# Microsoft breaks record with 622 Patch Tuesday updates Security patches address 622 vulnerabilities, 58 rated critical. - **Source:** [www.theregister.com - Articles](https://brifing.si/source/2c34ea50-d341-4a10-925d-12c012a9ad10) - **Published:** 2026-07-14 - **Original article:** - **On Brifing:** https://brifing.si/s/3affe04c-ee54-4505-93f0-3ff8aa604981 ## Record-breaking update Microsoft patched 622 vulnerabilities in this month's Patch Tuesday updates, more than tripling last month's record. 428 Chromium vulnerabilities affecting Edge aren't included in this count. 58 flaws are critical, with two actively exploited. ## Actively exploited vulnerabilities Microsoft fixed two actively exploited flaws: an elevation of privilege in Active Directory Federation Services (CVSS 7.8) and an authentication bypass in SharePoint (CVSS 5.3). Both require some access but demand immediate patching. ## Notable critical vulnerabilities Copilot has a CVSS 9.6 remote code execution flaw where even low-privileged Hyper-V users can run malicious code. Microsoft Exchange has a CVSS 9.6 spoofing vulnerability allowing JavaScript execution via crafted emails. ## Office application risks 16 remote code execution flaws were found in Microsoft Office, all scoring around CVSS 7.8. Issues include heap-based buffer overflows and use-after-free vulnerabilities. Users are advised to install updates immediately. ## Adobe's security patches Adobe released patches for 64 vulnerabilities. ColdFusion's CVSS 9.9 path traversal flaw enables arbitrary code execution. Commerce suite has a CVSS 9.6 privilege escalation vulnerability from unsafe file uploads. ## The new normal in cybersecurity The volume of vulnerabilities suggests AI-assisted bug hunting may be at play. While Microsoft didn't confirm AI's role, such patch volumes exceed human capacity alone. Security teams must prioritize these critical updates. ## Sources covering this story - https://www.theregister.com/security/2026/07/14/patchpocalypse-now-microsoft-tops-last-months-record-with-622-patch-tuesday-cves/5271434 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._