← Back to Feed
CVE-2026-56164 and CVE-2026-56155: Two Exploited Microsoft Zero-Days Put SharePoint and AD FS at Risk
CVE-2026-56164CVE-2026-56155
July 16, 2026 · SOCPrime · Severity: CRITICAL
CVE-2026-56164 and CVE-2026-56155 are actively exploited Microsoft zero-days affecting SharePoint and AD FS.
Key Takeaways
- Microsoft’s July 2026 Patch Tuesday drew immediate attention not just because of its record scale, but because two actively exploited zero-days hit so.
- Together, they show why defenders should not sort this month’s risk by score alone.