Microsoft smashes Patch Tuesday record for second successive month
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-50656 | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet " | 7.0 | 11% | PoC | |
| CVE-2026-50661 | Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack | 4.6 | <1% | ||
| CVE-2026-55040 | Authentication Bypass in Microsoft SharePoint Server | 9.1 | 70% | KEVPoC ×2 | KEV |
| CVE-2026-56155 | Local Privilege Escalation in Microsoft Active Directory Federation Services | 7.8 | <1% | KEV | KEV |
| CVE-2026-56164 | Missing Authentication in Microsoft SharePoint Server Allows Privilege Escalation | 9.8 | 1% | KEV | KEV |
From the original article
4 min read at therecord.media
Microsoft on Tuesday released fixes for more than 600 security vulnerabilities, making July the largest Patch Tuesday in the program's history and more than triple the size of the previous record set last month . Vulnerability counts have been surging this year, and July’s mammoth release of 622 CVEs is larger than the three previous months combined.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.