Microsoft has released its July 2026 Patch Tuesday security updates for Windows and other Microsoft products. According to Microsoft, this month’s release addresses 570 security vulnerabilities, including two actively exploited zero-day vulnerabilities and one publicly disclosed zero-day vulnerability. Microsoft also patched 59 Critical vulnerabilities, most of which could allow remote code execution or privilege escalation. Beyond security fixes, the July 2026 update also brings several new features and quality improvements. Windows 11 receives Point-in-Time Restore, a new recovery feature that helps restore your PC after software or update problems, along with improvements to File Explorer, Bluetooth, accessibility, and Widgets. Windows 10 ESU devices also receive the latest cumulative update with security patches and reliability fixes.
Here’s everything you need to know about the Microsoft July 2026 Patch Tuesday release, including the most important fixes, affected products, and why you should install the updates.
Contents
What’s New in Microsoft July 2026 Patch Tuesday?
The July 2026 Patch Tuesday release focuses on improving security across Microsoft’s ecosystem while introducing several new features for Windows users. Alongside fixes for 570 security vulnerabilities, Microsoft released new cumulative updates, KB5101650 for Windows 11 and KB5099539 for Windows 10, that include security patches, reliability improvements, and quality enhancements.
Here are the biggest highlights from this month’s release:
- 570 security vulnerabilities addressed across Windows and other Microsoft products.
- 59 Critical vulnerabilities patched, including numerous Remote Code Execution (RCE) flaws.
- Three zero-day vulnerabilities fixed, including two actively exploited and one publicly disclosed vulnerability.
- Windows 11 receives Point-in-Time Restore, File Explorer improvements, Bluetooth enhancements, accessibility updates, and several reliability fixes through the latest cumulative updates.
- Windows 10 ESU receives KB5099539, which fixes OLE Automation compatibility issues, improves Secure Boot and Remote Desktop security, and includes the latest July 2026 security patches.
Three Zero-Day Vulnerabilities Fixed
One of the most important parts of the July 2026 Patch Tuesday release is the fix for three zero-day vulnerabilities. Two of these flaws were actively exploited before patches became available, making them the highest-priority updates for affected systems.
CVE-2026-56155 – Active Directory Federation Services (AD FS)
This Elevation of Privilege vulnerability affects Active Directory Federation Services (AD FS). Microsoft confirmed the flaw was actively exploited, meaning attackers were already using it against vulnerable systems before the security update was released.
Organizations that rely on AD FS for identity and authentication should prioritize installing the July 2026 updates.
Microsoft also patched an Elevation of Privilege vulnerability affecting Microsoft SharePoint Server. Like the AD FS vulnerability, this flaw was actively exploited in the wild and could allow attackers to gain elevated privileges on affected servers.
Organizations running on-premises SharePoint environments should treat this update as a high priority.
CVE-2026-50661 – Windows BitLocker
The third zero-day vulnerability is a Security Feature Bypass affecting Windows BitLocker. Unlike the other two flaws, this vulnerability was publicly disclosed rather than actively exploited. Exploiting this issue requires physical access to the device, but installing the latest security updates helps protect encrypted drives from unauthorized access.
Critical Security Fixes Included in July 2026 Patch Tuesday
In addition to the three zero-day vulnerabilities, Microsoft’s July 2026 Patch Tuesday includes fixes for 59 Critical vulnerabilities, many of which could allow attackers to execute malicious code or gain elevated privileges on vulnerable systems.
According to Microsoft’s security advisories, the update resolves:
- 48 Remote Code Execution (RCE) vulnerabilities
- 9 Elevation of Privilege (EoP) vulnerabilities
- 1 Security Feature Bypass vulnerability
- 1 Spoofing vulnerability
Most of these vulnerabilities affect core Windows components and enterprise services, including Windows NTFS, DHCP Server, Hyper-V, and the Windows Kernel. While many of these flaws are more relevant to enterprise environments, installing the latest updates helps protect both business and personal devices from newly discovered security threats.
Windows 11 Receives Point-in-Time Restore and Other New Features
Alongside this month’s security updates, Microsoft released KB5101650 for Windows 11 versions 25H2 and 24H2, updating the systems to Build 26200.8875 and Build 26100.8875.
The KB5101650 introduces several new features, including Point-in-Time Restore, a new recovery feature that helps users restore their PC to an earlier working state if a Windows update, driver, or newly installed app causes problems.
Microsoft also improved File Explorer with faster performance and new quick actions, enhanced Bluetooth reliability for supported devices, introduced the Screen Tint accessibility feature, refined the Widgets experience, and added several networking and reliability improvements across Windows 11.
Microsoft is enabling some of these features gradually through Controlled Feature Rollout (CFR), so they may not appear on all eligible devices immediately after installing the update.
Windows 10 Receives July 2026 Security Update
Microsoft also released KB5099539 for eligible Windows 10 Extended Security Updates (ESU) devices and supported Windows 10 Enterprise LTSC editions.
While the update doesn’t introduce new features, it includes important security patches and reliability improvements. Microsoft fixed a compatibility issue affecting OLE Automation (oleaut32.dll), restored the OneDrive shortcut in File Explorer when running as Administrator, improved Secure Boot certificate deployment, strengthened Remote Desktop (RDP) security, and resolved several additional compatibility issues.
Because Windows 10 reached end of support in October 2025, these updates are available only to eligible ESU devices and supported Enterprise LTSC editions.
Should You Install the July 2026 Patch Tuesday Updates?
Yes. Whether you’re using Windows 11 or an eligible Windows 10 device, installing the July 2026 Patch Tuesday updates is recommended.
In addition to 570 security vulnerabilities, Microsoft patched two actively exploited zero-day vulnerabilities that attackers were already using before security updates became available. The release also includes dozens of fixes for Remote Code Execution (RCE), Elevation of Privilege (EoP), and other high-severity vulnerabilities.
Windows 11 users also benefit from new features such as Point-in-Time Restore, File Explorer improvements, Bluetooth enhancements, and accessibility updates. Windows 10 ESU users receive important security patches along with several reliability and compatibility fixes.
If you manage business devices, Microsoft recommends prioritizing systems running Active Directory Federation Services (AD FS) and Microsoft SharePoint Server, as two of this month’s zero-day vulnerabilities affect these products.
How to Download and Install the July 2026 Updates
Microsoft is rolling out the July 2026 Patch Tuesday updates through Windows Update. Most eligible Windows 11 and Windows 10 devices will receive the updates automatically, but users can also manually check for updates.
To install the latest updates:
- Open Settings by pressing Windows + I.
- Select Windows Update.
- Click Check for updates.
- Download and install any available updates.
- Restart your PC to complete the installation.
If Windows Update isn’t available or you need to update multiple devices, you can also download the standalone installers from the Microsoft Update Catalog.
- Windows 11 KB5101650 (for versions 25H2/24H2) – 64‑bit
- Windows 11 KB5099414 (for versions 23H2/22H2) – 64‑bit
- Windows 10 KB5099539 (for versions 22H2/21H1 via ESU) – 64‑bit and 32‑bit (x86)
You can also:
- Download Windows 11 ISO if you need to perform an in‑place upgrade or repair install.
- Use the Media Creation Tool or the Windows 11 installation assistant to upgrade supported devices to the latest version of Windows 11 (e.g., 25H2).
Before installing any major update, it’s a good idea to save your work and back up important files. While Windows updates typically install without issues, having a recent backup can help protect against unexpected problems.
If you encounter issues (updates stuck at a certain percentage, error codes during installation, etc.), refer to your Windows 11 Update troubleshooting guide to fix common problems.
Final Thoughts
The July 2026 Patch Tuesday release is one of Microsoft’s most important security updates this year. Alongside fixes for three zero-day vulnerabilities, it also introduces new Windows 11 features and delivers important security improvements for Windows 10 ESU devices.
If you haven’t already installed the latest updates, Microsoft recommends doing so as soon as possible to keep your devices protected.
Frequently Asked Questions
Patch Tuesday is Microsoft’s monthly security update release, typically published on the second Tuesday of each month. It delivers security patches, bug fixes, and reliability improvements for Windows and other Microsoft products.
CVE (Common Vulnerabilities and Exposures) IDs are standardized identifiers used to catalog publicly disclosed security vulnerabilities in the National Vulnerability Database (NVD) and other security databases.
Microsoft’s July 2026 Patch Tuesday addresses 570 security vulnerabilities, including 59 Critical vulnerabilities and three zero-day vulnerabilities, two of which were actively exploited before patches became available.
Microsoft released security updates for supported versions of Windows 11 and eligible Windows 10 ESU devices. Windows 11 received KB5101650, while Windows 10 ESU devices received KB5099539.
Yes. The updates include important security patches, fixes for actively exploited zero-day vulnerabilities, and quality improvements for Windows 11 and Windows 10.
