Multiple vulnerabilities affecting Microsoft products

Microsoft is a software publisher whose range of products (Windows, Hyper-V, SharePoint Server, Active Directory Federation Services, BitLocker, etc.) is widely deployed in professional environments. As part of its July 2026 Patch Tuesday, Microsoft corrected more than 500 vulnerabilities, including around thirty classified as critical, as well as three (03) zero-day vulnerabilities. These products are affected by several vulnerabilities labeled as follows: CVE-2026-56190 (CVSS 9.8): Remote code execution via the RDP Server component; CVE-2026-57092 (CVSS 9.9): Privilege escalation via Windows Hyper-V Virtual Switch (VMSwitch); CVE-2026-55040 (CVSS 9.1): Critical authentication bypass via Microsoft SharePoint Server. ZERO-DAY Vulnerabilities CVE-2026-56155 (CVSS 7.8): Privilege escalation via Active Directory Federation Services (AD FS); CVE-2026-56164 (CVSS 5.3): Privilege escalation via Microsoft SharePoint Server; CVE-2026-50661 (CVSS 6.1): Security feature bypass via Windows BitLocker leading to access to encrypted disk data through physical access to the device. Given the criticality of these vulnerabilities, their active exploitation as well as the public disclosure of some of them, it is strongly recommended to apply the security updates published by Microsoft to all affected products without delay.

• Windows products not having the 07/14/2026 security update;