Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days
2026-07-14T19:24:03Z•022b7dd9a6dff96e536b9e7de619c4d24e2d58b9b998ef8707ec4f0d4ad714c0
active-directoryadobebitlockerboschchrome-extensionsclaude-bleedcmmccoldfusioncritical-infrastructurejscramblermicrosoftnetweavernpmpentagonroutersrussian-aptsapsharepointsupply-chainsynopsysvmware-avizero-day
What happened
SecurityWeek roundup: Microsoft released patches addressing a record 622 vulnerabilities including two actively exploited zero-days (Active Directory and SharePoint) and a publicly disclosed BitLocker issue. Adobe issued critical ColdFusion fixes; VMware patched seven severe Avi load balancer flaws (auth bypass, RCE, privilege escalation, directory traversal); and SAP repaired critical defects in NetWeaver, Approuter and Commerce Cloud. Separately, a Claude-for-Chrome extension flaw (ClaudeBleed-linked) can expose Gmail/Calendar data to other extensions; multiple Jscrambler NPM packages were l
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 022b7dd9a6dff96e536b9e7de619c4d24e2d58b9b998ef8707ec4f0d4ad714c0
- Enrichment time
- 2026-07-14T19:24:03Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.