The July Patch Day from Microsoft marks a historic milestone: Never before has the company fixed so many security vulnerabilities at once. Exchange Server administrators must act quickly.
On Tuesday, the software giant addressed a staggering total of 622 vulnerabilities—a new negative record. The focus is primarily on critical flaws within Exchange Server 2016, 2019, and the Subscription Edition. Attackers with valid credentials could exploit these vulnerabilities to escalate their privileges or execute malicious code.
Critical Exchange Vulnerabilities in Detail
Particularly concerning are the vulnerabilities identified as CVE-2026-55006 (with a severity score of 7.8 out of 10) and CVE-2026-55005 (scoring 8.8 out of 10). These flaws require only a valid password to be exploited. While no active attacks have been reported so far, the threat remains real.
Exchange Online customers benefit from automatic protection. However, those managing their own servers will need to manually apply the updates. For older versions, an active Extended Security Update subscription is necessary.
Given the unprecedented number of security vulnerabilities, proactive protection against digital attacks is now indispensable for every organization. How to effectively close security gaps and secure your business in the long term is detailed in this free eBook. Strengthen IT security and fend off threats
Along with the Exchange vulnerabilities, Microsoft also patched three zero-day vulnerabilities, which included flaws in SharePoint and the Active Directory Federation Services (AD FS), as well as a bypass for BitLocker protection.
New Features in Outlook and Planner
In parallel with the security enhancements, Microsoft is advancing the integration of its productivity tools. Since July 14, the company has been rolling out the Planner feature in the new Outlook for Windows. A new icon in the left navigation pane allows quick access to task management—but only in the modern version of Outlook.
Additionally, on July 13, Microsoft announced a new cross-departmental email recall feature for Exchange Online. Administrators will soon be able to retrieve messages across trusted tenants. The rollout begins in mid-August, with general availability expected in mid-September. Management will be via a PowerShell whitelist.
Data Issues and Third-Party Tools
Despite these new features, many users are experiencing connection and display issues. Forums are rife with reports of difficulties connecting to Gmail and Yahoo, missing email content, or improperly displayed attachments.
These issues often stem from corrupted profiles, conflicts with hardware acceleration, or oversized data files. Microsoft recommends using the SCANPST.EXE tool, disabling certain add-ins, or switching between HTML and plain text formats for affected users.
Technological problems and synchronization errors in Outlook can waste valuable time and frustrate users in their daily tasks. This free guide reveals the best time-saving tricks and solutions for smooth email management across all devices. Discover 7 Outlook time-saving tricks for free now
The rise in data corruption issues has sparked a boom in third-party recovery tools. BreviSoft has launched a new PST recovery tool that repairs corrupted files and migrates data directly into Microsoft 365 or IMAP servers. Other companies like TrustVare and vMail have also released specialized software for converting OST to PST files without Exchange Server access, as well as for extracting email addresses from password-protected or corrupted files.
This trend shows that while Microsoft modernizes its ecosystem, data portability remains one of the most significant challenges for businesses and individual users alike.
