Early access: this site has moved to bugrater.com.

Security releases

Microsoft

July 2026 Security Updates

2026-Jul Jul 14, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jul, revision 2026-08-03T07:00:00Z). 2070 vulnerabilities, 658 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1055 lines
Showing 751–800 of 1055 · page 16 of 22
CVE-2026-55054 BR2026-0000-001594 unclaimed
Microsoft Excel Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55037 BR2026-0000-001595 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55058 BR2026-0000-001596 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55038 BR2026-0000-001597 unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55132 BR2026-0000-001598 unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55137 BR2026-0000-001599 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55053 BR2026-0000-001600 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-55053 BR2026-0000-001601 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55122 BR2026-0000-001602 unclaimed
Microsoft Excel Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55057 BR2026-0000-001603 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55131 BR2026-0000-001604 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55126 BR2026-0000-001605 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as Vladislav Berghici of TrendAI Research
CVE-2026-55051 BR2026-0000-001606 unclaimed
Microsoft SharePoint Server Information Disclosure Vulnerability
Credited as P1hcn
CVE-2026-55051 BR2026-0000-001607 unclaimed
Microsoft SharePoint Server Information Disclosure Vulnerability
Credited as Kn1ght
CVE-2026-55134 BR2026-0000-001608 unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55056 BR2026-0000-001609 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-55056 BR2026-0000-001610 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-55040 BR2026-0000-001611 unclaimed
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Credited as Chumy Tsai with CyCraft Technology
CVE-2026-55040 BR2026-0000-001612 unclaimed
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Credited as khoadha
CVE-2026-55040 BR2026-0000-001613 unclaimed
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Credited as Stephen Fewer with Rapid7
CVE-2026-55142 BR2026-0000-001614 unclaimed
Microsoft Word Information Disclosure Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-55140 BR2026-0000-001615 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as kunlun Lab
CVE-2026-55140 BR2026-0000-001616 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as GLM
CVE-2026-55140 BR2026-0000-001617 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-55140 BR2026-0000-001618 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as txz
CVE-2026-55130 BR2026-0000-001619 unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-55042 BR2026-0000-001620 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55139 BR2026-0000-001621 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as oriotie
CVE-2026-55043 BR2026-0000-001622 unclaimed
Microsoft PowerPoint Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55043 BR2026-0000-001623 unclaimed
Microsoft PowerPoint Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-55133 BR2026-0000-001624 unclaimed
Microsoft OneNote Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55123 BR2026-0000-001625 unclaimed
Microsoft PowerPoint Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-55123 BR2026-0000-001626 unclaimed
Microsoft PowerPoint Remote Code Execution Vulnerability
Credited as txz
CVE-2026-55123 BR2026-0000-001627 unclaimed
Microsoft PowerPoint Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55052 BR2026-0000-001628 unclaimed
Microsoft SharePoint Elevation of Privilege Vulnerability
Credited as odgrso
CVE-2026-50468 BR2026-0000-001629 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-54116 BR2026-0000-001630 unclaimed
Microsoft SQL Server Information Disclosure Vulnerability
Credited as Pwnforr777
CVE-2026-55145 BR2026-0000-001631 unclaimed
Outlook Copilot Tampering Vulnerability
Credited as Håkon Måløy
CVE-2026-54131 BR2026-0000-001632 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55898 BR2026-0000-001633 unclaimed
Microsoft Excel Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55944 BR2026-0000-001634 unclaimed
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Credited as John Nzyuko
CVE-2026-55947 BR2026-0000-001635 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-55949 BR2026-0000-001636 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-56156 BR2026-0000-001637 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-56157 BR2026-0000-001638 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as Henrique Pereira with Microsoft
CVE-2026-41109 BR2026-0000-001639 unclaimed
GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
Credited as Alexander Tan
CVE-2026-56159 BR2026-0000-001640 unclaimed
DHCP Server Service Remote Code Execution Vulnerability
Credited as Marcos Oviedo with Deep Extract Harness
CVE-2026-56159 BR2026-0000-001641 unclaimed
DHCP Server Service Remote Code Execution Vulnerability
Credited as Linzishan
CVE-2026-56159 BR2026-0000-001642 unclaimed
DHCP Server Service Remote Code Execution Vulnerability
Credited as Anemone
CVE-2026-56159 BR2026-0000-001643 unclaimed
DHCP Server Service Remote Code Execution Vulnerability
Credited as Zhiniang Peng (HUST)