Key takeaway: Microsoft patches record number of 622 vulnerabilities, including two zero-day flaws already under active exploitation.
Microsoft released its largest Patch Tuesday update in history with 622 of its own CVEs – more than three times as many as in June with approximately 200 vulnerabilities. Two of the patched flaws are already being actively exploited by attackers.
According to its own documentation in the Security Update Guide, this represents the largest patch release in Microsoft history. The 622 CVEs significantly exceed the previous high from June, when approximately 200 vulnerabilities were patched.
Two zero-day vulnerabilities warrant particular urgency, as Microsoft’s incident response teams have already observed active attacks against them. These should be prioritized, as patches are now available and the security gaps are already being exploited in the wild.
For CISOs, this means increased patch burden combined with critical priority: identification and rapid deployment of the two actively attacked CVEs in the production environment should be undertaken immediately, while a phased risk analysis for the remaining 620 vulnerabilities proceeds through the standard patch process.
Source: thehackernews.com · Published July 14, 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrase and classification through Lumi News Pipeline v1.7.3.