Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

🗓️ 14 Jul 2026 20:25:00Reported by The Hacker NewsType

Microsoft Patch Tuesday fixes 622 CVEs, including two zero-days exploited for privilege escalation in SharePoint Server and Active Directory Federation Services.

Reporter	Title	Published	Views	Family All 68
GithubExploit	Exploit for Missing Authentication for Critical Function in Microsoft	6 Aug 202613:30	–	githubexploit
GithubExploit	Exploit for CVE-2026-55040	6 Aug 202611:46	–	githubexploit
ATTACKERKB	CVE-2026-56164	14 Jul 202617:05	–	attackerkb
ATTACKERKB	CVE-2026-56155	14 Jul 202617:05	–	attackerkb
Information Security Automation	August "In the Trend of VM" (#30): vulnerabilities in ViPNet Client, the Microsoft Windows kernel, and Microsoft SharePoint	17 Aug 202615:00	–	avleonov
Information Security Automation	About Elevation of Privilege - Microsoft SharePoint (CVE-2026-56164) vulnerability.	7 Aug 202613:00	–	avleonov
Information Security Automation	July Microsoft Patch Tuesday	26 Jul 202620:00	–	avleonov
BDU FSTEC	The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to increase their privileges.	15 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the lack of authentication for a critical function, allowing attackers to escalate their privileges.	15 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in its authentication procedures, which allow attackers to bypass existing security mechanisms.	31 Jul 202600:00	–	bdu_fstec

14 Jul 2026 20:29Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.19.1

EPSS0.22439

SSVC