Microsoft's Record Patch Tuesday Fixes 622 Flaws, Two Under Active Attack

Microsoft’s July 2026 Patch Tuesday shipped 622 CVEs, more than triple June’s previous high of around 200. Two of the fixes close vulnerabilities that attackers are already exploiting in the wild; Microsoft credited incident responders with identifying both. Talos separately flagged CVE-2026-56155 among the batch’s prominent fixes.

Practitioners should prioritize the two actively exploited bugs first before working through the rest of the record-setting batch.