Dev.to
7/15/2026

Patch Tuesday Just Broke Its Own Record, and Two Kernel Bugs Turned 15 in the Same Week
Short summary
Microsoft shipped its largest-ever Patch Tuesday with 570-622 CVEs including three zero-days, two actively exploited. Two long-lived Linux kernel vulnerabilities were also disclosed: Januscape, a 16-year-old KVM guest-to-host escape affecting Intel and AMD, and GhostLock, a 15-year-old real-time mutex bug. Kerberos RC4 support was permanently removed, which may break legacy service account authentication.
- •Microsoft's largest Patch Tuesday: 570-622 CVEs, 3 zero-days, 2 actively exploited
- •Januscape: 16-year-old KVM escape, first guest-to-host on both Intel and AMD
- •Kerberos RC4 permanently removed — audit service accounts before they fail
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



