Patch Tuesday 2026
The latest Patch Tuesday 2026 coverage — news, analysis, and updates from the WindowsNews.AI desk.
Microsoft Ships Fix for PowerShell Path Traversal RCE (CVE-2026-40400) – Here’s What to Patch First
Microsoft released its July 14, 2026 security updates fixing CVE-2026-40400, a high-severity remote code execution vulnerability in Windows PowerShell that earned a CVSS 3.1 score of 8.0. The flaw...
Microsoft’s July Patch Tuesday Fixes File Explorer Flaw That Could Expose Private Data on Shared PCs
Microsoft has patched a vulnerability in Windows File Explorer that could allow someone with a local account on your PC to read private data they shouldn’t have access to. The fix arrived with the...
July 2026 Windows Updates Patch Audio Service Flaw That Leaks Event Log Memory Addresses
Microsoft’s July 14, 2026 security updates correct a vulnerability in the Windows Audio Service that exposes memory addresses belonging to the Windows Event Log service. An attacker who already has...
Microsoft Fixes Windows File Explorer Vulnerability That Leaks Data to Local Attackers—Apply July Updates Now
Microsoft’s July 14, 2026 security patch bundles a fix for CVE-2026-33842, an information‑disclosure bug in Windows File Explorer that could let an attacker who’s already logged on to your PC...
Microsoft’s July 2026 Windows Updates Seal a Serious NTFS Security Hole—Patch Now
Microsoft’s monthly security update on July 14, 2026, delivered a fix for a heap-based buffer overflow in the NTFS file system that could allow an attacker to execute arbitrary code on your PC. The...
Microsoft Fixes Windows Narrator Flaw That Could Give Attackers System-Level Access
Microsoft’s July 14, 2026 security updates patch a command-injection vulnerability in Windows Narrator that could let a locally authenticated attacker elevate privileges to SYSTEM. Tracked as...
Microsoft's July Patch Tuesday Closes a Critical Media Foundation Gap — Here's What You Must Do
Microsoft on July 14, 2026 pushed out a mammoth set of security updates, rolling up fixes for more than 500 vulnerabilities across its product line. Among them, a bug in Windows Media Foundation...
Critical Windows Graphics Bug Fixed in July Patch Tuesday—Patch Now to Prevent File-Based Attacks
Microsoft’s July 14, 2026 Patch Tuesday release includes a fix for a high-severity Windows Graphics Component vulnerability that, if exploited, could let an attacker take over a system just by...
Microsoft’s July Update Fixes a Kernel Flaw That Gives Attackers Full PC Control — What You Need to Know
Microsoft shipped a critical kernel patch in its July 14, 2026 security updates that closes a privilege-escalation hole in all supported Windows 11 releases and Windows Server 2025. The...
CVE-2026-54988: Microsoft's Excel Update Fixes Data Leak and Crash Flaw
On July 14, Microsoft released a security update for Microsoft Office Excel that patches a memory-read vulnerability rated Medium severity. Despite the modest score, the flaw can crash Excel or cause...
Microsoft Fixes SQL Server Privilege Escalation Bug on 2016's End-of-Support Date
Microsoft's July 14, 2026 Patch Tuesday brought a fix for CVE-2026-55002, an elevation-of-privilege vulnerability in SQL Server that could allow an authenticated local attacker to take full control...
CVE-2026-55006: Patch Now to Stop Low-Privileged Users from Hijacking Your Exchange Server
Microsoft’s July 2026 Patch Tuesday release fixes a high-severity vulnerability in Exchange Server that allows an authenticated low-privileged user to escalate to full administrative control. The...