Microsoft

July 2026 Security Updates

2026-Jul Jul 14, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jul, revision 2026-08-03T07:00:00Z). 2070 vulnerabilities, 658 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul

Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1055 lines

Showing 551–600 of 1055 matching · page 12 of 22 · clear filters

CVE-2026-50417 BR2026-0000-000551 unclaimed

Windows NTFS Remote Code Execution Vulnerability

Credited as Zhiniang Peng with HUST

CVE-2026-50447 BR2026-0000-000552 unclaimed

Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability

Credited as Azure Yang with Kunlun Lab

CVE-2026-50438 BR2026-0000-000553 unclaimed

Microsoft PC Manager Elevation of Privilege Vulnerability

Credited as .bat

CVE-2026-50420 BR2026-0000-000554 unclaimed

HTTP.sys Information Disclosure Vulnerability

Credited as grass341 with Viettel Cyber Security

CVE-2026-50362 BR2026-0000-000555 unclaimed

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Credited as Donghyeon Oh with Patchpoint and Jonghoi Kim

CVE-2026-50474 BR2026-0000-000556 unclaimed

Remote Desktop Client Remote Code Execution Vulnerability

Credited as 0ccbbf129444eb66344ccafb92b00df4

CVE-2026-50444 BR2026-0000-000557 unclaimed

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

Credited as Hugo VINCENT with Synacktiv

CVE-2026-50394 BR2026-0000-000558 unclaimed

Windows Media Information Disclosure Vulnerability

Credited as David Zhu with Microsoft

CVE-2026-50415 BR2026-0000-000559 unclaimed

Windows Media Information Disclosure Vulnerability

Credited as David Zhu with Microsoft

CVE-2026-50458 BR2026-0000-000560 unclaimed

Microsoft Brokering File System Elevation of Privilege Vulnerability

Credited as Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab

CVE-2026-50458 BR2026-0000-000561 unclaimed

Microsoft Brokering File System Elevation of Privilege Vulnerability

Credited as Rotce

CVE-2026-50475 BR2026-0000-000562 unclaimed

Windows Kernel Information Disclosure Vulnerability

Credited as grass341 with Viettel Cyber Security

CVE-2026-50475 BR2026-0000-000563 unclaimed

Windows Kernel Information Disclosure Vulnerability

Credited as KPC with Cisco Talos

CVE-2026-50476 BR2026-0000-000564 unclaimed

Windows Network Connections Service Elevation of Privilege Vulnerability

Credited as Hwiwon Lee (hwiwonl), SEC-agent team

CVE-2026-50476 BR2026-0000-000565 unclaimed

Windows Network Connections Service Elevation of Privilege Vulnerability

Credited as Jongseong Kim (nevul37), SEC-agent team

CVE-2026-50476 BR2026-0000-000566 unclaimed

Windows Network Connections Service Elevation of Privilege Vulnerability

Credited as Younggi Park (grill66), SEC-agent team

CVE-2026-50429 BR2026-0000-000567 unclaimed

Windows Kernel Information Disclosure Vulnerability

Credited as Seung Chan Kim

CVE-2026-50450 BR2026-0000-000568 unclaimed

Windows Network Connections Service Elevation of Privilege Vulnerability

Credited as h4urek with secsys lab

CVE-2026-50424 BR2026-0000-000569 unclaimed

Windows Domain Controller Denial of Service Vulnerability

Credited as Yuval Gordon with Akamai

CVE-2026-50406 BR2026-0000-000570 unclaimed

Windows Backup Engine Elevation of Privilege Vulnerability

Credited as AIフィジカルインターフェイス二号機

CVE-2026-50470 BR2026-0000-000571 unclaimed

Windows Network Policy Server SNMP Information Disclosure Vulnerability

Credited as Lewis Lee

CVE-2026-50470 BR2026-0000-000572 unclaimed

Windows Network Policy Server SNMP Information Disclosure Vulnerability

Credited as Anemone

CVE-2026-50470 BR2026-0000-000573 unclaimed

Windows Network Policy Server SNMP Information Disclosure Vulnerability

Credited as Zhiniang Peng (HUST)

CVE-2026-50459 BR2026-0000-000574 unclaimed

Windows Kernel Elevation of Privilege Vulnerability

Credited as Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab

CVE-2026-50477 BR2026-0000-000575 unclaimed

Windows Kernel Elevation of Privilege Vulnerability

Credited as Seung Chan Kim

CVE-2026-50478 BR2026-0000-000576 unclaimed

Windows Kernel Elevation of Privilege Vulnerability

Credited as Gabriela Kote with Microsoft

CVE-2026-50479 BR2026-0000-000577 unclaimed

Windows USB Hub Driver Elevation of Privilege Vulnerability

Credited as Adrian Denkiewicz at Doyensec in collaboration with Anthropic Research

CVE-2026-50479 BR2026-0000-000578 unclaimed

Windows USB Hub Driver Elevation of Privilege Vulnerability

Credited as Adrian Denkiewicz at Doyensec in collaboration with Claude and Anthropic Research

CVE-2026-50480 BR2026-0000-000579 unclaimed

Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability

Credited as Rutuja Shirali with Microsoft

CVE-2026-50482 BR2026-0000-000580 unclaimed

Windows NTFS Remote Code Execution Vulnerability

Credited as R4nger with Kunlun Lab

CVE-2026-50482 BR2026-0000-000581 unclaimed

Windows NTFS Remote Code Execution Vulnerability

Credited as Zhiniang Peng with HUST

CVE-2026-50495 BR2026-0000-000582 unclaimed

DNS Client Tampering Vulnerability

Credited as Sneha Ravichandran with microsoft

CVE-2026-50483 BR2026-0000-000583 unclaimed

Windows Graphics Component Information Disclosure Vulnerability

Credited as Hussein Alrubaye with Microsoft

CVE-2026-50502 BR2026-0000-000584 unclaimed

Windows Event Logging Service Remote Code Execution Vulnerability

Credited as Romain BENTZ with Login Sécurité

CVE-2026-50502 BR2026-0000-000585 unclaimed

Windows Event Logging Service Remote Code Execution Vulnerability

Credited as Grant Hume

CVE-2026-50485 BR2026-0000-000586 unclaimed