Skip to the content
The Update Bureau

Monthly Patch Briefing

July 2026

61 updates released this month .

Updates, page 2

Updates, page 2:
  • Windows Server · 2022
    Windows Server 2022 Windows Server 2022 Security update
    Zero-day Updated
    KB5099540

    Exploited AD FS flaw patched; BitLocker recovery prompt remains possible

    An actively exploited AD FS elevation flaw and a Windows Shell spoofing flaw get security fixes. Check BitLocker settings before installing on affected managed servers.

    Build 20348.5386
    Security 327 CVEs 28 critical 2 exploited
    Known issues 2 open
    Replaced by KB5120242 →
  • Windows Server · 2019
    Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day Updated
    KB5099538

    Exploited AD FS flaw patched; Secure Boot status reporting added

    Attackers are exploiting an AD FS privilege flaw, and the update adds Secure Boot status reporting. It also fixes issues in File Explorer, OLE Automation, and the Recycle Bin.

    Build 17763.9020
    Security 313 CVEs 27 critical 2 exploited
    Replaced by KB5120238 →
  • Windows Server · 2016
    Windows Server 2016 Windows Server 2016 Security update Also for Windows 10
    Zero-day Updated
    KB5099535

    Exploited AD FS flaw prompts new key-container checks

    An actively exploited AD FS privilege flaw gets new key-container checks, alongside fixes for OLE Automation, File Explorer, and Recycle Bin problems.

    Build 14393.9339
    Security 250 CVEs 25 critical 2 exploited
    Replaced by KB5120418 →
  • Exchange Server · RTM
    Exchange Server Subscription Edition RTM Exchange Server Subscription Edition RTM Security update
    KB5103212

    Critical Exchange spoofing flaw addressed; mailbox issue remains

    A critical Exchange spoofing vulnerability is addressed. Hybrid shared mailboxes might still receive wrapper messages after the June security update; KB5121608 or later resolves the issue.

    Build 15.2.2562.45
    Security 11 CVEs 1 critical
    Known issues 1 open
    Replaced by KB5121573 →
  • Exchange Server · CU15
    Exchange Server 2019 CU15 Exchange Server 2019 CU15 ESU only Security update
    KB5103213

    Mail-server spoofing, code-execution and privilege flaws addressed

    Addresses 11 vulnerabilities in Exchange Server, including one Critical flaw. It is available only to organizations enrolled in the Extended Security Update program.

    Build 15.2.1748.48
    Security 11 CVEs 1 critical
    Replaced by KB5121574 →
  • Exchange Server · CU14
    Exchange Server 2019 CU14 Exchange Server 2019 CU14 ESU only Security update
    KB5103214

    Critical mail-server spoofing flaw addressed

    Addresses 11 vulnerabilities in Exchange Server 2019 CU14, including one critical spoofing flaw (CVE-2026-55008). It is available only to organizations enrolled in ESU.

    Build 15.2.1544.43
    Security 11 CVEs 1 critical
    Replaced by KB5121575 →
  • Exchange Server · CU23
    Exchange Server 2016 CU23 Exchange Server 2016 CU23 ESU only Security update
    KB5103215

    Critical mail-server spoofing flaw addressed

    Resolves 11 vulnerabilities in Exchange Server 2016 CU23, including one critical spoofing vulnerability. It is available only to organizations enrolled in the Extended Security Update program.

    Build 15.1.2507.71
    Security 11 CVEs 1 critical
    Replaced by KB5121576 →
  • SQL Server · CU6 + GDR
    SQL Server 2025 CU6 + GDR SQL Server 2025 CU6 + GDR Security update
    KB5101346

    MessageQueueTask blocks unsafe MSMQ deserialization; MSDASQL links fail

    Fixes SQL Server vulnerabilities, including two critical remote code execution flaws. Linked-server queries using MSDASQL and a provider string might fail with error 7416.

    Build 17.0.4060.2
    Security 8 CVEs 2 critical
    Known issues 1 open
    Replaced by KB5122769 →
  • SQL Server · GDR
    SQL Server 2025 GDR SQL Server 2025 GDR Security update
    KB5102333

    Critical remote-code-execution flaws fixed; MSDASQL queries still fail

    The update fixes two critical remote-code-execution vulnerabilities, CVE-2026-54117 and CVE-2026-54118. Linked-server queries using MSDASQL and a provider string can still fail with error 7416.

    Build 17.0.1125.2
    Security 8 CVEs 2 critical
    Known issues 1 open
    Replaced by KB5122770 →
  • SQL Server · CU25 + GDR
    SQL Server 2022 CU25 + GDR SQL Server 2022 CU25 + GDR Security update
    KB5101347

    Some MSDASQL linked-server queries with provider strings fail

    The update fixes four vulnerabilities, including critical SQL Server remote code execution CVE-2026-54118. Linked-server queries using MSDASQL with a provider string can fail with error 7416 in certain configurations.

    Build 16.0.4262.2
    Security 4 CVEs 1 critical
    Known issues 1 open
    Replaced by KB5122768 →
  • SQL Server · GDR
    SQL Server 2022 GDR SQL Server 2022 GDR Security update
    KB5102334

    Remote code execution flaw fixed; MSDASQL links can fail

    Fixes four vulnerabilities, including a critical SQL Server remote code execution flaw. Linked server queries using MSDASQL and a provider string might fail with error 7416.

    Build 16.0.1190.2
    Security 4 CVEs 1 critical
    Known issues 1 open
    Replaced by KB5122771 →
  • SQL Server · CU32 + GDR
    SQL Server 2019 CU32 + GDR SQL Server 2019 CU32 + GDR Security update
    KB5102335

    Critical remote-code flaw fixed; MSDASQL linked queries still fail

    Fixes a critical remote-code execution vulnerability and three other security vulnerabilities. Linked server queries using MSDASQL can still fail with error 7416.

    Build 15.0.4480.2
    Security 4 CVEs 1 critical
    Known issues 1 open
    Replaced by KB5122772 →
  • SQL Server · GDR
    SQL Server 2019 GDR SQL Server 2019 GDR Security update
    KB5102336

    Critical remote-code flaw fixed; MSDASQL queries can fail

    Fixes 4 vulnerabilities, including a Critical remote code execution flaw. Linked server queries using MSDASQL with a provider string might fail with error 7416.

    Build 15.0.2180.2
    Security 4 CVEs 1 critical
    Known issues 1 open
    Replaced by KB5122773 →
  • SQL Server · CU31 + GDR
    SQL Server 2017 CU31 + GDR SQL Server 2017 CU31 + GDR Security update
    KB5102337

    Critical remote-code-execution flaw fixed; linked-server error remains

    The update fixes a critical remote-code-execution vulnerability and three other issues in SQL Server 2017. Linked-server queries using MSDASQL can still fail with error 7416.

    Build 14.0.3540.1
    Security 4 CVEs 1 critical
    Known issues 1 open
    Replaced by KB5122774 →
  • SQL Server · GDR
    SQL Server 2017 GDR SQL Server 2017 GDR Security update
    KB5102338

    Critical remote-code flaw; MSDASQL linked-server queries can fail

    Fixes four vulnerabilities, including a critical SQL Server remote-code execution flaw. Linked-server queries using MSDASQL with a provider string might fail with error 7416.

    Build 14.0.2120.1
    Security 4 CVEs 1 critical
    Known issues 1 open
    Replaced by KB5122775 →
  • SQL Server · SP3 AC + GDR
    SQL Server 2016 SP3 AC + GDR SQL Server 2016 SP3 AC + GDR Security update
    Final update for this version Final update for this version
    KB5102339

    Untrusted MSMQ messages blocked from triggering code execution

    The update patches SQL Server security vulnerabilities, including a critical remote code execution flaw. Linked-server queries using MSDASQL can still fail with error 7416 in certain configurations.

    Build 13.0.7095.1
    Security 4 CVEs 1 critical
    Known issues 1 open
  • SQL Server · SP3 + GDR
    SQL Server 2016 SP3 + GDR SQL Server 2016 SP3 + GDR Security update
    Final update for this version Final update for this version
    KB5102340

    Remote code execution flaw fixed; linked-server queries can fail

    The update fixes four vulnerabilities, including critical remote code execution vulnerability CVE-2026-54118. Linked-server queries using MSDASQL with a provider string can fail with error 7416.

    Build 13.0.6500.1
    Security 4 CVEs 1 critical
    Known issues 1 open
  • SharePoint Server · SE
    SharePoint Server SE SharePoint Server SE Security update
    Zero-day Updated
    KB5002882

    Exploited elevation flaw patched; legacy workflows start again

    An exploited elevation-of-privilege flaw is patched, and SharePoint 2010 workflows that failed to start after June's update work again.

    Build 16.0.19725.20434
    Security 39 CVEs 6 critical 1 exploited
    Known issues 3 open
    Replaced by KB5002893 →
  • SharePoint Server · 2019
    SharePoint Server 2019 SharePoint Server 2019 Security update
    Zero-day Updated
    KB5002883

    Exploited privilege flaw patched; workflow and page fixes

    An actively exploited privilege flaw is patched, alongside fixes for page loading and SharePoint 2010 workflows. Support for version 2019 ends on July 14, 2026.

    Build 16.0.10417.20175
    Security 40 CVEs 6 critical 1 exploited
    Known issues 2 open
    Replaced by KB5002894 →
  • SharePoint Server · 2016
    SharePoint Server 2016 SharePoint Server 2016 Security update
    Zero-day Updated
    KB5002891

    Exploited privilege flaw patched; final update for this version

    Attackers are exploiting a SharePoint Server privilege flaw. This is the final update for this version and includes fixes for critical security vulnerabilities.

    Build 16.0.5561.1001
    Security 40 CVEs 6 critical 1 exploited
    Known issues 3 open
    Replaced by KB5002905 →
  • Office Online Server OOS Office Online Server Security update
    Updated
    KB5002884

    Excel remote code execution and information disclosure flaws fixed

    Excel vulnerabilities that could allow remote code execution or expose information are fixed. Office Online Server updates end on December 31, 2026.

    Build 16.0.10417.20175
    Security 58 CVEs 3 critical
    Replaced by KB5002895 →
  • .NET Framework · 3.5, 4.8.1
    .NET Framework 3.5 / 4.8.1 .NET Framework 3.5 / 4.8.1 for Windows 11 26H1 Security update
    KB5101002

    Fixes hanging HTTP requests and debugger value reports

    Addresses 17 .NET Framework security vulnerabilities and fixes two reliability issues, including HTTP requests that could hang in certain secure connection scenarios.

    Build 4.8.9340.0
    Security 17 CVEs
    Replaced by KB5120711 →
  • .NET Framework · 3.5, 4.8.1
    .NET Framework 3.5 / 4.8.1 .NET Framework 3.5 / 4.8.1 for Windows 11 25H2 · Windows Server 2025 Security update
    KB5100998

    Remote-code execution flaw among 17 vulnerabilities addressed

    Addresses 17 Important .NET vulnerabilities, including a remote-code execution flaw, and two reliability issues. None are rated Critical or known to be publicly disclosed or exploited.

    Builds 4.8.9340.0 2.0.50727.9182
    Security 17 CVEs
    Replaced by KB5120708 →
  • .NET Framework · 3.5, 4.8.1
    .NET Framework 3.5 / 4.8.1 .NET Framework 3.5 / 4.8.1 for Windows 11 24H2 Security update
    KB5101001

    Runtime flaws addressed; secure requests and debugging improved

    The update addresses 17 important vulnerabilities. It also addresses hangs in some secure web requests and wrong values in Visual Studio debugging.

    Builds 4.8.9339.0 2.0.50727.9182
    Security 17 CVEs
    Replaced by KB5120710 →
  • .NET Framework · 3.5, 4.8.1
    .NET Framework 3.5 / 4.8.1 .NET Framework 3.5 / 4.8.1 for Windows 11 23H2 Security update
    KB5101004

    Remote code execution flaw addressed; secure request hangs improved

    The update addresses 17 Important vulnerabilities, including a remote code execution flaw, and two reliability issues involving hanging secure web requests and incorrect debugger reports.

    Builds 4.8.9339.0 2.0.50727.9182
    Security 17 CVEs
    Replaced by KB5120713 →