The Windows 11 July 2026 security update is out, and it sets a record: Microsoft’s July 14 Patch Tuesday fixes 570 vulnerabilities in a single month — the largest security release the company has ever shipped, and roughly four times the 137 it patched in July 2025. On Windows 11 24H2 and 25H2, the fix arrives as KB5101650 (OS builds 26100.8875 and 26200.8875), so nearly every Windows 11 PC in use today is covered by the same package.
This is the same monthly cumulative update that also switched on several new features — Point-in-Time Restore, a pause-updates calendar and a faster File Explorer among them. We covered those separately; if that’s what you’re after, here is the full list of new features in this update. This post is about the security side.
What’s in the Windows 11 July 2026 security update
Of the 570 flaws, 59 are rated Critical — 48 remote code execution, 9 elevation of privilege, 1 security bypass and 1 spoofing. For context, Microsoft has now patched 1,308 vulnerabilities so far in 2026, against 680 over the same stretch of 2025. Microsoft executive Pavan Davuluri said the pace of vulnerability discovery is changing with advances in AI — which appears to be pushing the numbers up on both the defence and the attacker side.
Three zero-days — but only one matters to home users
Three of this month’s fixes were for zero-day flaws, and the distinction between them matters. Two are being actively exploited in the wild and are already in CISA’s Known Exploited Vulnerabilities catalogue: CVE-2026-56155, an elevation-of-privilege bug in Active Directory Federation Services, and CVE-2026-56164, an elevation-of-privilege bug in SharePoint Server. Both are enterprise server products. If you run an ordinary home or personal laptop, you almost certainly don’t have either installed — so despite the alarming “actively exploited” label, your PC is not the target here.
The third is the one to pay attention to. CVE-2026-50661 is a security-feature bypass in BitLocker, the full-disk encryption built into Windows 11 laptops. It has been publicly disclosed, but Microsoft says it is not currently known to be under active exploitation, and exploiting it requires physical access to the device. In plain terms: someone who has your laptop in their hands could potentially bypass BitLocker and read your encrypted data. For readers in India, where the realistic risk is a laptop lost or stolen in a cab, at the airport or from an office desk — not a remote hack — this is the fix worth installing promptly.
Windows 10 users
Windows 10 reached end of support on October 14, 2025. If you’re still on it through the Extended Security Updates programme, your equivalent fix this month is KB5099539. Not enrolled and unsure whether you qualify? See our separate Windows 10 ESU guide for the enrolment details.
Should you install it right now?
There’s no need to panic-install within hours — the two actively exploited bugs don’t touch home PCs. But don’t sit on it for weeks either. Let it install within the next few days during a normal restart, and treat the BitLocker fix as a good reason not to defer. To install now, go to Settings > Windows Update > Check for updates. Keeping automatic updates on means this happens without you lifting a finger.
One habit worth keeping with a patch this large: on a machine you can’t afford to have go sideways, make sure you have a backup or a fresh restore point first. No problems have been reported with this release — it’s simply prudent when hundreds of fixes land at once.
Sources: Microsoft, BleepingComputer, Krebs on Security, Qualys
