Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Summary: Microsoft's July 2026 security update covers 622 vulnerabilities, 57 of them rated critical, and Microsoft reports that two disclosed this month were exploited in the wild. The exploited pair are CVE-2026-56155, an important-severity elevation of privilege in Active Directory Federation Services caused by insufficient access control granularity, and CVE-2026-56164, a moderate-severity SharePoint Server missing-authentication flaw allowing network spoofing.
What's compelling: Of the 57 critical entries, 48 are remote code execution and 11 of those are rated more likely to be exploited, spanning the Windows DHCP Server, SharePoint, Office, SQL Server and the Print Spooler - so the patch list reaches servers and productivity apps most estates run by default.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-48564 CVE-2026-49796 CVE-2026-50314 CVE-2026-50327 CVE-2026-50370 CVE-2026-50380 CVE-2026-50382 CVE-2026-50467 CVE-2026-50474 CVE-2026-50518 CVE-2026-50522 CVE-2026-50655 CVE-2026-54122 CVE-2026-54128 CVE-2026-54992 CVE-2026-55010 CVE-2026-55018 CVE-2026-55022 CVE-2026-55033 CVE-2026-55043 CVE-2026-55045 CVE-2026-55049 CVE-2026-55056 CVE-2026-55120 CVE-2026-55123 CVE-2026-55127 CVE-2026-55129 CVE-2026-55132 CVE-2026-55140 CVE-2026-55944 CVE-2026-56155 CVE-2026-56159 CVE-2026-56164 CVE-2026-56188 CVE-2026-56189 CVE-2026-57087 CVE-2026-57090 CVE-2026-57094 CVE-2026-58542 CVE-2026-58644
Related: ⚡ Weekly Recap: Word Press RCE, Sonic Wall 0-Days, AI Service Attacks, Share Point 0-Day and More Cyber Risks ·
Critical Share Point RCE CVE-2026-50522 Under Active Exploitation After Public PoC Cyber Risks ·
Attackers Exploit Share Point Authentication Bypass After Public PoC Release Cyber Risks ·