# Microsoft Releases Its Largest Security Update Ever Patch Tuesday addresses 621 security vulnerabilities. - **Source:** [Security Affairs](https://brifing.si/source/e6c4f5ec-3e1b-4152-a932-056243bd56eb) - **Published:** 2026-07-14 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/383207c8-1989-4faf-a4a6-3b81b6ed4f7e ## The Largest Update in History Microsoft released its largest-ever security update in July 2026 Patch Tuesday. A total of 621 new CVEs (Common Vulnerabilities and Exposures) were addressed, surpassing all previous annual updates in the company's history. ## Critical Flaws and Zero-Day Exploits The update includes 63 critical, 6 moderate, and 1 low-severity vulnerabilities. Two flaws are actively exploited, and one is publicly known. These vulnerabilities affect critical systems like SharePoint, RDP, Hyper-V, and AD FS. ## Affected Products The update covers a wide range of products, including Windows, Office, Azure, .NET, Visual Studio, GitHub Copilot, Defender, and Exchange Server. Unexpectedly, even Minecraft Server and Ages of Empire II are included in the update list. ## Actively Exploited Vulnerabilities CVE-2026-56155 is a privilege escalation flaw in Active Directory Federation Services. CVE-2026-56164 is a similar flaw in SharePoint Server. Both are actively exploited and require immediate patching. ## Highest Severity Flaw CVE-2026-57092 is a critical privilege escalation vulnerability in Microsoft Windows VMSwitch. With a CVSS score of 9.9, this flaw allows an attacker inside a virtual machine to access the host machine. ## Priority Patching Process Microsoft recommends applying these updates as soon as possible. Systems like RDP and DHCP servers exposed to the internet should be patched immediately to prevent exploitation. ## Sources covering this story - https://securityaffairs.com/195347/security/patch-tuesday-security-updates-for-july-2026-the-largest-update-ever-621-cves-in-one-month.html — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._