Microsoft
July 2026 Security Updates
2026-Jul Jul 14, 2026 Source: Vendor
Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jul, revision 2026-08-03T07:00:00Z). 2070 vulnerabilities, 658 of them carrying an acknowledgement. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
1055 lines
Showing 951–1000 of 1055 · page 20 of 22
CVE-2026-35425
BR2026-0000-001794
unclaimed
Azure API Management (APIM) Remote Code Execution Vulnerability
Credited as wtm with Offensi
CVE-2026-50517
BR2026-0000-001795
unclaimed
Microsoft M365 Copilot Remote Code Execution Vulnerability
Credited as Varsha Chahal with Microsoft
CVE-2026-56191
BR2026-0000-001796
unclaimed
Microsoft Exchange Online Tampering Vulnerability
Credited as Henrique Pereira with Microsoft
CVE-2026-56191
BR2026-0000-001797
unclaimed
Microsoft Exchange Online Tampering Vulnerability
Credited as Giacomo Sankovic
CVE-2026-57106
BR2026-0000-001798
unclaimed
Data Quality Elevation of Privilege Vulnerability
Credited as Evan Grant
CVE-2026-62825
BR2026-0000-001799
unclaimed
Azure Key Vault Elevation of Privilege Vulnerability
Credited as Sridhar Periyasamy
CVE-2026-58630
BR2026-0000-001800
unclaimed
Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
Credited as Asaf Cohen with XBreach.ai
CVE-2026-58275
BR2026-0000-001801
unclaimed
Azure DNS Elevation of Privilege Vulnerability
Credited as Sam Obeng
CVE-2026-62835
BR2026-0000-001802
unclaimed
Azure Portal Information Disclosure Vulnerability
Credited as Vishal Bharad
CVE-2026-50416
BR2026-0000-001803
unclaimed
Win32k Information Disclosure Vulnerability
Credited as Minjea Park with Stealien
CVE-2026-50416
BR2026-0000-001804
unclaimed
Win32k Information Disclosure Vulnerability
Credited as CrowdStrike Advanced Research Team with CrowdStrike
CVE-2026-50416
BR2026-0000-001805
unclaimed
Win32k Information Disclosure Vulnerability
Credited as Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
CVE-2026-50416
BR2026-0000-001806
unclaimed
Win32k Information Disclosure Vulnerability
Credited as Karol Nieckarz with independent security research
CVE-2026-50341
BR2026-0000-001807
unclaimed
Windows NTFS Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-50341
BR2026-0000-001808
unclaimed
Windows NTFS Information Disclosure Vulnerability
Credited as wgg
CVE-2026-50341
BR2026-0000-001809
unclaimed
Windows NTFS Information Disclosure Vulnerability
Credited as @2st__ with Diffract
CVE-2026-50341
BR2026-0000-001810
unclaimed
Windows NTFS Information Disclosure Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-50341
BR2026-0000-001811
unclaimed
Windows NTFS Information Disclosure Vulnerability
Credited as npc0vo
CVE-2026-50341
BR2026-0000-001812
unclaimed
Windows NTFS Information Disclosure Vulnerability
Credited as Rahul Hoysala with Cyber Info
CVE-2026-50493
BR2026-0000-001813
unclaimed
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Credited as YuilMuil(Yoon Jung Hyun)
CVE-2026-50493
BR2026-0000-001814
unclaimed
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Credited as dungnm with Viettel Cyber Security
CVE-2026-50493
BR2026-0000-001815
unclaimed
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Credited as puponia with TAU Security
CVE-2026-50493
BR2026-0000-001816
unclaimed
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Credited as Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
CVE-2026-50493
BR2026-0000-001817
unclaimed
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Credited as SnowRockLab
CVE-2026-40400
BR2026-0000-004574
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Wenhan Zhou
CVE-2026-50659
BR2026-0000-004575
unclaimed
.NET Spoofing Vulnerability
Credited as Prasanna Dabi
CVE-2026-50309
BR2026-0000-004576
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-50309
BR2026-0000-004577
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as wgg
CVE-2026-50309
BR2026-0000-004578
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as @2st__ with Diffract
CVE-2026-50357
BR2026-0000-005300
unclaimed
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-50357
BR2026-0000-005301
unclaimed
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-50476
BR2026-0000-005926
unclaimed
Windows Network Connections Service Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-49162
BR2026-0000-005931
unclaimed
Microsoft Brokering File System Elevation of Privilege Vulnerability
Credited as hazard
CVE-2026-40400
BR2026-0000-005932
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as 71C4
CVE-2026-49789
BR2026-0000-005933
unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Minjea Park
CVE-2026-49789
BR2026-0000-005934
unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Jmini
CVE-2026-50351
BR2026-0000-005935
unclaimed
Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-50351
BR2026-0000-005936
unclaimed
Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-50407
BR2026-0000-005937
unclaimed
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Credited as Yongha Lee
CVE-2026-50416
BR2026-0000-005938
unclaimed
Win32k Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU) with Diffract
CVE-2026-50416
BR2026-0000-005939
unclaimed
Win32k Information Disclosure Vulnerability
Credited as Feng Dong with HUST.
CVE-2026-50371
BR2026-0000-005940
unclaimed
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-50371
BR2026-0000-005941
unclaimed
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-50371
BR2026-0000-005942
unclaimed
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
Credited as npc0vo with Diffract
CVE-2026-50669
BR2026-0000-005943
unclaimed
Windows Telephony Server Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-50670
BR2026-0000-005944
unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-50670
BR2026-0000-005945
unclaimed
Windows Win32k Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-55033
BR2026-0000-005946
unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as Jmini
CVE-2026-58613
BR2026-0000-005947
unclaimed
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Credited as Minjea Park
CVE-2026-40400
BR2026-0000-006353
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Mohit_Negi with Bugcrowd