Microsoft Patches 570 Security Holes in July Update, Now Lets You Delay Windows 11 Updates for 35 Days

Microsoft released its July patch Tuesday update for Windows 11 on July 14, 2026, fixing at least 570 security vulnerabilities, according to Krebs on Security. That's almost triple the number fixed last month, which was itself described as a record-breaking release.

The update, tracked as KB5101650, also gives users a new option: the ability to pause Windows updates for up to 35 days and then keep extending that deadline, according to reporting from The Verge and Windows Central. The feature already rolled out to Windows Insiders earlier this year before landing in this broader release.

For anyone who's ever had a forced Windows update interrupt a workday or reboot a machine mid-task, this is a genuine win. Microsoft has spent years getting hammered by users and IT departments for shoving updates onto machines with little warning and even less control. Giving people the ability to actually manage their own update schedule is common sense. It's the kind of change that respects that people, not Microsoft, own their computers.

What Else Is In The Update

The July release builds on features Microsoft previewed in an optional June update. That includes a "Point-in-time restore" option, which can roll a PC back to a previous state, apps, settings, files and all, if something goes wrong. It also adds customization options for Widgets, a more precise magnification tool, and improved stability for certain Bluetooth devices, according to The Verge.

Microsoft says the spike in patched vulnerabilities is tied to its broader plan to revitalize Windows 11 in response to user complaints and performance gripes. The company has also said it expects to catch more vulnerabilities in future updates because it's now using AI tools to help identify security holes before they ship, according to The Verge's reporting on Microsoft's own statements.

The Trade-Off Worth Watching

Pausing security updates for 35 days, and then extending that pause further, means a machine can sit exposed to known vulnerabilities for a long time if a user isn't careful. Microsoft patched at least 570 holes in this single release. A user who pauses updates right before a critical patch ships is choosing convenience over protection.

Security professionals have long pushed back on any feature that delays patching, because unpatched systems are exactly what ransomware gangs and state-linked hackers look for. The more Windows 11 users who lean on extended pause options, the more machines that could sit unpatched for weeks at a time.

The counterpoint is straightforward: it's still the user's choice, and Microsoft isn't removing the security patches, it's letting people control the timing. Businesses running critical infrastructure or handling sensitive data already have IT policies that override consumer-level settings like this. For everyone else, a 35-day pause on a personal laptop is a reasonable trade for not getting interrupted by an unplanned restart while working.

Microsoft hasn't published data on how many users are expected to use the extended pause option, and there's no indication yet of how the company will message the security risk to users who delay for extended periods. A key open question is whether Microsoft will build in clear warnings as a pause stretches on, or whether it's left entirely to the user to know they're behind on hundreds of patched vulnerabilities.

The full list of changes in KB5101650 is available on Microsoft's support site. Windows Insiders have had access to the pause feature since earlier this year, but this marks its rollout to the broader Windows 11 user base as of the July 14 patch Tuesday release.