Microsoft just shipped its biggest Patch Tuesday ever — 569 fixes, 3 zero-days, and the ones that matter

569 CVEs in a single month is a record, and the number is almost useless on its own. Here's the signal in the noise: the three zero-days and the… Aliteq Priya Nair · Software & Systems Editor

569 CVEs — a record — but volume is not priority. Triage by exploitation and exposure, not count.

The signal in the noise

Three zero-days actively exploited — patch these first, everywhere they apply.

The signal in the noise

CVE-2026-56155 — AD FS elevation of privilege (identity layer). Top priority.

The signal in the noise

CVE-2026-50522 — SharePoint unauth RCE (9.8), exploited after public PoC.

The signal in the noise

56 critical CVEs — focus on unauthenticated, internet-reachable RCEs first.

The signal in the noise

Read the full story

Aliteq Microsoft just shipped its biggest Patch Tuesday ever — 569 fixes, 3 zero-days, and the ones that matter Read the full story on Aliteq