Microsoft Patch Tuesday — July 2026
Tuesday, 14 July 2026
Exploited 5
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
- Critical 9.8 EPSS 3%
- Critical 9.8 EPSS 16%
-
Critical 9.1
CVE-2026-55040 Exploited Public exploit Microsoft SharePoint Server Security Feature Bypass VulnerabilityEPSS 70%
- High 7.8
-
Medium 5.3
CVE-2026-56164 Zero-day Public exploit Microsoft SharePoint Server Elevation of Privilege VulnerabilityEPSS 1%
Critical 17
- Critical 9.9
-
Critical 9.8
CVE-2026-55944 Public exploit Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution VulnerabilityEPSS 1.5%
- Critical 9.8
- Critical 9.8
- Critical 9.8
- Critical 9.8
- Critical 9.8
- Critical 9.8 EPSS 1.5%
- Critical 9.8 EPSS 1.5%
- Critical 9.8
- Critical 9.8
- Critical 9.8
- Critical 9.8
- Critical 9.6
- Critical 9.6
- Critical 9.6
- Critical 9.3
Public exploit code 15
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 8.8 EPSS 1%
- High 8.8
- High 8.8
-
High 8.8
CVE-2026-54121 Public exploit Active Directory Certificate Services Elevation of Privilege VulnerabilityEPSS 1.8%
- High 8.4
- High 8.2
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- Medium 6.5
- Medium 6.3
- Medium 4.7
- Low 3.3
All vulnerabilities 574
Critical20 ShowHide
- Critical 9.8 EPSS 3%
- Critical 9.8 EPSS 16%
-
Critical 9.1
CVE-2026-55040 Exploited Public exploit Microsoft SharePoint Server Security Feature Bypass VulnerabilityEPSS 70%
- Critical 9.9
-
Critical 9.8
CVE-2026-55944 Public exploit Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution VulnerabilityEPSS 1.5%
- Critical 9.8
- Critical 9.8
- Critical 9.8
- Critical 9.8
- Critical 9.8
- Critical 9.8 EPSS 1.5%
- Critical 9.8 EPSS 1.5%
- Critical 9.8
- Critical 9.8
- Critical 9.8
- Critical 9.8
- Critical 9.6
- Critical 9.6
- Critical 9.6
- Critical 9.3
High409 ShowHide
- High 7.8
- High 8.8 EPSS 1%
- High 8.8
- High 8.8
-
High 8.8
CVE-2026-54121 Public exploit Active Directory Certificate Services Elevation of Privilege VulnerabilityEPSS 1.8%
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8 EPSS 1%
- High 8.8
- High 8.8
- High 8.8 EPSS 1%
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.5
- High 8.4
- High 8.4
- High 8.4
- High 8.4
- High 8.4
- High 8.4
- High 8.3
- High 8.2
- High 8.2 EPSS 1.1%
- High 8.2
- High 8.2
- High 8.1
- High 8.1
- High 8.1
- High 8.1
- High 8.1
- High 8.1
- High 8.1
- High 8.1
- High 8.1
- High 8.1
- High 8.1 EPSS 1.1%
- High 8.1
- High 8.1
- High 8.0
- High 8.0
- High 8.0
- High 8.0
- High 8.0
- High 8.0
- High 8.0
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8 EPSS 3.5%
- High 7.8
- High 7.8 EPSS 4%
- High 7.8 EPSS 4%
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8 EPSS 2.5%
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
-
High 7.5
CVE-2026-40378 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityEPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5
- High 7.5 EPSS 1.2%
- High 7.5
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.3%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5
- High 7.5 EPSS 1.2%
- High 7.5
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1%
- High 7.5 EPSS 1%
- High 7.5 EPSS 1.2%
- High 7.5
- High 7.5
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.7%
- High 7.5 EPSS 1.2%
- High 7.5
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5 EPSS 1.2%
- High 7.5
- High 7.5
- High 7.5 EPSS 1.2%
- High 7.5
- High 7.5 EPSS 1.2%
- High 7.5
- High 7.4
- High 7.3
- High 7.3
- High 7.3
- High 7.3
- High 7.3
- High 7.3
- High 7.3
- High 7.3
- High 7.1
- High 7.1
- High 7.1
- High 7.1
- High 7.1
- High 7.1
- High 7.1
- High 7.1
- High 7.1
- High 7.1
- High 7.1
-
High 7.1
CVE-2026-58529 Windows Active Directory Federation Services (ADFS) Information Disclosure VulnerabilityEPSS 1%
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
Medium143 ShowHide
-
Medium 5.3
CVE-2026-56164 Zero-day Public exploit Microsoft SharePoint Server Elevation of Privilege VulnerabilityEPSS 1%
- Medium 6.8
- Medium 6.8
- Medium 6.8
- Medium 6.8
- Medium 6.8
- Medium 6.8
- Medium 6.8
- Medium 6.8
- Medium 6.6
- Medium 6.6
- Medium 6.5
- Medium 6.5
-
Medium 6.5
CVE-2026-49799 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityEPSS 1.1%
- Medium 6.5 EPSS 1.1%
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5 EPSS 1.1%
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5 EPSS 1.1%
- Medium 6.5
- Medium 6.5 EPSS 1.1%
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.4
- Medium 6.4
- Medium 6.3
- Medium 6.3
- Medium 6.3
- Medium 6.3
- Medium 6.3
- Medium 6.2
- Medium 6.2
- Medium 6.2
- Medium 6.2
- Medium 6.2
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.0
- Medium 5.9
- Medium 5.9
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.4
- Medium 5.3 EPSS 1.2%
- Medium 5.3
- Medium 5.3
- Medium 5.1
- Medium 4.8
- Medium 4.7
- Medium 4.7
- Medium 4.7
- Medium 4.7
- Medium 4.6
- Medium 4.6
- Medium 4.6
- Medium 4.6
- Medium 4.6
- Medium 4.6
- Medium 4.6
- Medium 4.5
- Medium 4.2
Low2 ShowHide
- Low 3.3
- Low 3.3