Microsoft
July 2026 Security Updates
2026-Jul Jul 14, 2026 Source: Vendor
Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jul, revision 2026-08-03T07:00:00Z). 2070 vulnerabilities, 658 of them carrying an acknowledgement. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
1055 lines
Showing 201–250 of 1055 · page 5 of 22
CVE-2026-40400
BR2026-0000-000201
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as MinhNV5 with MBBank
CVE-2026-40400
BR2026-0000-000202
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as PuH4ck3rX
CVE-2026-40400
BR2026-0000-000203
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as PuH4ck3rX with W&M
CVE-2026-40400
BR2026-0000-000204
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as YMsora
CVE-2026-40400
BR2026-0000-000205
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Jishnu Sudhakaran
CVE-2026-40400
BR2026-0000-000206
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Ky0toFu
CVE-2026-40400
BR2026-0000-000207
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Povcfe
CVE-2026-40400
BR2026-0000-000208
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as Daniel R
CVE-2026-40400
BR2026-0000-000209
unclaimed
Windows PowerShell Remote Code Execution Vulnerability
Credited as TrendAI Zero Day Initiative
CVE-2026-34348
BR2026-0000-000210
unclaimed
Windows Event Logging Service Information Disclosure Vulnerability
Credited as Michael Grafnetter with SpecterOps
CVE-2026-44806
BR2026-0000-000211
unclaimed
Windows Secure Channel Denial of Service Vulnerability
Credited as Microsoft
CVE-2026-40378
BR2026-0000-000212
unclaimed
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Credited as WARP
CVE-2026-40378
BR2026-0000-000213
unclaimed
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Credited as MORSE teams at Microsoft
CVE-2026-47304
BR2026-0000-000214
unclaimed
.NET Security Feature Bypass Vulnerability
Credited as Levi Broderick
CVE-2026-47304
BR2026-0000-000215
unclaimed
.NET Security Feature Bypass Vulnerability
Credited as DongJun Kim (UIUC) with UIUC
CVE-2026-47304
BR2026-0000-000216
unclaimed
.NET Security Feature Bypass Vulnerability
Credited as Hwiwon Lee (hwiwonl) with UIUC
CVE-2026-47304
BR2026-0000-000217
unclaimed
.NET Security Feature Bypass Vulnerability
Credited as Jongseong Kim (nevul37) with UIUC
CVE-2026-47632
BR2026-0000-000218
unclaimed
Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
Credited as Gal Azaria with Microsoft
CVE-2026-48564
BR2026-0000-000219
unclaimed
DHCP Server Service Remote Code Execution Vulnerability
Credited as Howard McGreehan with MSRC V&M
CVE-2026-48564
BR2026-0000-000220
unclaimed
DHCP Server Service Remote Code Execution Vulnerability
Credited as WARP
CVE-2026-48564
BR2026-0000-000221
unclaimed
DHCP Server Service Remote Code Execution Vulnerability
Credited as ACS teams at Microsoft
CVE-2026-48581
BR2026-0000-000222
unclaimed
Surface Broker SDMA Elevation of Privilege Vulnerability
Credited as JC with Splinters.io
CVE-2026-49178
BR2026-0000-000223
unclaimed
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Credited as Microsoft
CVE-2026-49180
BR2026-0000-000224
unclaimed
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
Credited as Siva Jyoshna Poreddy
CVE-2026-49181
BR2026-0000-000225
unclaimed
Windows DHCP Client Elevation of Privilege Vulnerability
Credited as Jay Ladhad with Microsoft
CVE-2026-49184
BR2026-0000-000226
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as pwn2addr
CVE-2026-49184
BR2026-0000-000227
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as 0rb1t with None
CVE-2026-49184
BR2026-0000-000228
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Qanux with None
CVE-2026-49184
BR2026-0000-000229
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Donghyeon Oh with Patchpoint
CVE-2026-49184
BR2026-0000-000230
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Jonghoi Kim
CVE-2026-49184
BR2026-0000-000231
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-49184
BR2026-0000-000232
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as wgg
CVE-2026-49184
BR2026-0000-000233
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as @2st__ with Diffract
CVE-2026-49184
BR2026-0000-000234
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-49184
BR2026-0000-000235
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as txz
CVE-2026-49184
BR2026-0000-000236
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Minjea Park with Stealien
CVE-2026-49184
BR2026-0000-000237
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-49184
BR2026-0000-000238
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-49184
BR2026-0000-000239
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
CVE-2026-49183
BR2026-0000-000240
unclaimed
Windows Clipboard Server Elevation of Privilege Vulnerability
Credited as Jongseong Kim (nevul37), SEC-agent team
CVE-2026-49183
BR2026-0000-000241
unclaimed
Windows Clipboard Server Elevation of Privilege Vulnerability
Credited as Hwiwon Lee (hwiwonl), SEC-agent team
CVE-2026-49183
BR2026-0000-000242
unclaimed
Windows Clipboard Server Elevation of Privilege Vulnerability
Credited as Younggi Park (grill66), SEC-agent team
CVE-2026-49183
BR2026-0000-000243
unclaimed
Windows Clipboard Server Elevation of Privilege Vulnerability
Credited as Pwnforr777
CVE-2026-49787
BR2026-0000-000244
unclaimed
HTTP.sys Denial of Service Vulnerability
Credited as Miha Zupan with Microsoft
CVE-2026-49788
BR2026-0000-000245
unclaimed
HTTP/2 Denial of Service Vulnerability
Credited as Miha Zupan with Microsoft
CVE-2026-49789
BR2026-0000-000246
unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyu)
CVE-2026-49789
BR2026-0000-000247
unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-49789
BR2026-0000-000248
unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-49789
BR2026-0000-000249
unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-49789
BR2026-0000-000250
unclaimed
Windows NTFS Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST