Microsoft patches record 570 security flaws, cites AI in discovery
7 reported
Microsoft released a record number of security patches this week, addressing 570 vulnerabilities across Windows, Office, and other product lines. The company cited its use of artificial intelligence to help discover the flaws. The patches were issued on Tuesday as part of Microsoft’s monthly scheduled release, known as “Patch Tuesday.” At least two of the vulnerabilities are classified as zero-days, meaning they were exploited before Microsoft was aware of them. One bug affects Windows Server, allowing hackers to escalate privileges from a limited user to a system administrator. Another bug affects the SharePoint file sharing server, and the U.S. government’s cybersecurity agency CISA has warned that hackers were actively exploiting it to compromise organizations. Krebs on Security first reported the news. Microsoft had indicated in a blog post the previous week that it expected a higher number of monthly patches due to AI-assisted discovery.
What’s reported
Microsoft issued patches for 570 security flaws on Tuesday, July 15, 2026.
The company cited the use of AI to aid discovery of code vulnerabilities.
At least two vulnerabilities are zero-days, exploited before Microsoft knew of them.
One zero-day bug in Windows Server allows privilege escalation from limited user to system administrator.
Another zero-day bug affects SharePoint file sharing server; CISA warned of active exploitation.
Krebs on Security first reported the news.
Microsoft’s Windows boss Pavan Davuluri stated: “As AI helps defenders discover more issues, customers will see a higher volume of security updates included in each security release.”
Key figures
Pavan Davuluri, Windows boss at Microsoft
CISA (U.S. government’s cybersecurity agency)
Sources: TechCrunch
