Microsoft has rolled out a major July security update for Windows, addressing a record 570 vulnerabilities across its software ecosystem. The patch includes fixes for three zero-day flaws, two of which were already being exploited, while one had been publicly disclosed before the update arrived.
What the update covers
The latest Patch Tuesday release spans multiple risk categories, including privilege escalation, remote code execution, information disclosure, spoofing, and denial-of-service issues. Among the total, 59 vulnerabilities are rated critical, underscoring the scale of this month's security effort.
One of the zero-days affects Active Directory Federation Services and could let an attacker gain elevated privileges on a local machine. Another targets SharePoint Server, where an authentication weakness may allow unauthorized privilege escalation over a network. The third concerns Windows BitLocker and could expose encrypted data if an attacker has physical access to the device.
How users can apply the fix
Windows systems usually receive Patch Tuesday updates automatically, but users can also check manually through Start > Settings > Windows Update > Check for Windows updates. Installing the latest patch promptly helps keep devices aligned with Microsoft's newest protections.
As digital systems become more connected, rapid security updates like this will continue to shape a safer and more resilient computing future.
