Microsoft · Security update · July 14, 2026

KB5101650: July 2026 cumulative update for Windows 11 22H2

KB5101650, released July 14, 2026, fixes 374 CVEs across 4 products. One of them is being exploited (CVE-2026-32202); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV1 publicly disclosed
CVEs closed
374
25 rated Critical
Exploited
1
CVE-2026-32202
Exploitation more likely
31
Vendor assessment
Highest EPSS
0.7090
99th percentile

Priority of the 374 CVEs

Patch now 1 Urgent 51 High 229 Routine 93

Applies to

Product
Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 24H2 for x64-based Systems
Windows 11 Version 25H2 for ARM64-based Systems
Windows 11 Version 25H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2026-32202 Windows Shell Spoofing 4.3 0.7090 KEVExploited
Urgent CVE-2026-50509 Windows Wireless Wide Area Network Service Elevation of Privilege 7.8 0.0353 More likely
Urgent CVE-2026-57092 Windows VMSwitch Elevation of Privilege 9.9 0.0091 Exploitation Less Likely
Urgent CVE-2026-50380 Windows GDI+ Remote Code Execution 9.6 0.0082 Exploitation Less Likely
Urgent CVE-2026-50474 Remote Desktop Client Remote Code Execution 8.8 0.0082 Exploitation Unlikely
Urgent CVE-2026-57090 Microsoft Windows Media Foundation Remote Code Execution 8.8 0.0082 Exploitation Less Likely
Urgent CVE-2026-57094 Microsoft Windows Media Foundation Remote Code Execution 8.8 0.0082 Exploitation Less Likely
Urgent CVE-2026-57087 Microsoft Windows Media Foundation Remote Code Execution 8.8 0.0079 Exploitation Less Likely
Urgent CVE-2026-49164 Active Directory Domain Services Remote Code Execution 8.1 0.0079 Exploitation Unlikely
Urgent CVE-2026-50694 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0079 Exploitation Unlikely
Urgent CVE-2026-54995 Reliable Multicast Transport Driver (RMCAST) Remote Code Execution 8.1 0.0079 Exploitation Unlikely
Urgent CVE-2026-56188 Windows Server Network driver Remote Code Execution 9.8 0.0061 More likely
Urgent CVE-2026-58608 Windows Print Spooler Components Remote Code Execution 8.8 0.0057 Exploitation Less Likely
Urgent CVE-2026-54982 Reliable Multicast Transport Driver (RMCAST) Remote Code Execution 8.8 0.0054 Exploitation Less Likely
Urgent CVE-2026-58531 Windows SMB Elevation of Privilege 7.5 0.0051 More likely
Urgent CVE-2026-49796 Windows GDI+ Remote Code Execution 7.8 0.0047 Exploitation Less Likely
Urgent CVE-2026-50655 Windows Media Remote Code Execution 7.8 0.0047 More likely
Urgent CVE-2026-54999 Windows TCP/IP Remote Code Execution 8.8 0.0041 Exploitation Less Likely
Urgent CVE-2026-56189 Microsoft Windows Media Foundation Remote Code Execution 7.8 0.0039 Exploitation Less Likely
Urgent CVE-2026-50475 Windows Kernel Information Disclosure 5.5 0.0038 More likely
Urgent CVE-2026-49798 Windows Kernel Elevation of Privilege 9.3 0.0036 More likely
Urgent CVE-2026-54128 Windows DHCP Client Remote Code Execution 8.4 0.0036 More likely
Urgent CVE-2026-58542 Windows Media Remote Code Execution 7.8 0.0036 Exploitation Unlikely
Urgent CVE-2026-50680 Windows Hyper-V Elevation of Privilege 8.2 0.0034 Exploitation Less Likely
Urgent CVE-2026-54992 Windows Message Queuing Queue Manager Remote Code Execution 8.4 0.0034 More likely
Showing 1 to 25 of 374 1Next