Skip to content

Patch Tuesday July 2026

Microsoft’s July 2026 security update release: 663 CVEs, 3 exploited in the wild, 78 rated critical. Severity, CVSS and affected product families from the MSRC Security Update Guide.

← June 2026 August 2026 What's new in July 2026 MSRC release notes
663CVEs, Microsoft CNA
3Exploited in the wild
78Critical
1Publicly disclosed

Exploited in the wild

Patch these first
CVEVulnerabilitySeverityCVSSImpact
CVE-2026-58644Microsoft SharePoint Remote Code Execution Vulnerability

SharePoint

Critical9.8Remote Code Execution
CVE-2026-56155Active Directory Federation Services Elevation of Privilege Vulnerability

Windows

Important7.8Elevation of Privilege
CVE-2026-56164Microsoft SharePoint Server Elevation of Privilege Vulnerability

SharePoint

Moderate5.3Elevation of Privilege

Publicly disclosed

Details known before the fix
CVEVulnerabilitySeverityCVSSImpact
CVE-2026-50661Windows BitLocker Security Feature Bypass Vulnerability

Windows

Important6.1Security Feature Bypass

Critical

Highest CVSS first
CVEVulnerabilitySeverityCVSSImpact
CVE-2026-66803Azure Cosmos DB Remote Code Execution Vulnerability

Azure

Critical10Remote Code Execution
CVE-2026-56163Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-56191Microsoft Exchange Online Tampering VulnerabilityCritical10Tampering
CVE-2026-57106Data Quality Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-58275Azure DNS Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-58630Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-62825Azure Key Vault Elevation of Privilege Vulnerability

Azure

Critical10Elevation of Privilege
CVE-2026-50517Microsoft M365 Copilot Remote Code Execution VulnerabilityCritical9.9Remote Code Execution
CVE-2026-54120Microsoft Surface Remote Code Execution VulnerabilityCritical9.9Remote Code Execution
CVE-2026-57092Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

Windows

Critical9.9Elevation of Privilege
CVE-2026-45499Azure OpenAI Elevation of Privilege Vulnerability

Azure

Critical9.9Elevation of Privilege
CVE-2026-57100Microsoft Entra Provisioning Service Elevation of Privilege VulnerabilityCritical9.9Elevation of Privilege
CVE-2026-56165Microsoft Account Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-50518Windows DHCP Server Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-50522Microsoft SharePoint Remote Code Execution Vulnerability

SharePoint

Critical9.8Remote Code Execution
CVE-2026-54117Microsoft SQL Server Remote Code Execution Vulnerability

SQL Server

Critical9.8Remote Code Execution
CVE-2026-54118Microsoft SQL Server Remote Code Execution Vulnerability

SQL Server

Critical9.8Remote Code Execution
CVE-2026-55010Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-55944Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

Dynamics 365

Critical9.8Remote Code Execution
CVE-2026-56159DHCP Server Service Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-56188Windows Server Network driver Remote Code Execution Vulnerability

Windows

Critical9.8Remote Code Execution
CVE-2026-50380Windows GDI+ Remote Code Execution Vulnerability

Windows

Critical9.6Remote Code Execution
CVE-2026-55008Microsoft Exchange Server Spoofing Vulnerability

Exchange Server

Critical9.6Spoofing
CVE-2026-62835Azure Portal Information Disclosure Vulnerability

Azure

Critical9.3Information Disclosure
CVE-2026-41106Microsoft 365 Copilot Elevation of Privilege VulnerabilityCritical9.3Elevation of Privilege
CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass Vulnerability

SharePoint

Critical9.1Security Feature Bypass
CVE-2026-48564DHCP Server Service Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-50370DHCP Server Service Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-50382DirectX Graphics Kernel Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-50444Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

Windows

Critical8.8Elevation of Privilege
CVE-2026-50474Remote Desktop Client Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-54121Active Directory Certificate Services Elevation of Privilege Vulnerability

Windows

Critical8.8Elevation of Privilege
CVE-2026-54982Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-54999Windows TCP/IP Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-57087Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-57090Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-57094Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-58608Windows Print Spooler Remote Code Execution Vulnerability

Windows

Critical8.8Remote Code Execution
CVE-2026-54998Microsoft Exchange Online Elevation of Privilege VulnerabilityCritical8.8Elevation of Privilege
CVE-2026-56167Azure AI Search Elevation of Privilege Vulnerability

Azure

Critical8.5Elevation of Privilege
CVE-2026-50301Microsoft Office Remote Code Execution Vulnerability

Office

Critical8.4Remote Code Execution
CVE-2026-54128Windows DHCP Client Remote Code Execution Vulnerability

Windows

Critical8.4Remote Code Execution
CVE-2026-54992Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

Windows

Critical8.4Remote Code Execution
CVE-2026-55045Microsoft Office Remote Code Execution Vulnerability

Office

Critical8.4Remote Code Execution
CVE-2026-50680Windows Hyper-V Elevation of Privilege Vulnerability

Windows

Critical8.2Elevation of Privilege
CVE-2026-49164Windows Active Directory Domain Services Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-50694Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-54995Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Windows

Critical8.1Remote Code Execution
CVE-2026-35425Azure API Management (APIM) Remote Code Execution Vulnerability

Azure

Critical8Remote Code Execution
CVE-2026-42982Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows

Critical7.8Elevation of Privilege
CVE-2026-49796Windows GDI+ Remote Code Execution Vulnerability

Windows

Critical7.8Remote Code Execution
CVE-2026-50314Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-50327Windows Media Remote Code Execution Vulnerability

Windows

Critical7.8Remote Code Execution
CVE-2026-50467Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-50655Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows

Critical7.8Remote Code Execution
CVE-2026-55011Microsoft Defender Remote Code Execution VulnerabilityCritical7.8Remote Code Execution
CVE-2026-55012Microsoft Defender Remote Code Execution VulnerabilityCritical7.8Remote Code Execution
CVE-2026-55018Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-55022Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-55033Microsoft Word Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-55043Microsoft PowerPoint Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-55049Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-55056Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-55120Microsoft PowerPoint Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-55123Microsoft PowerPoint Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-55127Microsoft Word Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-55129Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-55132Microsoft Word Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-55140Microsoft Office Remote Code Execution Vulnerability

Office

Critical7.8Remote Code Execution
CVE-2026-56189Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows

Critical7.8Remote Code Execution
CVE-2026-58542Windows Media Remote Code Execution Vulnerability

Windows

Critical7.8Remote Code Execution
CVE-2026-54127Windows Hyper-V Elevation of Privilege Vulnerability

Windows

Critical7.4Elevation of Privilege
CVE-2026-50392Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows

Critical7Elevation of Privilege
CVE-2026-49159Microsoft Graph Information Disclosure VulnerabilityCritical6.5Information Disclosure
CVE-2026-26145Microsoft Azure Synapse Elevation of Privilege Vulnerability

Azure

Critical4.8Elevation of Privilege
CVE-2026-56160Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability

Azure

Critical—Elevation of Privilege
CVE-2026-48561Microsoft Edge Copilot Remote Code Execution Vulnerability

Edge

Critical—Remote Code Execution

By impact

Denial of Service35
Elevation of Privilege264
Information Disclosure118
Remote Code Execution175
Security Feature Bypass21
Spoofing36
Tampering14

By product family

.NET15
Azure15
Defender3
Dynamics 3651
Edge67
Exchange Server4
Office78
Other24
SQL Server7
SharePoint18
Windows431

Counts include CVEs where Microsoft is the assigning CNA. Third-party CVEs (for example Chromium in Edge) are excluded. Severity, CVSS and exploitation status are Microsoft's published values. See the full advisory list to search every CVE.

Type to search every update, post, CVE and roadmap item.

Try