July 2026
Microsoft shipped 2005 fixes in its July 2026 security updates. 80 are Critical severity, under active exploitation, or were publicly disclosed before a fix shipped — those are listed below. The rest: 473 fixes to open-source packages bundled for Microsoft’s Azure Linux container distro, 933 Chromium fixes shipped through Microsoft Edge, and 519 lower-severity, non-exploited, non-publicly-disclosed fixes to Microsoft products — are counted here but not listed row by row.
Built by Daily CISO from Microsoft’s own update guide for this release (initial release July 14, 2026, last revised October 9, 2026); not an official Microsoft page. The full 2005-fix list, including every Azure Linux and Edge/Chromium entry, is on Microsoft’s own page, linked above.
CVE-2026-56163: Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Critical
Azure Kubernetes Service
CVSS 10.0 · Microsoft says no customer action required
CVE-2026-56191: Microsoft Exchange Online Tampering Vulnerability
Critical
Microsoft Exchange Online
CVSS 10.0 · Microsoft says no customer action required
CVE-2026-57106: Data Quality Elevation of Privilege Vulnerability
Critical
Microsoft Purview Data Governance
CVSS 10.0 · Microsoft says no customer action required
CVE-2026-58275: Azure DNS Elevation of Privilege Vulnerability
Critical
Azure DNS
CVSS 10.0 · Microsoft says no customer action required
CVE-2026-58630: Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
Critical
Azure App Service for Linux
CVSS 10.0 · Microsoft says no customer action required
CVE-2026-62825: Azure Key Vault Elevation of Privilege Vulnerability
Critical
Azure Key Vault
CVSS 10.0 · Microsoft says no customer action required
CVE-2026-66803: Azure Cosmos DB Remote Code Execution Vulnerability
Critical
Azure Cosmos DB
CVSS 10.0 · Microsoft says no customer action required
CVE-2026-45499: Azure OpenAI Elevation of Privilege Vulnerability
Critical
Azure Open AI
CVSS 9.9 · Microsoft says no customer action required
CVE-2026-50517: Microsoft M365 Copilot Remote Code Execution Vulnerability
Critical
Microsoft 365 Copilot
CVSS 9.9 · Microsoft says no customer action required
CVE-2026-54120: Microsoft Surface Remote Code Execution Vulnerability
Critical
Surface Management Services
CVSS 9.9 · Microsoft says no customer action required
CVE-2026-57092: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 9.9
CVE-2026-57100: Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
Critical
Microsoft Entra Provisioning Service
CVSS 9.9 · Microsoft says no customer action required
CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +11 more
CVSS 9.8
CVE-2026-50522: Microsoft SharePoint Remote Code Execution Vulnerability
Critical
Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
CVSS 9.8
CVE-2026-54117: Microsoft SQL Server Remote Code Execution Vulnerability
Critical
Microsoft SQL Server 2025 for x64-based Systems (CU6), Microsoft SQL Server 2025 for x64-based Systems (GDR)
CVSS 9.8
CVE-2026-54118: Microsoft SQL Server Remote Code Execution Vulnerability
Critical
Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), +6 more
CVSS 9.8
CVE-2026-55010: Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability
Critical
Minecraft Bedrock Dedicated Server
CVSS 9.8 · Microsoft says no customer action required
CVE-2026-55944: Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Critical
Microsoft Dynamics NAV 2018
CVSS 9.8
CVE-2026-56159: DHCP Server Service Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +11 more
CVSS 9.8
CVE-2026-56165: Microsoft Account Remote Code Execution Vulnerability
Critical
Microsoft Account
CVSS 9.8 · Microsoft says no customer action required
CVE-2026-56188: Windows Server Network driver Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 9.8
CVE-2026-58644: Microsoft SharePoint Remote Code Execution Vulnerability
Critical
Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
CVSS 9.8 · actively exploited
CVE-2026-50380: Windows GDI+ Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 9.6
CVE-2026-55008: Microsoft Exchange Server Spoofing Vulnerability
Critical
Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM
CVSS 9.6
CVE-2026-41106: Microsoft 365 Copilot Elevation of Privilege Vulnerability
Critical
Microsoft 365 Copilot
CVSS 9.3 · Microsoft says no customer action required
CVE-2026-62835: Azure Portal Information Disclosure Vulnerability
Critical
Azure Portal
CVSS 9.3 · Microsoft says no customer action required
CVE-2026-55040: Microsoft SharePoint Server Security Feature Bypass Vulnerability
Critical
Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
CVSS 9.1
CVE-2026-48564: DHCP Server Service Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +11 more
CVSS 8.8
CVE-2026-50370: DHCP Server Service Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +11 more
CVSS 8.8
CVE-2026-50382: DirectX Graphics Kernel Remote Code Execution Vulnerability
Critical
Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, +15 more
CVSS 8.8
CVE-2026-50444: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +11 more
CVSS 8.8
CVE-2026-50474: Remote Desktop Client Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 8.8
CVE-2026-54121: Active Directory Certificate Services Elevation of Privilege Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +11 more
CVSS 8.8
CVE-2026-54982: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 8.8
CVE-2026-54998: Microsoft Exchange Online Elevation of Privilege Vulnerability
Critical
Microsoft Exchange Online
CVSS 8.8 · Microsoft says no customer action required
CVE-2026-54999: Windows TCP/IP Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 8.8
CVE-2026-57087: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +19 more
CVSS 8.8
CVE-2026-57090: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +19 more
CVSS 8.8
CVE-2026-57094: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +19 more
CVSS 8.8
CVE-2026-58608: Windows Print Spooler Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 8.8
CVE-2026-56167: Azure AI Search Elevation of Privilege Vulnerability
Critical
Azure AI Search
CVSS 8.5 · Microsoft says no customer action required
CVE-2026-54128: Windows DHCP Client Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 8.4
CVE-2026-54992: Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 8.4
CVE-2026-55045: Microsoft Office Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), +12 more
CVSS 8.4
CVE-2026-50680: Windows Hyper-V Elevation of Privilege Vulnerability
Critical
Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, +15 more
CVSS 8.2
CVE-2026-49164: Windows Active Directory Domain Services Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 8.1
CVE-2026-50694: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 8.1
CVE-2026-54995: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 8.1
CVE-2026-35425: Azure API Management (APIM) Remote Code Execution Vulnerability
Critical
Azure API Management (APIM)
CVSS 8.0 · Microsoft says no customer action required
CVE-2026-42982: Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +21 more
CVSS 7.8
CVE-2026-49796: Windows GDI+ Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 7.8
CVE-2026-50314: Microsoft Office Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), +9 more
CVSS 7.8
CVE-2026-50327: Windows Media Remote Code Execution Vulnerability
Critical
Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, +4 more
CVSS 7.8
CVE-2026-50467: Microsoft Office Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), +9 more
CVSS 7.8
CVE-2026-50655: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +19 more
CVSS 7.8
CVE-2026-55011: Microsoft Defender Remote Code Execution Vulnerability
Critical
Microsoft Malware Protection Engine
CVSS 7.8
CVE-2026-55012: Microsoft Defender Remote Code Execution Vulnerability
Critical
Microsoft Malware Protection Engine
CVSS 7.8
CVE-2026-55018: Microsoft Office Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), +9 more
CVSS 7.8
CVE-2026-55022: Microsoft Office Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), +9 more
CVSS 7.8
CVE-2026-55033: Microsoft Word Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, +12 more
CVSS 7.8
CVE-2026-55043: Microsoft PowerPoint Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, +9 more
CVSS 7.8
CVE-2026-55049: Microsoft Office Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), +9 more
CVSS 7.8
CVE-2026-55056: Microsoft Office Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), +9 more
CVSS 7.8
CVE-2026-55120: Microsoft PowerPoint Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, +9 more
CVSS 7.8
CVE-2026-55123: Microsoft PowerPoint Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, +9 more
CVSS 7.8
CVE-2026-55127: Microsoft Word Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, +12 more
CVSS 7.8
CVE-2026-55129: Microsoft Office Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), +9 more
CVSS 7.8
CVE-2026-55132: Microsoft Word Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, +12 more
CVSS 7.8
CVE-2026-55140: Microsoft Office Remote Code Execution Vulnerability
Critical
Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), +9 more
CVSS 7.8
CVE-2026-56189: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Critical
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +23 more
CVSS 7.8
CVE-2026-58542: Windows Media Remote Code Execution Vulnerability
Critical
Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, +4 more
CVSS 7.8
CVE-2026-54127: Windows Hyper-V Elevation of Privilege Vulnerability
Critical
Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, +5 more
CVSS 7.4
CVE-2026-50392: Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Critical
Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, +4 more
CVSS 7.0
CVE-2026-49159: Microsoft Graph Information Disclosure Vulnerability
Critical
Microsoft Graph
CVSS 6.5 · Microsoft says no customer action required
CVE-2026-26145: Microsoft Azure Synapse Elevation of Privilege Vulnerability
Critical
Azure Synapse
CVSS 4.8 · Microsoft says no customer action required
CVE-2026-48561: Microsoft Edge Copilot Remote Code Execution Vulnerability
Critical
Microsoft Edge Copilot for Android, Microsoft Edge Copilot for IOS
CVE-2026-56160: Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability
Critical
Azure Red Hat OpenShift (ARO)
· Microsoft says no customer action required
CVE-2026-56155: Active Directory Federation Services Elevation of Privilege Vulnerability
Important
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +11 more
CVSS 7.8 · actively exploited
CVE-2026-50661: Windows BitLocker Security Feature Bypass Vulnerability
Important
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, +19 more
CVSS 6.1 · publicly disclosed before a fix shipped
CVE-2026-56164: Microsoft SharePoint Server Elevation of Privilege Vulnerability
Moderate
Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
CVSS 5.3 · actively exploited