SecurityWeekIonut Arghire
Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days
On July Patch Tuesday, Microsoft announced patches for a record 622 vulnerabilities, including two zero-day exploits in Active Directory (CVE-2026-56155) and SharePoint Server (CVE-2026-56164). Both flaws allow privilege escalation, with the AD flaw affecting Federation Services and the SharePoint flaw being exploitable without authentication. Additionally, a critical BitLocker bypass flaw (CVE-2026-50661) was highlighted. Windows and Office received fixes for 416 and 164 vulnerabilities, respectively.
Key issues also mentioned include critical flaws in Windows VMSwitch (CVSS 9.9) and multiple RCE vulnerabilities across various services. These updates push the year's total CVE count significantly higher, attributed to accelerated vulnerability discovery processes driven by AI, as confirmed by Microsoft executives. Adobe also released patches for 88 vulnerabilities on the same day.
AI summary of the original article from SecurityWeek, written automatically by a language model. Quotes, figures and names come from that article; check it before relying on a detail. Read the original · How summaries are made
Story timeline CVE-2026-56155
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 14 Jul · 19:01 UTC | SecurityWeek | Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days (this article) |
| Tue 14 Jul · 20:10 UTC | thezdi.com | Microsoft releases record 621 patches as Adobe updates key apps |
| Tue 14 Jul · 20:14 UTC | CISA | CISA warns ADFS flaw allows local privilege escalation |
| Tue 14 Jul · 22:31 UTC | Dark Reading | Records Are Made to Be Broken: Patch Tuesday Raises Triage Stakes |
| Wed 15 Jul · 00:50 UTC | SecurityOnline | Microsoft patches 570 flaws, two zero days actively exploited |
| Wed 15 Jul · 12:41 UTC | Malwarebytes | Microsoft patches 622 flaws, fixes three critical zero day bugs |
| Wed 15 Jul · 19:20 UTC | SecurityOnline | Microsoft, SonicWall bugs found; RabbitMQ patches auth flaws |