Back to feed
Dev.to
Dev.to
7/15/2026
Patch Tuesday Just Broke Its Own Record, and Two Kernel Bugs Turned 15 in the Same Week

Patch Tuesday Just Broke Its Own Record, and Two Kernel Bugs Turned 15 in the Same Week

Short summary

Microsoft shipped its largest-ever Patch Tuesday with 570-622 CVEs including three zero-days, two actively exploited. Two long-lived Linux kernel vulnerabilities were also disclosed: Januscape, a 16-year-old KVM guest-to-host escape affecting Intel and AMD, and GhostLock, a 15-year-old real-time mutex bug. Kerberos RC4 support was permanently removed, which may break legacy service account authentication.

  • Microsoft's largest Patch Tuesday: 570-622 CVEs, 3 zero-days, 2 actively exploited
  • Januscape: 16-year-old KVM escape, first guest-to-host on both Intel and AMD
  • Kerberos RC4 permanently removed — audit service accounts before they fail

Generated with AI, which can make mistakes.

Is this a good recommendation for you?

Comments

Failed to load comments. Please try again.

Explore more