August's Patch Tuesday lands at 400 fixes — huge, but no new record. Lazarus exploited an afd.sys zero-day to plant a rootkit, LegacyHive gets its patch, and a wormable DNS Server flaw tops the 9.8s.
Microsoft's July Patch Tuesday ships 570 fixes by BleepingComputer's count, 621 by ZDI's — two exploited zero-days in AD FS and SharePoint included. June's all-time record lasted exactly one month, and Microsoft spent the preceding week explaining why: an AI discovery harness now feeds the pipeline, and volumes go up from here.
Five users couldn't reliably hear callers on their softphones, and a day and a half of conventional troubleshooting pinned it to their PCs without explaining it. I pointed Claude Code at a broken machine and a working one. Fifteen minutes later it had the root cause, the fix, and two bonus findings.
A researcher dropped a seventh Windows zero-day hours after Patch Tuesday: RoguePlanet spawns a SYSTEM shell on fully-patched Windows 10 and 11, with no CVE and no fix. The exploit is narrower than it sounds — but the disclosure war that produced it is the part worth watching.
The largest Patch Tuesday ever shipped: roughly 200 vulnerabilities, 33 Critical, three publicly disclosed zero-days, and a CVSS 9.8 in Nuance PowerScribe that radiology shops should not sit on. The Secure Boot certificate deadline is 17 days out — this is the last Patch Tuesday before it.
Microsoft's May Patch Tuesday addresses 120 vulnerabilities and contains no zero-days — the first such month since June 2024. Among the Critical fixes are three RCEs at CVSS 9.8 or higher: Netlogon, Windows DNS Client, and Microsoft Dynamics 365. The Secure Boot certificate deadline is 45 days out.
Microsoft's April Patch Tuesday addresses 163 vulnerabilities — the second-largest monthly release in company history — including an actively exploited SharePoint spoofing zero-day, a publicly disclosed Defender privilege escalation linked to the BlueHammer proof-of-concept, and a wormable TCP/IP RCE. The Secure Boot certificate cliff is 73 days out.
Microsoft's quietest Patch Tuesday in six months addresses 83 vulnerabilities with no active exploits — but a critical Excel flaw that weaponizes Copilot for zero-click data theft deserves attention.
Microsoft's February Patch Tuesday addresses 58 vulnerabilities including six actively exploited zero-days — an unusually high exploitation rate — plus three remote code execution flaws in GitHub Copilot that should worry every developer.
Microsoft's first Patch Tuesday of 2026 addresses 114 vulnerabilities including three zero-days, but also introduces a frustrating shutdown bug affecting Windows 11 systems with Secure Launch enabled.