Microsoft patches 570 security flaws in record‑breaking July update

Microsoft patches 570 security flaws in a single July release, nearly triple the count from last month’s Patch Tuesday, the company said.

Microsoft patches 570 security flaws – what’s new

Of the ↑ 570 bugs, ↑ 60 earned a critical severity rating, allowing remote takeover with minimal user interaction. The update also patches three zero‑day flaws, two of which are already weaponised in the wild.

One zero‑day, CVE‑2026‑56155, targets Active Directory Federation Services; another, CVE‑2026‑56164, affects SharePoint and can elevate privileges. A third, CVE‑2026‑50661, bypasses BitLocker security, potentially exposing encrypted data on devices with physical access.

Pavan Davuluri, Microsoft EVP, noted, “The pace of vulnerability discovery is changing with advances in AI making it possible to find more issues, faster, across more code.”

Security researchers highlighted CVE‑2026‑48561, a remote‑code‑execution flaw in Microsoft Copilot that could be triggered by a malicious website serving crafted prompts to Edge for Android.

Analysts warn that AI‑driven discovery accelerates both patching and exploit creation, challenging Microsoft’s exploitability index. Reuters and Bloomberg have reported similar trends across the industry.

Enterprises are advised to back up data before deploying the massive update and consider a brief delay to monitor early‑stage stability issues.

Correction: An earlier dispatch misstated the date of the zero‑day disclosure.

Dispatch from Kaelen Frost (Lead Cybersecurity Analyst).