622 Microsoft Patches, Four Active Exploits, and Your Supply Chain Risk

622 Microsoft Patches, Four Active Exploits, and Your Supply Chain Risk

•

Episode description

622 Microsoft Patches, Four Active Exploits, and Your Supply Chain Risk

On 14 July 2026, Microsoft released 622 vulnerabilities in a single Patch Tuesday, the largest in company history. Buried within that release are two zero-day vulnerabilities actively exploited in the wild: CVE-2026-56164 (SharePoint Server privilege escalation) and CVE-2026-56155 (AD FS local privilege escalation), both confirmed by CISA’s Known Exploited Vulnerabilities catalogue. Two additional critical Remote Desktop Protocol vulnerabilities (CVE-2026-54990 and CVE-2026-56190) allow unauthenticated remote code execution with CVSS scores of 9.8. Running concurrently, two SonicWall SMA1000 vulnerabilities (CVE-2026-15409 and CVE-2026-15410) form a complete attack chain from unauthenticated access to operating system command execution. This episode examines what these vulnerabilities mean for UK small businesses, particularly those in supply chain relationships with larger clients, and provides actionable guidance on patch prioritisation, RDP security, MSP accountability, and Cyber Essentials compliance requirements.

Chapters

  • Intro Microsoft patches 622 vulnerabilities in a single day, including two actively exploited zero-days confirmed by CISA. This episode covers immediate threats, supply chain implications, and what UK small businesses must do today.
  • Microsoft’s Record 622-Flaw Patch Tuesday Context on the unprecedented volume of patches released 14 July 2026, the operational challenge of patch fatigue, and why CISA’s Known Exploited Vulnerabilities catalogue remains the clearest signal for prioritisation.
  • The Two SharePoint and AD FS Zero-Days Detailed examination of CVE-2026-56164 (SharePoint Server unauthenticated privilege escalation) and CVE-2026-56155 (AD FS local privilege escalation), both CISA KEV-listed on patch day with confirmed active exploitation.
  • CTA Request to follow, rate, review, and share the show with other UK small business owners.
  • The Critical RDP Vulnerabilities Analysis of CVE-2026-54990 and CVE-2026-56190, two separate CVSS 9.8 heap-based buffer overflow vulnerabilities in Windows Remote Desktop Client and RDP, both allowing unauthenticated remote code execution.
  • The SonicWall Attack Chain Two SonicWall SMA1000 vulnerabilities (CVE-2026-15409 server-side request forgery and CVE-2026-15410 code injection) form a complete two-step attack chain from unauthenticated access to OS command execution, both CISA KEV-listed.
  • Supply Chain Risk and Patching as a Contractual Obligation How this week’s vulnerability combination creates supply chain risk for small businesses serving larger clients, and why security posture is increasingly a contractual and commercial requirement.
  • Why Patching Is a Competitive Signal Cyber Essentials requirements for patching high and critical vulnerabilities within 14 days, and how documented patch management processes differentiate businesses in UK public sector procurement.
  • What to Do Today Five concrete actions: obtain written patch confirmation from MSPs, audit RDP exposure, verify SonicWall remediation, review service level agreements, and document all communications for GDPR technical controls evidence.
  • Outro Closing summary emphasising that whilst 622 patches sounds overwhelming, the priority list is clear: two actively exploited zero-days, two critical RDP vulnerabilities, and four SonicWall CVEs forming a working attack chain.

Links