Microsoft and Adobe Patch Tuesday, July 2026 Security Update Review | Qualys

Summary: Microsoft's July 2026 Patch Tuesday addresses 570 vulnerabilities, including 57 critical and 510 important-severity issues, plus three zero-days of which two were exploited in attacks and one was publicly disclosed. The release also covers 468 Microsoft Edge/Chromium vulnerabilities, 360 of them Chrome CNA-issued upstream Chromium fixes, and Adobe separately released 12 advisories covering 89 vulnerabilities, 63 rated critical.
Why it matters: CISA added multiple flaws from this release to its Known Exploited Vulnerabilities Catalog with patch deadlines as early as July 17, 2026, including a SharePoint missing-authentication flaw and a BitLocker protection-mechanism failure - so the calendar, not the severity rating, is what sets your exposure window.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026