Microsoft · Security update · July 14, 2026
KB5099444: July 2026 security update
KB5099444, released July 14, 2026, fixes 182 CVEs across 2 products. 2 of them are being exploited (CVE-2026-32202); 2 on CISA KEV. Patch Radar priority: Patch now.
Patch now2 on CISA KEV
CVEs closed
182
19 rated Critical
Exploited
2
CVE-2026-32202
Exploitation more likely
21
Vendor assessment
Highest EPSS
0.7090
99th percentile
Priority of the 182 CVEs
Patch now 2
Urgent 35
High 97
Routine 48
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2026-32202 | Windows Shell | Spoofing | 4.3 | 0.7090 | KEVExploited |
| Patch now | CVE-2026-56155 | Active Directory Federation Services (AD FS) | Elevation of Privilege | 7.8 | 0.0035 | KEVExploited |
| Urgent | CVE-2026-50518 | Windows DHCP Server | Remote Code Execution | 9.8 | 0.0097 | More likely |
| Urgent | CVE-2026-56159 | Windows DHCP Server | Remote Code Execution | 9.8 | 0.0097 | Exploitation Unlikely |
| Urgent | CVE-2026-57092 | Windows VMSwitch | Elevation of Privilege | 9.9 | 0.0091 | Exploitation Less Likely |
| Urgent | CVE-2026-50380 | Windows GDI+ | Remote Code Execution | 9.6 | 0.0082 | Exploitation Less Likely |
| Urgent | CVE-2026-50474 | Remote Desktop Client | Remote Code Execution | 8.8 | 0.0082 | Exploitation Unlikely |
| Urgent | CVE-2026-49164 | Active Directory Domain Services | Remote Code Execution | 8.1 | 0.0079 | Exploitation Unlikely |
| Urgent | CVE-2026-50694 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0079 | Exploitation Unlikely |
| Urgent | CVE-2026-54995 | Reliable Multicast Transport Driver (RMCAST) | Remote Code Execution | 8.1 | 0.0079 | Exploitation Unlikely |
| Urgent | CVE-2026-50444 | Windows Server Update Service | Elevation of Privilege | 8.8 | 0.0078 | Exploitation Less Likely |
| Urgent | CVE-2026-54121 | Active Directory Certificate Services (AD CS) | Elevation of Privilege | 8.8 | 0.0078 | Exploitation Less Likely |
| Urgent | CVE-2026-56188 | Windows Server Network driver | Remote Code Execution | 9.8 | 0.0061 | More likely |
| Urgent | CVE-2026-58608 | Windows Print Spooler Components | Remote Code Execution | 8.8 | 0.0057 | Exploitation Less Likely |
| Urgent | CVE-2026-54982 | Reliable Multicast Transport Driver (RMCAST) | Remote Code Execution | 8.8 | 0.0054 | Exploitation Less Likely |
| Urgent | CVE-2026-58531 | Windows SMB | Elevation of Privilege | 7.5 | 0.0051 | More likely |
| Urgent | CVE-2026-50370 | Windows DHCP Server | Remote Code Execution | 8.8 | 0.0050 | More likely |
| Urgent | CVE-2026-49796 | Windows GDI+ | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| Urgent | CVE-2026-54999 | Windows TCP/IP | Remote Code Execution | 8.8 | 0.0041 | Exploitation Less Likely |
| Urgent | CVE-2026-56189 | Microsoft Windows Media Foundation | Remote Code Execution | 7.8 | 0.0039 | Exploitation Less Likely |
| Urgent | CVE-2026-50475 | Windows Kernel | Information Disclosure | 5.5 | 0.0038 | More likely |
| Urgent | CVE-2026-49798 | Windows Kernel | Elevation of Privilege | 9.3 | 0.0036 | More likely |
| Urgent | CVE-2026-54128 | Windows DHCP Client | Remote Code Execution | 8.4 | 0.0036 | More likely |
| Urgent | CVE-2026-54992 | Windows Message Queuing Queue Manager | Remote Code Execution | 8.4 | 0.0034 | More likely |
| Urgent | CVE-2026-50489 | Windows Win32K | Elevation of Privilege | 8.8 | 0.0033 | More likely |
Showing 1 to 25 of 182
1Next