Patch Tuesday Just Broke Its Own Record, and Two Kernel Bugs Turned 15 in the Same Week

If you blinked this week, you missed a lot. It's July 15, 2026, and the last seven days have quietly been one of the densest stretches in recent memory for anyone who cares about what's happening below the application layer: the biggest Patch Tuesday Microsoft has ever shipped, two Linux kernel vulnerabilities that have been sitting untouched since the early 2010s, and an OpenSSH release that looks boring right up until you read the second paragraph.

Here's the roundup, with the parts that actually matter to us as developers.

Microsoft's biggest Patch Tuesday ever

Tuesday's release is being called Microsoft's largest ever, and depending on whose count you trust — Microsoft's own release notes or Trend Micro's ZDI tracker — the tally lands somewhere between roughly 570 and 622 CVEs across Windows, Office, Exchange Server, SharePoint Server, SQL Server, Azure, and Visual Studio. Windows alone reportedly accounts for the bulk of it.

Three things stood out beyond the raw number: