Microsoft
July 2026 Security Updates
2026-Jul Jul 14, 2026 Source: Vendor
Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jul, revision 2026-08-03T07:00:00Z). 2070 vulnerabilities, 658 of them carrying an acknowledgement. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
1055 lines
Showing 851–900 of 1055 · page 18 of 22
CVE-2026-57087
BR2026-0000-001694
unclaimed
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-57087
BR2026-0000-001695
unclaimed
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Credited as txz
CVE-2026-57088
BR2026-0000-001696
unclaimed
Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability
Credited as Microsoft
CVE-2026-57093
BR2026-0000-001697
unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Soon with Microsoft
CVE-2026-57101
BR2026-0000-001698
unclaimed
Visual Studio Code Security Feature Bypass Vulnerability
Credited as Ammar Askar
CVE-2026-57102
BR2026-0000-001699
unclaimed
Visual Studio Code Security Feature Bypass Vulnerability
Credited as Rubin Ownz
CVE-2026-57108
BR2026-0000-001700
unclaimed
.NET Denial of Service Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-57968
BR2026-0000-001701
unclaimed
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
Credited as vurmusum
CVE-2026-57973
BR2026-0000-001702
unclaimed
Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability
Credited as Kangjun Heo with Chungnam National University
CVE-2026-57973
BR2026-0000-001703
unclaimed
Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability
Credited as Riddhimaan Singh
CVE-2026-57974
BR2026-0000-001704
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-57975
BR2026-0000-001705
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-57977
BR2026-0000-001706
unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-57982
BR2026-0000-001707
unclaimed
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Credited as Sanil Singh Tomar with Microsoft
CVE-2026-57993
BR2026-0000-001708
unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58277
BR2026-0000-001709
unclaimed
Microsoft SharePoint Elevation of Privilege Vulnerability
Credited as Rafael Resende
CVE-2026-58281
BR2026-0000-001710
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58282
BR2026-0000-001711
unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58283
BR2026-0000-001712
unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58284
BR2026-0000-001713
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58285
BR2026-0000-001714
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58286
BR2026-0000-001715
unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58287
BR2026-0000-001716
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58288
BR2026-0000-001717
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58289
BR2026-0000-001718
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58290
BR2026-0000-001719
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58291
BR2026-0000-001720
unclaimed
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58292
BR2026-0000-001721
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58293
BR2026-0000-001722
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58294
BR2026-0000-001723
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58295
BR2026-0000-001724
unclaimed
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58296
BR2026-0000-001725
unclaimed
Microsoft Edge for Android Information Disclosure Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58297
BR2026-0000-001726
unclaimed
Microsoft Edge for Android Information Disclosure Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58298
BR2026-0000-001727
unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58299
BR2026-0000-001728
unclaimed
Microsoft Edge for Android Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58300
BR2026-0000-001729
unclaimed
Microsoft Edge for Android Information Disclosure Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58522
BR2026-0000-001730
unclaimed
Microsoft Edge for Android Information Disclosure Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58523
BR2026-0000-001731
unclaimed
Microsoft Edge for Android Security Feature Bypass Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58524
BR2026-0000-001732
unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58525
BR2026-0000-001733
unclaimed
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Credited as Asaf Cohen with XBreach.ai
CVE-2026-58525
BR2026-0000-001734
unclaimed
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-58528
BR2026-0000-001735
unclaimed
Windows USB Audio Class Driver Information Disclosure Vulnerability
Credited as Jonghoi Kim
CVE-2026-58528
BR2026-0000-001736
unclaimed
Windows USB Audio Class Driver Information Disclosure Vulnerability
Credited as Donghyeon Oh with Patchpoint
CVE-2026-58530
BR2026-0000-001737
unclaimed
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Credited as Donghyeon Oh with Patchpoint
CVE-2026-58530
BR2026-0000-001738
unclaimed
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Credited as Jonghoi Kim
CVE-2026-58530
BR2026-0000-001739
unclaimed
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-58530
BR2026-0000-001740
unclaimed
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-58538
BR2026-0000-001741
unclaimed
Windows Bluetooth Service Elevation of Privilege Vulnerability
Credited as Brandon Fisher
CVE-2026-58533
BR2026-0000-001742
unclaimed
Windows Remote Desktop Client Information Disclosure Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-58535
BR2026-0000-001743
unclaimed
Windows Remote Desktop Client Information Disclosure Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab