BugRater
Early access: this site has moved to bugrater.com.

Security releases

Microsoft

July 2026 Security Updates

2026-Jul Jul 14, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jul, revision 2026-08-03T07:00:00Z). 2070 vulnerabilities, 658 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1055 lines
All 1055 CVEs 1055 Additional recognition 0 Unclaimed only
Showing 51–100 of 1055 · page 2 of 22
CVE-2026-49175 BR2026-0000-000051 unclaimed
Windows DNS Client Elevation of Privilege Vulnerability
Credited as Brandon Fisher
CVE-2026-49175 BR2026-0000-000052 unclaimed
Windows DNS Client Elevation of Privilege Vulnerability
Credited as pwn2addr
CVE-2026-49172 BR2026-0000-000053 unclaimed
Windows FTP Service Remote Code Execution Vulnerability
Credited as Linzishan
CVE-2026-49172 BR2026-0000-000054 unclaimed
Windows FTP Service Remote Code Execution Vulnerability
Credited as Anemone
CVE-2026-49172 BR2026-0000-000055 unclaimed
Windows FTP Service Remote Code Execution Vulnerability
Credited as Zhiniang Peng (HUST)
CVE-2026-49173 BR2026-0000-000056 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Owen McCullough with Microsoft
CVE-2026-49173 BR2026-0000-000057 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as haowei yan
CVE-2026-49173 BR2026-0000-000058 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as xiaozun tang
CVE-2026-49174 BR2026-0000-000059 unclaimed
DNS Client Tampering Vulnerability
Credited as Sneha Ravichandran with Microsoft
CVE-2026-49177 BR2026-0000-000060 unclaimed
Windows TCP/IP Information Disclosure Vulnerability
Credited as Microsoft Red Team (MRT) with Microsoft
CVE-2026-49177 BR2026-0000-000061 unclaimed
Windows TCP/IP Information Disclosure Vulnerability
Credited as KPC of Cisco Talos with Cisco Talos
CVE-2026-49177 BR2026-0000-000062 unclaimed
Windows TCP/IP Information Disclosure Vulnerability
Credited as Microsoft
CVE-2026-45496 BR2026-0000-000063 unclaimed
Visual Studio Code Security Feature Bypass Vulnerability
Credited as Tarek Nakkouch
CVE-2026-45496 BR2026-0000-000064 unclaimed
Visual Studio Code Security Feature Bypass Vulnerability
Credited as 陳宥升 (CheN..)
CVE-2026-50663 BR2026-0000-000065 unclaimed
Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability
Credited as Rick de Jager
CVE-2026-54129 BR2026-0000-000066 unclaimed
Windows Hyper-V Elevation of Privilege Vulnerability
Credited as Nicola Stauffer working with TrendAI Zero Day Initiative
CVE-2026-54989 BR2026-0000-000067 unclaimed
Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability
Credited as Marin Duroyon
CVE-2026-54987 BR2026-0000-000068 unclaimed
Windows Overlay Filter Elevation of Privilege Vulnerability
Credited as Chen Le Qi (@cplearns2h4ck) with STAR Labs SG Pte. Ltd.
CVE-2026-54987 BR2026-0000-000069 unclaimed
Windows Overlay Filter Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-54987 BR2026-0000-000070 unclaimed
Windows Overlay Filter Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-54987 BR2026-0000-000071 unclaimed
Windows Overlay Filter Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-54987 BR2026-0000-000072 unclaimed
Windows Overlay Filter Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-54990 BR2026-0000-000073 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-54990 BR2026-0000-000074 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as pwn2addr
CVE-2026-54990 BR2026-0000-000075 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Thanatos Tian
CVE-2026-54990 BR2026-0000-000076 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as PB18
CVE-2026-54990 BR2026-0000-000077 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as @2st__ with Diffract
CVE-2026-50697 BR2026-0000-000078 unclaimed
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Credited as grass341 with Viettel Cyber Security
CVE-2026-50697 BR2026-0000-000079 unclaimed
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Credited as sweetchip
CVE-2026-50697 BR2026-0000-000080 unclaimed
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Credited as dd484a5a34dd0f6d5330345ffe642dfc
CVE-2026-55000 BR2026-0000-000081 unclaimed
Windows USB Print Driver Elevation of Privilege Vulnerability
Credited as Nafiez with NLab Security
CVE-2026-55000 BR2026-0000-000082 unclaimed
Windows USB Print Driver Elevation of Privilege Vulnerability
Credited as Seung Chan Kim
CVE-2026-55000 BR2026-0000-000083 unclaimed
Windows USB Print Driver Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-54111 BR2026-0000-000084 unclaimed
Universal Print Management Service Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-54991 BR2026-0000-000085 unclaimed
Windows USB Print Driver Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-54132 BR2026-0000-000086 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as pwn2addr
CVE-2026-54107 BR2026-0000-000087 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as Pravin Choudhary
CVE-2026-54986 BR2026-0000-000088 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as YuilMuil(Yoon Jung Hyun)
CVE-2026-54993 BR2026-0000-000089 unclaimed
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-54112 BR2026-0000-000090 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as LC with VGCO - Vietnam Germany Connection
CVE-2026-55004 BR2026-0000-000091 unclaimed
Windows Print Configuration Elevation of Privilege Vulnerability
Credited as Q4n with Kunlun Lab and Zhiniang Peng with HUST
CVE-2026-54992 BR2026-0000-000092 unclaimed
Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-54109 BR2026-0000-000093 unclaimed
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-54109 BR2026-0000-000094 unclaimed
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-54982 BR2026-0000-000095 unclaimed
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-54982 BR2026-0000-000096 unclaimed
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Credited as haowei yan
CVE-2026-54114 BR2026-0000-000097 unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as YuilMuil(Yoon Jung Hyun)
CVE-2026-54996 BR2026-0000-000098 unclaimed
Windows USB Print Driver Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-54999 BR2026-0000-000099 unclaimed
Windows TCP/IP Remote Code Execution Vulnerability
Credited as Owen McCullough with MSRC V&M
CVE-2026-54122 BR2026-0000-000100 unclaimed
Windows GDI+ Remote Code Execution Vulnerability
Credited as Seung Chan Kim