BugRater
Early access: this site has moved to bugrater.com.

Security releases

Microsoft

July 2026 Security Updates

2026-Jul Jul 14, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jul, revision 2026-08-03T07:00:00Z). 2070 vulnerabilities, 658 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1055 lines
All 1055 CVEs 1055 Additional recognition 0 Unclaimed only
Showing 901–950 of 1055 · page 19 of 22
CVE-2026-58546 BR2026-0000-001744 unclaimed
Windows Remote Desktop Client Information Disclosure Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-58539 BR2026-0000-001745 unclaimed
Windows Remote Desktop Client Information Disclosure Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-58539 BR2026-0000-001746 unclaimed
Windows Remote Desktop Client Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-58540 BR2026-0000-001747 unclaimed
Windows Installer Elevation of Privilege Vulnerability
Credited as JaGoTu with DCIT, a.s.
CVE-2026-58531 BR2026-0000-001748 unclaimed
Windows SMB Elevation of Privilege Vulnerability
Credited as grass341 with Viettel Cyber Security
CVE-2026-58532 BR2026-0000-001749 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as aprilpet
CVE-2026-58534 BR2026-0000-001750 unclaimed
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
Credited as Pwnforr777
CVE-2026-58536 BR2026-0000-001751 unclaimed
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Credited as Chen Le Qi (@cplearns2h4ck) with STAR Labs SG Pte. Ltd.
CVE-2026-58547 BR2026-0000-001752 unclaimed
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Credited as Q4n with Kunlun Lab
CVE-2026-58545 BR2026-0000-001753 unclaimed
Windows Kernel Security Feature Bypass Vulnerability
Credited as Microsoft
CVE-2026-58542 BR2026-0000-001754 unclaimed
Windows Media Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-58543 BR2026-0000-001755 unclaimed
Universal Print Management Service Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-58541 BR2026-0000-001756 unclaimed
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Credited as Varun Goel
CVE-2026-58541 BR2026-0000-001757 unclaimed
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-58541 BR2026-0000-001758 unclaimed
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-58594 BR2026-0000-001759 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Sanil Singh Tomar with Microsoft
CVE-2026-58596 BR2026-0000-001760 unclaimed
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Credited as deepsleep
CVE-2026-58597 BR2026-0000-001761 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Azza Tegar Naufal Ataullah
CVE-2026-47305 BR2026-0000-001762 unclaimed
Visual Studio Remote Code Execution Vulnerability
Credited as Arun T
CVE-2026-58613 BR2026-0000-001763 unclaimed
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Credited as Marcin 'Icewall' Noga with Cisco Talos
CVE-2026-58617 BR2026-0000-001764 unclaimed
M365 Copilot for iOS Elevation of Privilege Vulnerability
Credited as Ofek Levin with Enclave
CVE-2026-58619 BR2026-0000-001765 unclaimed
Windows Sensor Data Service Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-58626 BR2026-0000-001766 unclaimed
Windows Remote Desktop Services Remote Code Execution Vulnerability
Credited as Daniel R
CVE-2026-58627 BR2026-0000-001767 unclaimed
Windows DHCP Server Denial of Service Vulnerability
Credited as Anil Lulla with Microsoft
CVE-2026-58628 BR2026-0000-001768 unclaimed
Windows Wireless Network Manager Elevation of Privilege Vulnerability
Credited as Arpit Gupta
CVE-2026-58629 BR2026-0000-001769 unclaimed
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Credited as gengstah
CVE-2026-58629 BR2026-0000-001770 unclaimed
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Credited as Dung Do of Calif.io
CVE-2026-58633 BR2026-0000-001771 unclaimed
Desktop Window Manager Elevation of Privilege Vulnerability
Credited as Seung Chan Kim
CVE-2026-58634 BR2026-0000-001772 unclaimed
Desktop Window Manager Elevation of Privilege Vulnerability
Credited as Varun Goel
CVE-2026-58637 BR2026-0000-001773 unclaimed
Windows Client-Side Caching Elevation of Privilege Vulnerability
Credited as z1r0
CVE-2026-58637 BR2026-0000-001774 unclaimed
Windows Client-Side Caching Elevation of Privilege Vulnerability
Credited as Byunghyun Kang with KAIST
CVE-2026-58637 BR2026-0000-001775 unclaimed
Windows Client-Side Caching Elevation of Privilege Vulnerability
Credited as Pwnforr777
CVE-2026-58637 BR2026-0000-001776 unclaimed
Windows Client-Side Caching Elevation of Privilege Vulnerability
Credited as Dongjun Lee (m0nd2y) with KAIST Hacking Lab
CVE-2026-58638 BR2026-0000-001777 unclaimed
Windows Boot Loader Security Feature Bypass Vulnerability
Credited as Stas Lyakhov with Eclypsium
CVE-2026-56181 BR2026-0000-001778 unclaimed
Windows Network Address Translation (NAT) Spoofing Vulnerability
Credited as Malcolm Stagg with SODIUM-24, LLC
CVE-2026-55121 BR2026-0000-001779 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Haein Lee
CVE-2026-62826 BR2026-0000-001780 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-57989 BR2026-0000-001781 unclaimed
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-62828 BR2026-0000-001782 unclaimed
Microsoft Edge for Android (Chromium-based) Tampering Vulnerability
Credited as Ofek Levin Enclave with Enclave
CVE-2026-66803 BR2026-0000-001783 unclaimed
Azure Cosmos DB Remote Code Execution Vulnerability
Credited as Yuval Avrahami with Wiz
CVE-2026-66803 BR2026-0000-001784 unclaimed
Azure Cosmos DB Remote Code Execution Vulnerability
Credited as Lior Maman with Wiz
CVE-2026-66803 BR2026-0000-001785 unclaimed
Azure Cosmos DB Remote Code Execution Vulnerability
Credited as Nir Ohfeld with Wiz
CVE-2026-65802 BR2026-0000-001786 unclaimed
Microsoft Edge for Android Information Disclosure Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-65804 BR2026-0000-001787 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66311 BR2026-0000-001788 unclaimed
Microsoft Edge (Chromium-based) Tampering Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66317 BR2026-0000-001789 unclaimed
Microsoft Edge (Chromium-based) Tampering Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66322 BR2026-0000-001790 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66325 BR2026-0000-001791 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66326 BR2026-0000-001792 unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-62870 BR2026-0000-001793 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4