Microsoft Releases Its Largest Security Update Ever
Patch Tuesday addresses 621 security vulnerabilities.
1The Largest Update in History
Microsoft released its largest-ever security update in July 2026 Patch Tuesday. A total of 621 new CVEs (Common Vulnerabilities and Exposures) were addressed, surpassing all previous annual updates in the company's history.
2Critical Flaws and Zero-Day Exploits
The update includes 63 critical, 6 moderate, and 1 low-severity vulnerabilities. Two flaws are actively exploited, and one is publicly known. These vulnerabilities affect critical systems like SharePoint, RDP, Hyper-V, and AD FS.
3Affected Products
The update covers a wide range of products, including Windows, Office, Azure, .NET, Visual Studio, GitHub Copilot, Defender, and Exchange Server. Unexpectedly, even Minecraft Server and Ages of Empire II are included in the update list.
4Actively Exploited Vulnerabilities
CVE-2026-56155 is a privilege escalation flaw in Active Directory Federation Services. CVE-2026-56164 is a similar flaw in SharePoint Server. Both are actively exploited and require immediate patching.
5Highest Severity Flaw
CVE-2026-57092 is a critical privilege escalation vulnerability in Microsoft Windows VMSwitch. With a CVSS score of 9.9, this flaw allows an attacker inside a virtual machine to access the host machine.
6Priority Patching Process
Microsoft recommends applying these updates as soon as possible. Systems like RDP and DHCP servers exposed to the internet should be patched immediately to prevent exploitation.
Original article: Security Affairs — Microsoft, Tarihinin En Büyük Güvenlik Güncellemesini Yayımladı