Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

On July 14, 2026, Microsoft issued its monthly security update, addressing 622 vulnerabilities across multiple products, with 57 classified as 'critical.' Among these, two have already been exploited in the wild. The most notable include CVE-2026-56155, an elevation of privilege flaw in Active Directory Federation Services (AD FS), and CVE-2026-56164, a spoofing vulnerability in SharePoint Server. The update covers a wide range of services and applications, such as Windows DHCP Server, Microsoft Office, and Minecraft Bedrock Dedicated Server. Cisco Talos has also published new Snort rules to detect exploitation attempts.