed earlier this month.

It also excludes 468 flaws in Microsoft Edge and Chromium that were fixed by Google and later ported to Edge.

Continue Reading...