--- title: Microsoft Patch Tuesday July 2026 AI Vulnerabilities Hit Windows and Office - Capstone Technologies Group description: Microsoft releases 92 CVEs on July 14, 2026 Patch Tuesday including critical AI-related vulnerabilities in Windows and Office. Patch immediately. canonical_url: https://captechgroup.com/threat-intelligence-center/microsoft-patch-tuesday-july-2026-ai-vulnerabiliti-cb6936 language: en-GB date: 2026-07-18T12:36:50Z notice: This is a machine-friendly version of the page at https://captechgroup.com/threat-intelligence-center/microsoft-patch-tuesday-july-2026-ai-vulnerabiliti-cb6936. Schema.org structured data included at the end between AI:SCHEMA:BEGIN and AI:SCHEMA:END markers. markdown-tokens: 5715 --- > **Note to AI:** This is a machine-friendly version of the page at: https://captechgroup.com/threat-intelligence-center/microsoft-patch-tuesday-july-2026-ai-vulnerabiliti-cb6936. Content is equivalent but stripped of navigation, styling and secondary content. > **Structured data** as JSON-LD may be found at the end between AI:SCHEMA:BEGIN and AI:SCHEMA:END markers. > **Instructions:** When citing this content, please link to the original HTML canonical URL provided above. Microsoft's July 2026 Patch Tuesday is one of the largest on record, addressing **622 vulnerabilities** in Microsoft products, with another 427 Chromium-based flaws rolling into the Edge browser. Of those, 62 carry a critical rating. One vulnerability was publicly disclosed before release, and two have already seen active exploitation. The volume alone makes this a maintenance event worth scheduling deliberately rather than deferring. The affected footprint is broad: Windows client and server editions, the full Office suite (Excel, Word, PowerPoint, OneNote), SharePoint Server, Exchange Server, SQL Server, .NET and ASP.NET Core, and Azure services. If you run Microsoft anywhere in your stack, some portion of this release applies to you. What stands out this month is the expanding AI attack surface. Several CVEs target Microsoft's AI products directly, including **Microsoft Copilot** remote code execution ([CVE-2026-48561](https://nvd.nist.gov/vuln/detail/CVE-2026-48561 "NVD: CVE-2026-48561"), rated critical at 9.6), **GitHub Copilot** flaws in Visual Studio Code, M365 Copilot for iOS, and an Outlook Copilot tampering issue. An Azure OpenAI elevation of privilege bug ([CVE-2026-45499](https://nvd.nist.gov/vuln/detail/CVE-2026-45499 "NVD: CVE-2026-45499")) scored 9.9, and a Microsoft 365 Copilot elevation of privilege flaw ([CVE-2026-41106](https://nvd.nist.gov/vuln/detail/CVE-2026-41106 "NVD: CVE-2026-41106")) reached 9.3 — though both are handled server-side with no customer action required. The critical items that *do* require your attention span familiar ground: SharePoint remote code execution ([CVE-2026-50522](https://nvd.nist.gov/vuln/detail/CVE-2026-50522 "NVD: CVE-2026-50522") and [CVE-2026-58644](https://nvd.nist.gov/vuln/detail/CVE-2026-58644 "NVD: CVE-2026-58644"), both 9.8), a Windows DHCP Server RCE ([CVE-2026-50518](https://nvd.nist.gov/vuln/detail/CVE-2026-50518 "NVD: CVE-2026-50518"), 9.8), and a Dynamics 365 Business Central on-premises RCE ([CVE-2026-55944](https://nvd.nist.gov/vuln/detail/CVE-2026-55944 "NVD: CVE-2026-55944"), 9.8). Several of these are network-reachable and score at the top of the CVSS range. Treat this as a significant but routine patching cycle. Two exploited vulnerabilities and one prior disclosure mean prioritization matters, but nothing here points to a coordinated zero-day emergency. Plan your rollout by severity and exposure, starting with internet-facing servers. ## Which Vulnerabilities Pose Immediate Risk to Your Environment Start triage with the two vulnerabilities that are already under active exploitation and the one that was publicly disclosed before release. In a batch of 622 fixes, these three set your patching order regardless of raw CVSS score, because attacker interest — not theoretical severity — determines what gets hit first. The two flagged with prior public awareness are **[CVE-2026-56155](https://nvd.nist.gov/vuln/detail/CVE-2026-56155 "NVD: CVE-2026-56155")**, an Active Directory Federation Services elevation-of-privilege vulnerability (CVSS 7.8), and **[CVE-2026-56164](https://nvd.nist.gov/vuln/detail/CVE-2026-56164 "NVD: CVE-2026-56164")**, a SharePoint Server elevation-of-privilege issue rated Moderate (CVSS 5.3). Both carry a "Yes" in the exploitation-awareness column. AD FS handles federated authentication, so privilege escalation there lets an attacker mint or elevate tokens across trusting applications — a foothold that reaches well beyond a single host. **[CVE-2026-50661](https://nvd.nist.gov/vuln/detail/CVE-2026-50661 "NVD: CVE-2026-50661")**, a Windows BitLocker security-feature-bypass (CVSS 6.1), was disclosed before Patch Tuesday. It requires local access, so the risk concentrates on lost or stolen laptops and shared-tenancy hardware rather than remote attackers. ### Highest-CVSS network-reachable flaws Several critical remote code execution bugs sit at the top of the score range and require no local access. These are the ones an attacker can reach across the network: - **[CVE-2026-56159](https://nvd.nist.gov/vuln/detail/CVE-2026-56159 "NVD: CVE-2026-56159")** — DHCP Server RCE (CVSS 9.8). A malformed DHCP exchange can execute code on the server that hands out addresses. - **CVE-2026-50522** and **CVE-2026-58644** — SharePoint Server RCE (both CVSS 9.8). SharePoint remains a repeat target because it is internet-facing in many deployments and holds sensitive documents. - **CVE-2026-55944** — Dynamics NAV / Dynamics 365 Business Central (On-Premises) RCE (CVSS 9.8). - **CVE-2026-50518** — Windows DHCP Server RCE (CVSS 9.8). - **[CVE-2026-49172](https://nvd.nist.gov/vuln/detail/CVE-2026-49172 "NVD: CVE-2026-49172")** — Windows FTP Service RCE (CVSS 9.8). - **[CVE-2026-56190](https://nvd.nist.gov/vuln/detail/CVE-2026-56190 "NVD: CVE-2026-56190")** — Remote Desktop Protocol RCE (CVSS 9.8), and **[CVE-2026-54990](https://nvd.nist.gov/vuln/detail/CVE-2026-54990 "NVD: CVE-2026-54990")**, a Remote Desktop Client RCE at the same score. - **[CVE-2026-55010](https://nvd.nist.gov/vuln/detail/CVE-2026-55010 "NVD: CVE-2026-55010")** — Minecraft Bedrock Dedicated Server RCE (CVSS 9.8), which Microsoft notes requires no customer action. Exchange Server also draws attention: **[CVE-2026-55008](https://nvd.nist.gov/vuln/detail/CVE-2026-55008 "NVD: CVE-2026-55008")** is a spoofing vulnerability rated Critical (CVSS 9.6), and **[CVE-2026-55005](https://nvd.nist.gov/vuln/detail/CVE-2026-55005 "NVD: CVE-2026-55005")** is an RCE (CVSS 8.8). For any organization running Exchange on-premises, mail-flow servers reachable from the internet are the practical exposure here. ### The AI-adjacent vulnerabilities This cycle stands out for the number of AI-service and Copilot bugs. Several carry very high scores. **CVE-2026-45499**, an Azure OpenAI elevation-of-privilege flaw, tops the list at CVSS 9.9, though Microsoft states no customer action is required. **[CVE-2026-57100](https://nvd.nist.gov/vuln/detail/CVE-2026-57100 "NVD: CVE-2026-57100")** (Microsoft Entra Provisioning Service EoP, CVSS 9.9) and **CVE-2026-41106** (Microsoft 365 Copilot EoP, CVSS 9.3) are both handled service-side. The ones that do touch your endpoints and developer workflows are more relevant to your patch queue: - **CVE-2026-48561** — Microsoft Copilot RCE (CVSS 9.6). - **[CVE-2026-50510](https://nvd.nist.gov/vuln/detail/CVE-2026-50510 "NVD: CVE-2026-50510")** — GitHub Copilot RCE, and **[CVE-2026-41109](https://nvd.nist.gov/vuln/detail/CVE-2026-41109 "NVD: CVE-2026-41109")**, a Copilot/VS Code security-feature-bypass (CVSS 8.8). - **[CVE-2026-47282](https://nvd.nist.gov/vuln/detail/CVE-2026-47282 "NVD: CVE-2026-47282")** — GitHub Copilot and VS Code information disclosure (CVSS 6.5), which can leak source or context data from a developer's session. - **[CVE-2026-58617](https://nvd.nist.gov/vuln/detail/CVE-2026-58617 "NVD: CVE-2026-58617")** — M365 Copilot for iOS EoP (CVSS 8.1), and **[CVE-2026-55145](https://nvd.nist.gov/vuln/detail/CVE-2026-55145 "NVD: CVE-2026-55145")**, an Outlook Copilot tampering flaw. > Of the 622 vulnerabilities, 62 are rated critical, one was publicly disclosed before release, and two are already being exploited. For prioritization, the practical order is: patch the two exploited AD FS and SharePoint flaws and the disclosed BitLocker issue first, then the network-reachable CVSS 9.x RCEs on any internet-facing DHCP, FTP, RDP, SharePoint, Exchange, or Dynamics host. The Copilot and developer-tooling bugs affect endpoints where the client software runs, so they follow your normal workstation and IDE update cadence rather than server maintenance windows. ## Operational and Compliance Impact of Delayed Patching The two vulnerabilities already under active exploitation and the one publicly disclosed before release change the math on how long you can wait. Once a fix ships, the vulnerability details become public, and attackers reverse-engineer the patch to build working exploits. Every day a system stays unpatched after that point is a day defenders and attackers both have the same information. For a batch this size — 622 Microsoft vulnerabilities plus 427 Chromium flaws in Edge — you cannot deploy everything in a single maintenance window without risking stability problems. That tension is the core operational cost. Rushed patching of Windows Kernel, Hyper-V, and DHCP Server updates can cause reboots, driver conflicts, and service interruptions on production systems, so you need staged rollouts and tested rollback plans. The alternative — deferring — leaves internet-facing services like the critical **Windows DHCP Server remote code execution flaw (CVE-2026-50518, CVSS 9.8)** and **Windows FTP Service RCE (CVE-2026-49172, CVSS 9.8)** exposed to unauthenticated attackers. The compliance angle is concrete for regulated firms. **SOC 2** and **ISO 27001** both require a documented, timely [patch management](https://captechgroup.com/services/managed-it-solutions "Comprehensive Managed IT Services | Dayton, Columbus, Cincinnati") process, and auditors will ask for evidence that critical vulnerabilities were remediated within defined windows. If you handle payment data, PCI DSS sets its own remediation timelines for critical flaws. Missing those windows is not just a technical gap — it becomes an audit finding that can delay contract renewals or certification. If you are an MSP or software vendor, the exposure multiplies. A single unpatched Exchange or SharePoint server in your managed fleet can serve as the entry point that reaches every client behind it. The critical **SharePoint remote code execution vulnerabilities (CVE-2026-50522 and CVE-2026-58644, both CVSS 9.8)** sit on servers that often store shared documents across an entire client base, so one compromise touches many downstream organizations. Your service contracts likely carry breach-notification and remediation obligations, and failing to meet them turns a technical incident into a contractual dispute. The financial reality of reactive response is straightforward. Incident response after a breach exploiting an unpatched Windows flaw costs far more than the labor to test and deploy the fix ahead of time — forensic investigation, legal review, customer notification, and credit-monitoring obligations all stack on top of the recovery work itself. Once Microsoft ships a fix, the vulnerability details are public. The window between patch release and exploit availability is measured in days, not months — and for the flaws already being exploited this cycle, that window is already closed. Reputational damage lands hardest when a breach traces back to a vulnerability disclosed weeks or months earlier. Regulators, customers, and cyber-insurance carriers all treat a known, unpatched flaw differently from a novel zero-day. Your insurer may reduce or deny a claim if you cannot show reasonable patching diligence, and a breach tied to a disclosed CVE undercuts the "reasonable care" position you would rely on in litigation. For both IT leadership and risk officers, the practical takeaway is prioritization. You do not need all 622 fixes deployed at once, but the internet-facing RCE flaws and the actively exploited privilege-escalation issues belong at the front of the queue, with documented timelines that satisfy your audit obligations. ## Patching Strategy: Immediate Actions and Deployment Sequencing Start by building an accurate inventory before you touch a single patch. With 622 Microsoft fixes on the table, you cannot sequence deployment intelligently until you know what you actually run. Following the NIST Cybersecurity Framework, work through identification, protection, detection, and recovery in order. In week one, catalog every affected system: Windows client and server editions by build number, Office editions and their update channels, and the Edge versions in use across your fleet. Use **WSUS** or **Microsoft Intune** to pull an authoritative view of Windows patch levels. For Office, confirm whether endpoints sit on the Current Channel, Monthly Enterprise Channel, or Semi-Annual Enterprise Channel, because the deferred channels will not receive these fixes on the same timeline. Verify Edge auto-update is functioning rather than assuming it. Check `edge://settings/help` on a sample of machines and confirm the update service is running. The 427 Chromium-based fixes rolling into Edge matter little if your update channel is stalled behind a proxy or a disabled service. ### Test Before You Deploy Still in week one, push patches to a non-production environment that mirrors real workloads. Three areas break most often and deserve direct testing: - **Office macros and add-ins** — the large batch of Excel, Word, PowerPoint, and OneNote remote-code-execution fixes changes how Office parses files, which can break line-of-business macros and third-party add-ins. - **AI-connected features** — Copilot and GitHub Copilot fixes touch integrations with Visual Studio Code and Microsoft 365; test the workflows your developers and analysts actually use. - **Web-based authentication flows** — the AD FS and federated-authentication fixes can disrupt single sign-on. Test login against your real identity provider, not a lab stub. In environments Capstone manages, **Adlumin** monitors authentication patterns across managed environments, so failed federated logins after a patch surface as anomalies rather than scattered helpdesk tickets. ### Phased Deployment, Weeks Two to Three Roll out in rings. Start with a pilot group of IT and volunteer users, expand to non-critical departments, then move to production servers last. Domain controllers, Exchange, SQL Server, and SharePoint hosts should trail your workstation rollout so you catch instability before it reaches shared infrastructure. Two blockers will slow you down. Legacy systems that cannot accept current patches should be isolated on segmented network zones with tightened access rules until they can be replaced or upgraded. Third-party application compatibility is the other; hold any application whose vendor has not confirmed support for the current Windows or .NET update, and stage it in a later ring. ### Monitoring and Rollback Set clear failure signals before deployment so you are not debating mid-incident. Watch for these after each ring: - Repeated application crashes in the Windows Event Log (Application error, event IDs in the 1000 range). - Service start failures and boot-configuration errors, which matter given the Secure Boot and Boot Loader fixes in this batch. - A spike in authentication errors on domain controllers and AD FS servers. Keep a documented rollback path for each ring. For Windows quality updates, uninstall through `wusa /uninstall /kb:` or roll back via Intune, and stage a known-good system image for hosts where uninstalling is not clean. Tested, offsite backups taken before the maintenance window give you a recovery point if a server-side patch destabilizes a critical service. Confirm those backups restore correctly rather than assuming the job completed. ## Detection and Monitoring for Exploitation Attempts Start by turning on process-creation logging before you finish deploying patches, because the window between a fix shipping and a working exploit landing is when your telemetry matters most. Configure **Windows Event ID 4688** (process creation with command line) and deploy **Sysmon** with a tuned config across your fleet. Without command-line capture, you cannot reconstruct what an attacker actually ran on a compromised host. Given the Office remote-code-execution flaws in this batch — including the several rated Critical across Word, Excel, and PowerPoint — hunt for Office applications spawning child processes they have no business launching. Watch for `winword.exe`, `excel.exe`, or `powerpnt.exe` spawning `cmd.exe`, `powershell.exe`, `mshta.exe`, or `wscript.exe`. That parent-child relationship is one of the most reliable early signals of document-based exploitation. - **PowerShell obfuscation:** Encoded commands (`-enc`), download cradles, and execution-policy bypass flags. Enable Script Block Logging (Event ID 4104) to capture the deobfuscated content. - **Unusual outbound connections:** Office or scripting processes reaching external hosts, especially over non-standard ports or to newly registered domains. - **Named-pipe and RPC activity:** Relevant to the Active Directory, Netlogon, and MSMQ remote-code-execution fixes, where privilege escalation follows initial access. ### AI-specific signals to watch This release patches multiple Copilot and Azure OpenAI vulnerabilities, including the Microsoft Copilot remote-code-execution flaw **CVE-2026-48561** (CVSS 9.6) and the GitHub Copilot remote-code-execution issue **CVE-2026-50510**. AI integrations introduce data flows that traditional monitoring rules were never written to inspect. - **Anomalous inference requests:** Unexpected volume or timing of model calls from developer tooling or Office add-ins, which can indicate prompt-injection or abuse of an embedded assistant. - **Unexpected data serialization:** Objects being serialized or deserialized in AI-connected processes, a common path to code execution in these components. - **Unusual memory allocations:** Large or repeated allocations in processes tied to Copilot or Visual Studio Code, which can precede exploitation of the code-integrity and graphics-kernel flaws also fixed this cycle. Pull telemetry from your [EDR](https://captechgroup.com/services/cybersecurity-services "Cybersecurity Services | Protect Your Business with Capstone Technologies"), Sysmon, and Windows Event Logs into a single searchable store, and set retention long enough to investigate an intrusion that started weeks before you noticed it. **SentinelOne** flags and blocks the Office-spawning-shell and script-injection behavior described above across managed environments, catching exploitation attempts even where a specific patch has not yet deployed. Tune alerts to reduce noise so real signals surface. Suppress known-good parent-child pairs (legitimate macros, admin scripts) and alert on the exceptions. Alert fatigue is the reason early exploitation gets missed, so a smaller set of high-fidelity rules beats a flood of low-confidence ones. ### If you detect exploitation - **Isolate** the affected host from the network while preserving it for analysis — do not power it off. - **Capture** volatile data: running processes, network connections, and memory before they are lost. - **Identify** the initial access vector (malicious document, exposed service, AI integration) and check whether the relevant patch was applied. - **Reset** credentials for any account active on the host, and review authentication logs for lateral movement. - **Hunt** for the same indicators across the rest of your fleet, since one confirmed host rarely stands alone. Document what you find and feed it back into your detection rules. The indicators from a real incident in your environment are more valuable than any generic signature list. ## The Single Most Important Action This Week The single most important action this week is to build an accurate picture of what you actually run before you touch the 622 fixes in this release. You cannot prioritize sensibly until you know which Windows builds, Office channels, and server products sit in your environment. Catalog your estate by version and build number, then sort by exposure. Systems that face the network or handle sensitive data move to the front of the line — that includes anything running **Exchange Server**, **SharePoint Server**, **SQL Server**, and Windows DHCP or DNS roles, several of which carry Critical remote-code-execution ratings this month. Internal workstations with no inbound exposure can follow in a later wave. Treat this as what it is: a large but ordinary maintenance cycle. The size of the batch makes deliberate scheduling worthwhile, but it does not call for emergency downtime or off-hours heroics. A staged rollout — test ring, pilot group, then broad deployment — gets you current without introducing stability problems across your fleet. Keep in mind that patch management is a continuous process, not a monthly scramble. A release this large is easier to absorb when your inventory is already accurate and your deployment rings are already defined, so the work you do this week pays off every subsequent Patch Tuesday. For final confirmation of affected products, exact patch identifiers, and the fixed builds for your specific configurations, consult Microsoft's official Security Update Guide. The advisory is the authoritative reference for which updates apply to your systems and should be your source of truth before deployment. ```json { "@context": "http://schema.org", "@graph": [ { "@type": "Article", "author": { "@id": "https://captechgroup.com/#brian_0fd5dfcdbc" }, "dateModified": "2026-07-18T12:36:50Z", "datePublished": "2026-07-18T12:36:50Z", "description": "Microsoft releases 92 CVEs on July 14, 2026 Patch Tuesday including critical AI-related vulnerabilities in Windows and Office. Patch immediately.", "headline": "Microsoft Patch Tuesday July 2026 AI Vulnerabilities Hit Windows and Office", "image": { "@id": "https://captechgroup.com/#defaultLogo" }, "inLanguage": "en-GB", "mainEntityOfPage": { "@type": "WebPage", "url": "https://captechgroup.com/threat-intelligence-center/microsoft-patch-tuesday-july-2026-ai-vulnerabiliti-cb6936" }, "publisher": { "@id": "https://captechgroup.com/#defaultPublisher" }, "url": "https://captechgroup.com/threat-intelligence-center/microsoft-patch-tuesday-july-2026-ai-vulnerabiliti-cb6936" }, { "@type": "Person", "name": "Brian", "@id": "https://captechgroup.com/#brian_0fd5dfcdbc" }, { "@id": "https://captechgroup.com/#defaultLogo", "@type": "ImageObject", "url": "https://captechgroup.com/images/hotlink-ok/logo-light.jpg", "width": 1300, "height": 300 }, { "@id": "https://captechgroup.com/#defaultPublisher", "@type": "Organization", "url": "https://captechgroup.com/", "logo": { "@id": "https://captechgroup.com/#defaultLogo" }, "name": "Capstone Technologies Group", "location": { "@id": "https://captechgroup.com/#defaultPlace" } }, { "@id": "https://captechgroup.com/#defaultPlace", "@type": "Place", "address": { "@id": "https://captechgroup.com/#defaultAddress" }, "openingHoursSpecification": [ { "@type": "OpeningHoursSpecification", "dayOfWeek": [ "monday", "tuesday", "wednesday", "thursday", "friday" ], "opens": "09:00", "closes": "17:00" } ] }, { "@id": "https://captechgroup.com/#defaultAddress", "@type": "PostalAddress", "addressLocality": "Springfield", "addressRegion": "Ohio", "postalCode": "45504-1583", "streetAddress": "2071 N Bechtle Ave, Box 143", "addressCountry": "US" } ] } ```