Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days

Microsoft has issued its July 2026 Patch Tuesday update, addressing a record-breaking 570 security vulnerabilities across multiple products, including three zero-day flaws—two of which are being actively exploited in attacks. The patched software includes .NET, Office, Windows, Edge, Azure services, Exchange Server, and SQL Server. Among the critical issues is a remotely exploitable flaw in SharePoint Server and an elevation-of-privilege vulnerability in Active Directory Federation Services. Organizations are strongly advised to apply these updates immediately to mitigate potential exploitation risks.