July 2026 Patch Tuesday
Microsoft's July 2026 security release came out on Tuesday, July 14, 2026. Below: the updates for each Windows version, the holes that were already under attack, and the rest of the release.
Microsoft data read Last revised by Microsoft Oct 8, 2026
Windows 11 and Windows 10
| Update | Applies to | Build after update | CVEs |
|---|---|---|---|
| KB5101649Security Update | Windows 11 Version 26H1 | 28000.2525 | 382 |
| KB5101650Security Update | Windows 11 Version 24H2, Windows 11 Version 25H2 | 26100.8875, 26200.8875 | 379 |
| KB5099539Security Update | Windows 10 Version 21H2, Windows 10 Version 22H2 | 19044.7548, 19045.7548 | 313 |
| KB5099538Security Update | Windows 10 Version 1809, Windows Server 2019 | 17763.9020 | 311 |
| KB5099535Security Update | Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016, Windows 10 Version 1607, Windows Server 2016 | 14393.9339 | 260 |
| KB5099414Security Update | Windows 11 Version 23H2 | 22631.7376 | 17 |
| KB5095051Security Update | Windows 11 Version 26H1 | 28000.2269 | 6 |
| KB5089548Security Update | Windows 11 Version 26H1 | 28000.2113 | 1 |
Already exploited when fixed
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-58644Microsoft SharePoint Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | ExploitedCritical |
| CVE-2026-56155Active Directory Federation Services Elevation of Privilege Vulnerability | Elevation of Privilege | 7.8 | ExploitedImportant |
| CVE-2026-56164Microsoft SharePoint Server Elevation of Privilege Vulnerability | Elevation of Privilege | 5.3 | ExploitedModerate |
Publicly known before the fix
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-50661Windows BitLocker Security Feature Bypass Vulnerability | Security Feature Bypass | 6.1 | Important |
Critical fixes with the highest scores
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-56163Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-56191Microsoft Exchange Online Tampering Vulnerability | Tampering | 10.0 | Critical |
| CVE-2026-57106Data Quality Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-58275Azure DNS Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-58630Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-62825Azure Key Vault Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-66803Azure Cosmos DB Remote Code Execution Vulnerability | Remote Code Execution | 10.0 | Critical |
| CVE-2026-45499Azure OpenAI Elevation of Privilege Vulnerability | Elevation of Privilege | 9.9 | Critical |
| CVE-2026-50517Microsoft M365 Copilot Remote Code Execution Vulnerability | Remote Code Execution | 9.9 | Critical |
| CVE-2026-54120Microsoft Surface Remote Code Execution Vulnerability | Remote Code Execution | 9.9 | Critical |
| CVE-2026-57092Microsoft Windows VMSwitch Elevation of Privilege Vulnerability | Elevation of Privilege | 9.9 | Critical |
Servers and other products
| Update | Applies to | CVEs |
|---|---|---|
| KB5099536Security Update | Windows Server 2025 | 388 |
| KB5099540Security Update | Windows Server 2022 | 325 |
| KB5099444Monthly Rollup | Windows Server 2012 R2 | 184 |
| KB5099445Monthly Rollup | Windows Server 2012 | 173 |
| KB5002891Security Update | Microsoft SharePoint Enterprise Server 2016 | 39 |
| KB5002883Security Update | Microsoft SharePoint Server 2019 | 39 |
| KB5002882Security Update | Microsoft SharePoint Server Subscription Edition | 38 |
| KB5002884Security Update | Office Online Server | 33 |
| KB5002886Security Update | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | 32 |
| KB5002887Security Update | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | 23 |
| KB5002892Security Update | Microsoft SharePoint Enterprise Server 2016 | 22 |
| KB5002885Security Update | Microsoft SharePoint Server 2019 | 22 |
| KB5104032Security Update | .NET 8.0 installed on Linux, .NET 8.0 installed on Mac OS, .NET 8.0 installed on Windows | 17 |
| KB5104033Security Update | .NET 9.0 installed on Linux, .NET 9.0 installed on Mac OS, .NET 9.0 installed on Windows | 17 |
| KB5101007Security Update | Microsoft .NET Framework 4.8 on Windows 10 Version 1607, Microsoft .NET Framework 4.8 on Windows Server 2016 | 17 |
| KB5101011Security Update | Microsoft .NET Framework 4.8 on Windows Server 2012 R2 | 17 |
| KB5101008Security Update | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 | 17 |
| KB5101009Security Update | Microsoft .NET Framework 4.8 on Windows Server 2012 | 17 |
| KB5101010Security Update | Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 | 17 |
| KB5101006Security Update | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 | 17 |
| KB5100989Security Update | Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 | 17 |
| KB5100990Security Update | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 | 17 |
| KB5100991Security Update | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 | 17 |
| KB5101005Security Update | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 | 17 |
| KB5101000Security Update | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 | 17 |
| KB5100998Security Update | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 | 17 |
| KB5101004Security Update | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 | 17 |
| KB5101001Security Update | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 | 17 |
| KB5101002Security Update | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 26H1, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H1, Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1, Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 | 17 |
| KB5104034Security Update | .NET 10.0 installed on Linux, .NET 10.0 installed on Mac OS, .NET 10.0 installed on Windows | 14 |
| KB5002890Security Update | Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition) | 12 |
| KB5101014Security Update | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 26H1, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H1, Microsoft .NET Framework 3.5 on Windows 11 Version 26H1, Microsoft .NET Framework 3.5 on Windows 11 version 26H1 | 11 |
| KB5100984Security Update | Microsoft .NET Framework 3.5 on Windows Server 2012 | 11 |
| KB5100985Security Update | Microsoft .NET Framework 3.5 on Windows Server 2012 R2 | 11 |
| KB5101346Security Update | Microsoft SQL Server 2025 (CU6) | 7 |
| KB5102333Security Update | Microsoft SQL Server 2025 (GDR) | 7 |
| KB5101347Security Update | Microsoft SQL Server 2022 (CU 25) | 4 |
| KB5102338Security Update | Microsoft SQL Server 2017 (GDR) | 4 |
| KB5102336Security Update | Microsoft SQL Server 2019 (GDR) | 4 |
| KB5102340Security Update | Microsoft SQL Server 2016 Service Pack 3 (GDR) | 4 |
| KB5102339Security Update | Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack | 4 |
| KB5102337Security Update | Microsoft SQL Server 2017 (CU 31) | 4 |
| KB5102334Security Update | Microsoft SQL Server 2022 (GDR) | 4 |
| KB5102335Security Update | Microsoft SQL Server 2019 (CU 32) | 4 |
| KB5103215Security Update | Microsoft Exchange Server 2016 Cumulative Update 23 | 4 |
| KB5103212Security Update | Microsoft Exchange Server Subscription Edition RTM | 4 |
| KB5103213Security Update | Microsoft Exchange Server 2019 Cumulative Update 15 | 4 |
| KB5103214Security Update | Microsoft Exchange Server 2019 Cumulative Update 14 | 4 |
| KB5002867Security Update | Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition) | 3 |
| KB5094042Monthly Rollup | Windows Server 2012 | 2 |
| KB5094041Monthly Rollup | Windows Server 2012 R2 | 2 |
| KB5002273Security Update | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | 2 |
| KB5002748Security Update | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | 2 |
| KB5101003Security Update | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 | 1 |
| KB5099415IE Cumulative | Windows Server 2012, Windows Server 2012 R2 | 1 |
| KB5002830Security Update | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | 1 |
| KB5002880Security Update | Microsoft SharePoint Enterprise Server 2016 | 1 |
| KB5002874Security Update | Microsoft SharePoint Server 2019 | 1 |
| KB5002873Security Update | Microsoft SharePoint Server Subscription Edition | 1 |
Questions and experiences
Ask about this page: members and our editors answer. Reading is open; writing needs a free account.
0 comments
…