Microsoft
July 2026 Security Updates
2026-Jul Jul 14, 2026 Source: Vendor
Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jul, revision 2026-08-03T07:00:00Z). 2070 vulnerabilities, 658 of them carrying an acknowledgement. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
1055 lines
Showing 251–300 of 1055 · page 6 of 22
CVE-2026-49790
BR2026-0000-000251
unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-49790
BR2026-0000-000252
unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as npc0vo
CVE-2026-49790
BR2026-0000-000253
unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-49790
BR2026-0000-000254
unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as PB18
CVE-2026-49790
BR2026-0000-000255
unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-49790
BR2026-0000-000256
unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as Hank Chen with InnoEdge Labs
CVE-2026-49791
BR2026-0000-000257
unclaimed
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Credited as BochengXiang(@Crispr) with FDU
CVE-2026-49792
BR2026-0000-000258
unclaimed
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Credited as Dewang Ahluwalia
CVE-2026-49792
BR2026-0000-000259
unclaimed
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Credited as Jonghoi Kim
CVE-2026-49792
BR2026-0000-000260
unclaimed
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Credited as Donghyeon Oh with Patchpoint
CVE-2026-49793
BR2026-0000-000261
unclaimed
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Credited as Dewang Ahluwalia
CVE-2026-49794
BR2026-0000-000262
unclaimed
Windows USB Audio Class Driver Information Disclosure Vulnerability
Credited as Seung Chan Kim
CVE-2026-49794
BR2026-0000-000263
unclaimed
Windows USB Audio Class Driver Information Disclosure Vulnerability
Credited as Donghyeon Oh with Patchpoint
CVE-2026-49794
BR2026-0000-000264
unclaimed
Windows USB Audio Class Driver Information Disclosure Vulnerability
Credited as Jonghoi Kim
CVE-2026-49795
BR2026-0000-000265
unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
CVE-2026-49797
BR2026-0000-000266
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Thanatos Tian
CVE-2026-49797
BR2026-0000-000267
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as wgg
CVE-2026-49797
BR2026-0000-000268
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as @2st__ with Diffract
CVE-2026-49798
BR2026-0000-000269
unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Jongseong Kim (nevul37), SEC-agent team
CVE-2026-49798
BR2026-0000-000270
unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Hwiwon Lee (hwiwonl), SEC-agent team
CVE-2026-49798
BR2026-0000-000271
unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Younggi Park (grill66), SEC-agent team
CVE-2026-49798
BR2026-0000-000272
unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
CVE-2026-50299
BR2026-0000-000273
unclaimed
Windows Storage Spaces Direct Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-50299
BR2026-0000-000274
unclaimed
Windows Storage Spaces Direct Remote Code Execution Vulnerability
Credited as wgg
CVE-2026-50299
BR2026-0000-000275
unclaimed
Windows Storage Spaces Direct Remote Code Execution Vulnerability
Credited as @2st__ with Diffract
CVE-2026-50299
BR2026-0000-000276
unclaimed
Windows Storage Spaces Direct Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-49800
BR2026-0000-000277
unclaimed
Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
Credited as nerty with Theori
CVE-2026-49800
BR2026-0000-000278
unclaimed
Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
Credited as z1r0
CVE-2026-49800
BR2026-0000-000279
unclaimed
Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
Credited as Dongjun Lee (m0nd2y) with KAIST Hacking Lab
CVE-2026-49800
BR2026-0000-000280
unclaimed
Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
Credited as TwinkleStar03 with DEVCORE Internship Program
CVE-2026-49800
BR2026-0000-000281
unclaimed
Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
Credited as Brandon Fisher
CVE-2026-49800
BR2026-0000-000282
unclaimed
Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
Credited as Dongjun Lee with KAIST Hacking Lab
CVE-2026-49800
BR2026-0000-000283
unclaimed
Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-49800
BR2026-0000-000284
unclaimed
Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
Credited as 021w with Vulnerability Research Institute
CVE-2026-49799
BR2026-0000-000285
unclaimed
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Credited as Yehuda Smirnov with Microsoft
CVE-2026-49799
BR2026-0000-000286
unclaimed
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Credited as Naor Evgi with White-Hat LTD
CVE-2026-49799
BR2026-0000-000287
unclaimed
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Credited as Noam Pomerantz with CyberWallGlobal LTD
CVE-2026-50308
BR2026-0000-000288
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Jianliang Zhao
CVE-2026-50308
BR2026-0000-000289
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-50311
BR2026-0000-000290
unclaimed
Windows Server Elevation of Privilege Vulnerability
Credited as mad31k working with TrendAI Zero Day Initiative
CVE-2026-49804
BR2026-0000-000291
unclaimed
Windows USB Video Driver Elevation of Privilege Vulnerability
Credited as pwn2addr
CVE-2026-50294
BR2026-0000-000292
unclaimed
Windows Kernel Information Disclosure Vulnerability
Credited as grass341 with Viettel Cyber Security
CVE-2026-50294
BR2026-0000-000293
unclaimed
Windows Kernel Information Disclosure Vulnerability
Credited as Minwoo Jeong (P1nkjelly) with KAIST Hacking Lab
CVE-2026-50333
BR2026-0000-000294
unclaimed
Windows Spaceport.sys Elevation of Privilege Vulnerability
Credited as zickzick2
CVE-2026-50333
BR2026-0000-000295
unclaimed
Windows Spaceport.sys Elevation of Privilege Vulnerability
Credited as kaymin0128
CVE-2026-50333
BR2026-0000-000296
unclaimed
Windows Spaceport.sys Elevation of Privilege Vulnerability
Credited as Nathaniel Oh (@calysteon)
CVE-2026-50333
BR2026-0000-000297
unclaimed
Windows Spaceport.sys Elevation of Privilege Vulnerability
Credited as 0nid with ENKI WhiteHat
CVE-2026-50333
BR2026-0000-000298
unclaimed
Windows Spaceport.sys Elevation of Privilege Vulnerability
Credited as Hae Seong Cho (yurok)
CVE-2026-50333
BR2026-0000-000299
unclaimed
Windows Spaceport.sys Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-50333
BR2026-0000-000300
unclaimed
Windows Spaceport.sys Elevation of Privilege Vulnerability
Credited as wgg