Patch Tuesday 2026
The latest Patch Tuesday 2026 coverage — news, analysis, and updates from the WindowsNews.AI desk.
Windows IKE Heap Overflow Threatens VPN Gateways: Patch Now with July 2026 Updates
On July 14, 2026, Microsoft released patches for a heap-based buffer overflow in the Windows Internet Key Exchange protocol that lets remote attackers crash affected systems with no authentication or...
Your Windows PC Needs the July Update Now—CVE-2026-54987 Gives Attackers SYSTEM Access
Microsoft quietly fixed a dangerous local privilege escalation bug on July 14, 2026. CVE-2026-54987, patched in the latest cumulative updates, could let an attacker with a toehold on your PC wrest...
July 2026 Windows Patch Fixes QWAVE Flaw That Could Escalate Local Attacks to SYSTEM
On July 14, 2026, Microsoft released its monthly security updates, and among the hundreds of fixes was a patch for CVE-2026-54989—a privilege escalation vulnerability lurking in the Quality Windows...
Microsoft's 570-Fix Patch Tuesday: Two Zero-Days Exploited, BitLocker Bypass Disclosed
On July 14, Microsoft unloaded a record-breaking 570 security fixes across its product portfolio — the largest Patch Tuesday in the company’s history. Two of the vulnerabilities are zero-days...
Microsoft’s July Update Closes Hyper-V Privilege Flaw: Immediate Actions for Server Admins
Microsoft addressed a confirmed elevation-of-privilege vulnerability in Windows Hyper-V as part of its July 14, 2026 Patch Tuesday release, urging administrators of all Hyper-V hosts to apply the fix...
July Patch Tuesday: Update Visual Studio Code Now to Fix Security Feature Bypass and More
Microsoft shipped fixes for a security feature bypass in Visual Studio Code on July 14, 2026, as part of a sprawling Patch Tuesday that also addresses three additional Important vulnerabilities in...
Microsoft Patches Windows App Store Privilege Escalation Bug Affecting All Supported Versions
Microsoft's July 14, 2026 security updates close a local privilege escalation hole in the Windows App Store component that could hand attackers full system control if they already have a foot in the...
Immediate Action Required: Windows TCP/IP Data Leak Fixed in July 2026 Update (CVE-2026-49177)
Microsoft’s July 14, 2026 security release shipped with a fix for CVE-2026-49177, an information disclosure vulnerability in the Windows TCP/IP stack that could allow an attacker with network...
Microsoft Seals DNS Tampering Flaw in July Cumulative Update Rush
Microsoft delivered a security update on July 14, 2026, that plugs a local tampering vulnerability in the Windows DNS Client tracked as CVE-2026-49174. The Important-rated flaw, with a CVSS score of...
Microsoft’s July 2026 Patch Tuesday Slips In a Kernel Fix You Shouldn’t Overlook
Microsoft pushed out a sweeping set of security updates on July 14, 2026, and tucked inside the massive release is a fix for a Windows kernel bug that could hand an attacker the keys to your entire...
July 2026 Windows Update Seals DNS Client Privilege Escalation Hole—Check Your Build Now
Microsoft’s July 14, 2026 Patch Tuesday delivered a fix for CVE-2026-49175, a local privilege-escalation vulnerability in the Windows DNS Client that earned a CVSS 3.1 score of 7.8 and an Important...
Microsoft Patches WalletService Privilege Escalation Flaw (CVE-2026-49176) in July 14 Update
Microsoft shipped a fix for an elevation-of-privilege vulnerability in Windows WalletService as part of its July 14, 2026 Patch Tuesday release. The bug, tracked as CVE-2026-49176, carries an...