July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days

🗓️ 15 Jul 2026 12:21:11Reported by Malwarebytes blogType

malwarebytes

malwarebytes🔗 www.malwarebytes.com👁 11 Views

July 2026 Patch Tuesday fixes 622 CVEs, including three zero days and 59 critical flaws.

Reporter	Title	Published	Views	Family All 64
ATTACKERKB	CVE-2026-56164	14 Jul 202617:05	–	attackerkb
ATTACKERKB	CVE-2026-56155	14 Jul 202617:05	–	attackerkb
Information Security Automation	July Microsoft Patch Tuesday	26 Jul 202620:00	–	avleonov
BDU FSTEC	The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to increase their privileges.	15 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the lack of authentication for a critical function, allowing attackers to escalate their privileges.	15 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BitLocker component of the Windows operating system, which allows a hacker to circumvent existing security restrictions	15 Jul 202600:00	–	bdu_fstec
Circl	CVE-2026-50661	14 Jul 202619:01	–	circl
Circl	CVE-2026-56155	14 Jul 202618:00	–	circl
Circl	CVE-2026-56164	14 Jul 202618:00	–	circl
CISA KEV Catalog	Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability	14 Jul 202600:00	–	cisa_kev

15 Jul 2026 12:21Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.8 - 9.8

EPSS0.22439

SSVC

July 2026 Patch Tuesday Microsoft vulnerabilities three zero days two exploited fifty nine flaws