Microsoft · Security update · July 14, 2026
KB5099539: July 2026 cumulative update for Windows 10 22H2
KB5099539, released July 14, 2026, fixes 310 CVEs across 6 products. One of them is being exploited (CVE-2026-32202); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV1 publicly disclosed
CVEs closed
310
21 rated Critical
Exploited
1
CVE-2026-32202
Exploitation more likely
30
Vendor assessment
Highest EPSS
0.7090
99th percentile
Priority of the 310 CVEs
Patch now 1
Urgent 47
High 176
Routine 86
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2026-32202 | Windows Shell | Spoofing | 4.3 | 0.7090 | KEVExploited |
| Urgent | CVE-2026-50509 | Windows Wireless Wide Area Network Service | Elevation of Privilege | 7.8 | 0.0353 | More likely |
| Urgent | CVE-2026-57092 | Windows VMSwitch | Elevation of Privilege | 9.9 | 0.0091 | Exploitation Less Likely |
| Urgent | CVE-2026-50380 | Windows GDI+ | Remote Code Execution | 9.6 | 0.0082 | Exploitation Less Likely |
| Urgent | CVE-2026-50474 | Remote Desktop Client | Remote Code Execution | 8.8 | 0.0082 | Exploitation Unlikely |
| Urgent | CVE-2026-57090 | Microsoft Windows Media Foundation | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| Urgent | CVE-2026-57094 | Microsoft Windows Media Foundation | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| Urgent | CVE-2026-57087 | Microsoft Windows Media Foundation | Remote Code Execution | 8.8 | 0.0079 | Exploitation Less Likely |
| Urgent | CVE-2026-49164 | Active Directory Domain Services | Remote Code Execution | 8.1 | 0.0079 | Exploitation Unlikely |
| Urgent | CVE-2026-50694 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0079 | Exploitation Unlikely |
| Urgent | CVE-2026-54995 | Reliable Multicast Transport Driver (RMCAST) | Remote Code Execution | 8.1 | 0.0079 | Exploitation Unlikely |
| Urgent | CVE-2026-56188 | Windows Server Network driver | Remote Code Execution | 9.8 | 0.0061 | More likely |
| Urgent | CVE-2026-58608 | Windows Print Spooler Components | Remote Code Execution | 8.8 | 0.0057 | Exploitation Less Likely |
| Urgent | CVE-2026-54982 | Reliable Multicast Transport Driver (RMCAST) | Remote Code Execution | 8.8 | 0.0054 | Exploitation Less Likely |
| Urgent | CVE-2026-58531 | Windows SMB | Elevation of Privilege | 7.5 | 0.0051 | More likely |
| Urgent | CVE-2026-49796 | Windows GDI+ | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| Urgent | CVE-2026-50655 | Windows Media | Remote Code Execution | 7.8 | 0.0047 | More likely |
| Urgent | CVE-2026-54999 | Windows TCP/IP | Remote Code Execution | 8.8 | 0.0041 | Exploitation Less Likely |
| Urgent | CVE-2026-56189 | Microsoft Windows Media Foundation | Remote Code Execution | 7.8 | 0.0039 | Exploitation Less Likely |
| Urgent | CVE-2026-50475 | Windows Kernel | Information Disclosure | 5.5 | 0.0038 | More likely |
| Urgent | CVE-2026-49798 | Windows Kernel | Elevation of Privilege | 9.3 | 0.0036 | More likely |
| Urgent | CVE-2026-54128 | Windows DHCP Client | Remote Code Execution | 8.4 | 0.0036 | More likely |
| Urgent | CVE-2026-50680 | Windows Hyper-V | Elevation of Privilege | 8.2 | 0.0034 | Exploitation Less Likely |
| Urgent | CVE-2026-54992 | Windows Message Queuing Queue Manager | Remote Code Execution | 8.4 | 0.0034 | More likely |
| Urgent | CVE-2026-49795 | Windows Kernel | Elevation of Privilege | 8.8 | 0.0033 | More likely |
Showing 1 to 25 of 310
1Next