Microsoft has released the July 2026 Patch Tuesday security updates for Windows and other Microsoft products. This month’s release is one of the most significant of the year, addressing almost 570 security vulnerabilities, including three zero-day vulnerabilities, two that were actively exploited before patches became available, and one that had been publicly disclosed.
Beyond security fixes, Microsoft also introduced new Windows 11 features, improved system reliability, and released the latest cumulative updates for Windows 11 and Windows 10 ESU devices. Here’s everything you need to know about the July 2026 Patch Tuesday update.
Three Zero-Day Vulnerabilities Patched
The biggest highlight of the July 2026 Patch Tuesday release is the patch for three zero-day vulnerabilities.
The first vulnerability, CVE-2026-56155, affects Active Directory Federation Services (AD FS) and could allow authenticated attackers to gain elevated privileges. Microsoft confirmed this vulnerability was actively exploited before the update was released.
The second zero-day, CVE-2026-56164, impacts Microsoft SharePoint Server. Like the AD FS flaw, it was also actively exploited in the wild and could allow attackers to elevate privileges on affected servers.
The third vulnerability, CVE-2026-50661, affects Windows BitLocker. Unlike the other two, this security feature bypass vulnerability was publicly disclosed before patches became available. Exploiting it requires physical access to the device, but installing the latest update helps protect encrypted drives from unauthorized access.
Organizations using AD FS or SharePoint Server should prioritize deploying these updates as soon as possible.
59 Critical Vulnerabilities Also Fixed
In addition to the zero-day vulnerabilities, Microsoft fixed 59 vulnerabilities rated Critical, the company’s highest severity rating.
Many of these flaws are Remote Code Execution (RCE) vulnerabilities, which could allow attackers to run malicious code on vulnerable systems without physical access. The July 2026 release also addresses several Elevation of Privilege, Security Feature Bypass, and Spoofing vulnerabilities affecting Windows and other Microsoft products.
Several critical fixes apply to widely used Windows components, including Windows NTFS, Hyper-V, DHCP Server, Remote Desktop Services, and the Windows Kernel. While these vulnerabilities are especially important for businesses, home users also benefit from installing the latest security updates.
Windows 11 Gets New Features
Microsoft released KB5101650 for Windows 11 versions 25H2 and 24H2, upgrading systems to Build 26200.8875 and Build 26100.8875.
Unlike a typical monthly security update, KB5101650 introduces several new features alongside security improvements.
The headline addition is Point-in-Time Restore, a new recovery feature that helps users restore their PC to a previous working state if a Windows update, driver, or newly installed application causes problems.
Other improvements include:
- Faster and more responsive File Explorer.
- Improved Bluetooth reliability and compatibility.
- The new Screen Tint accessibility feature.
- Enhancements to Widgets, Magnifier, and Voice Access.
- Better networking, audio, and overall system reliability.
Microsoft notes that some of these features are being enabled gradually through Controlled Feature Rollout (CFR), so they may not appear immediately on every eligible device.
Windows 10 ESU Also Receives Important Updates
Windows 10 users enrolled in the Extended Security Updates (ESU) program also receive the KB5099539 cumulative update.
This release focuses on security and reliability rather than new features. It fixes a compatibility issue in OLE Automation (oleaut32.dll) introduced by the June 2026 update, restores the OneDrive shortcut in File Explorer when running with administrator privileges, improves Secure Boot certificate deployment, strengthens Remote Desktop (RDP) security, and resolves several additional compatibility issues.
Because Windows 10 reached end of support in October 2025, these updates are available only to eligible ESU devices and supported Enterprise LTSC editions.
Should You Install the July 2026 Patch Tuesday Updates?
Yes. The July 2026 Patch Tuesday release contains important security fixes that help protect Windows devices against newly discovered threats. In addition to addressing 570 vulnerabilities, Microsoft patched two actively exploited zero-day vulnerabilities, making this an update that users and organizations shouldn’t postpone.
Windows 11 users also benefit from several new features and quality improvements, while Windows 10 ESU devices receive important compatibility and security fixes.
If you’re using a supported version of Windows, installing the latest updates through Windows Update is the easiest way to keep your PC secure, stable, and up to date.
Download the Windows cumulative updates
All these security updates are automatically downloaded and installed on supported devices via Windows Update. If your device has not received them yet, open Settings > Update & Security (or Windows Update), and click Check for updates. Once the updates are installed, restart your device to apply the changes.
- Windows 11 KB5101650 (versions 24H2/25H2) offline installer – Direct Download Link (64-bit).
- Windows 11 KB5099414 (version 23H2) offline installer – Direct Download Link (64-bit).
- Windows 10 KB5099539 (version 22H2, ESU) offline installer – Direct Download Links: 64-bit and 32-bit (x86).
The links above open the Microsoft Update Catalog, a library of offline installers for Windows updates. Click the Download button next to the OS version installed on your machine, then run the .msu file to begin installing the update.
If you encounter any issues installing these updates, refer to our Windows Update troubleshooting guide to resolve problems such as stuck downloads or failed installations with various error codes.
Frequently Asked Questions
Microsoft Patch Tuesday is Microsoft’s monthly security update release, typically published on the second Tuesday of each month. It delivers security patches, bug fixes, and reliability improvements for Windows, Microsoft Office, Windows Server, and other Microsoft products.
Microsoft schedules the release of security updates on “Patch Tuesday,” the second Tuesday of each month at approximately 10:00 AM Pacific Time (PT).
The second Tuesday of each month is known as “Patch Tuesday” because Microsoft consolidates the most critical updates into this maintenance window.
The term “Zero-Day” is used when security teams are unaware of a software vulnerability and have had “0” days to develop a security patch or update to fix it.
The July 2026 Patch Tuesday release addresses 570 security vulnerabilities, including 59 Critical vulnerabilities. Microsoft also patched three zero-day vulnerabilities, two of which were actively exploited before security updates became available.
Microsoft released KB5101650 for Windows 11 versions 25H2 and 24H2, KB5099414 for Windows 11 version 23H2, and KB5099539 for eligible Windows 10 Extended Security Updates (ESU) and supported Enterprise LTSC editions.
