Microsoft
July 2026 Security Updates
2026-Jul Jul 14, 2026 Source: Vendor
Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jul, revision 2026-08-03T07:00:00Z). 2070 vulnerabilities, 658 of them carrying an acknowledgement. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
1055 lines
Showing 151–200 of 1055 · page 4 of 22
CVE-2026-56645
BR2026-0000-000151
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as sangnt (@gnas0x0018) with Viettel Cyber Security
CVE-2026-56646
BR2026-0000-000152
unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Orange Tsai (@orange_8361) with DEVCORE
CVE-2026-58601
BR2026-0000-000153
unclaimed
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Credited as Daejin Lee
CVE-2026-58601
BR2026-0000-000154
unclaimed
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Credited as sweetchip
CVE-2026-58601
BR2026-0000-000155
unclaimed
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Credited as Seung Chan Kim
CVE-2026-58601
BR2026-0000-000156
unclaimed
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Credited as Nguyễn Đăng Nguyễn (@MochiNishimiya) with STAR Labs SG Pte. Ltd.
CVE-2026-58602
BR2026-0000-000157
unclaimed
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-58608
BR2026-0000-000158
unclaimed
Windows Print Spooler Remote Code Execution Vulnerability
Credited as Orange Tsai (@orange_8361) with DEVCORE
CVE-2026-58609
BR2026-0000-000159
unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-58609
BR2026-0000-000160
unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as npc0vo
CVE-2026-58609
BR2026-0000-000161
unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as @2st__ with Diffract
CVE-2026-58610
BR2026-0000-000162
unclaimed
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-58610
BR2026-0000-000163
unclaimed
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Credited as txz
CVE-2026-58614
BR2026-0000-000164
unclaimed
Windows Kernel Security Feature Bypass Vulnerability
Credited as Aman Gupta
CVE-2026-47301
BR2026-0000-000165
unclaimed
Configuration Manager Elevation of Privilege Vulnerability
Credited as mick3y with Team SaturnX
CVE-2026-47301
BR2026-0000-000166
unclaimed
Configuration Manager Elevation of Privilege Vulnerability
Credited as Omri Baso with XM Cyber
CVE-2026-58618
BR2026-0000-000167
unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as f4
CVE-2026-58618
BR2026-0000-000168
unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-58631
BR2026-0000-000169
unclaimed
Windows Admin Center (WAC) Remote Code Execution Vulnerability
Credited as Batuhan Er with HawkTrace
CVE-2026-58635
BR2026-0000-000170
unclaimed
Windows Narrator Braille Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-58635
BR2026-0000-000171
unclaimed
Windows Narrator Braille Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-58636
BR2026-0000-000172
unclaimed
Microsoft PC Manager Elevation of Privilege Vulnerability
Credited as .bat
CVE-2026-58640
BR2026-0000-000173
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Donghyeon Oh with Patchpoint
CVE-2026-58640
BR2026-0000-000174
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Jonghoi Kim
CVE-2026-58640
BR2026-0000-000175
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Sergey immortalp0ny Tarasov with Positive Technologies
CVE-2026-50652
BR2026-0000-000176
unclaimed
Azure Active Directory Denial of Service Vulnerability
Credited as Vandit Aruldas with Microsoft
CVE-2026-50653
BR2026-0000-000177
unclaimed
Azure Active Directory Denial of Service Vulnerability
Credited as Sridhar Periyasamy
CVE-2026-58643
BR2026-0000-000178
unclaimed
Windows Admin Center Spoofing Vulnerability
Credited as sho odagiri with GMO Cybersecurity by Ierae inc
CVE-2026-58643
BR2026-0000-000179
unclaimed
Windows Admin Center Spoofing Vulnerability
Credited as Brahim Chebli with Deloitte France’s Offensive Security Center
CVE-2026-58598
BR2026-0000-000180
unclaimed
Windows Backup Service Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-57980
BR2026-0000-000181
unclaimed
Microsoft Edge (Chromium-based) Tampering Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-57978
BR2026-0000-000182
unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-57990
BR2026-0000-000183
unclaimed
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66310
BR2026-0000-000184
unclaimed
Microsoft Edge for Android Information Disclosure Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66312
BR2026-0000-000185
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66313
BR2026-0000-000186
unclaimed
Microsoft Edge (Chromium-based) Tampering Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66314
BR2026-0000-000187
unclaimed
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66315
BR2026-0000-000188
unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66316
BR2026-0000-000189
unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-33842
BR2026-0000-000190
unclaimed
Windows File Explorer Information Disclosure Vulnerability
Credited as David Zhu with Microsoft
CVE-2026-34328
BR2026-0000-000191
unclaimed
Windows Audio Service Information Disclosure Vulnerability
Credited as David Zhu with Microsoft
CVE-2026-40422
BR2026-0000-000192
unclaimed
Windows File Explorer Information Disclosure Vulnerability
Credited as David Zhu with Microsoft
CVE-2026-41087
BR2026-0000-000193
unclaimed
Windows File Explorer Information Disclosure Vulnerability
Credited as David Zhu with Microsoft
CVE-2026-40400
BR2026-0000-000194
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Quan Le from Unit 515 - OPSWAT
CVE-2026-40400
BR2026-0000-000195
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Saif Shaker
CVE-2026-40400
BR2026-0000-000196
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Peng Zhou (zpbrent)
CVE-2026-40400
BR2026-0000-000197
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Anindya Roy
CVE-2026-40400
BR2026-0000-000198
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Rayhan Destian
CVE-2026-40400
BR2026-0000-000199
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Charlie Vogt
CVE-2026-40400
BR2026-0000-000200
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Michael Monwuba with Microsoft