BugRater
Early access. This site has moved to bugrater.com.

Security releases

Microsoft

June 2026 Security Updates

2026-Jun Jun 9, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jun, revision 2026-07-15T07:00:00Z). 991 vulnerabilities, 215 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Jun
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

334 lines
All 334 CVEs 334 Additional recognition 0 Unclaimed only
Showing 1–50 of 334 , page 1 of 7
CVE-2026-41108 BR2026-0000-002194 unclaimed
Windows DNS Client Elevation of Privilege Vulnerability
Credited as WARP team at Microsoft
CVE-2026-45467 BR2026-0000-002195 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45468 BR2026-0000-002196 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45469 BR2026-0000-002197 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Jeongmin Choi with S2W
CVE-2026-45469 BR2026-0000-002198 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-45475 BR2026-0000-002199 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45475 BR2026-0000-002200 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-45475 BR2026-0000-002201 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-45471 BR2026-0000-002202 unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45479 BR2026-0000-002203 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45486 BR2026-0000-002204 unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45485 BR2026-0000-002205 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Haein Lee
CVE-2026-45483 BR2026-0000-002206 unclaimed
Microsoft Office Project Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-47644 BR2026-0000-002207 unclaimed
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Credited as Jianyang Song
CVE-2026-47633 BR2026-0000-002208 unclaimed
Microsoft Cost Management Information Disclosure Vulnerability
Credited as Sourov Ghosh
CVE-2026-45480 BR2026-0000-002209 unclaimed
Azure Active Directory Elevation of Privilege Vulnerability
Credited as Microsoft Red Team
CVE-2026-42895 BR2026-0000-002210 unclaimed
Microsoft Copilot Tampering Vulnerability
Credited as Ofek Levin with Enclave
CVE-2026-54130 BR2026-0000-002211 unclaimed
M365 Copilot Information Disclosure Vulnerability
Credited as Yuval Weber with Microsoft
CVE-2026-54130 BR2026-0000-002212 unclaimed
M365 Copilot Information Disclosure Vulnerability
Credited as Shira Hoffman with Microsoft
CVE-2026-47647 BR2026-0000-002213 unclaimed
Dynamics 365 Elevation of Privilege Vulnerability
Credited as Brad Schlintz (nmdhkr)
CVE-2026-48584 BR2026-0000-002214 unclaimed
Microsoft Azure Synapse Elevation of Privilege Vulnerability
Credited as nicolas joly
CVE-2026-40409 BR2026-0000-002215 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as Thanatos Tian (PolyU) of Diffract
CVE-2026-40409 BR2026-0000-002216 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-40409 BR2026-0000-002217 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-40409 BR2026-0000-002218 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as @2st___ of Diffract
CVE-2026-40409 BR2026-0000-002219 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as 021w
CVE-2026-40409 BR2026-0000-002220 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as 1nv0k3r
CVE-2026-40409 BR2026-0000-002221 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as M00N with BeFunLab
CVE-2026-40404 BR2026-0000-002222 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-40404 BR2026-0000-002223 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-33828 BR2026-0000-002224 unclaimed
Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
Credited as Akash Trehan
CVE-2026-34335 BR2026-0000-002225 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-42902 BR2026-0000-002226 unclaimed
Microsoft PowerToys Elevation of Privilege Vulnerability
Credited as s7331
CVE-2026-44817 BR2026-0000-002227 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as IceSword Lab and Vulnerability Research Institute
CVE-2026-44818 BR2026-0000-002228 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as f4
CVE-2026-44818 BR2026-0000-002229 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-44819 BR2026-0000-002230 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-44819 BR2026-0000-002231 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-44819 BR2026-0000-002232 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-44820 BR2026-0000-002233 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as f4
CVE-2026-44820 BR2026-0000-002234 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-44821 BR2026-0000-002235 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-44821 BR2026-0000-002236 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Jeongmin Choi(https://x.com/lmksecurity)
CVE-2026-44823 BR2026-0000-002237 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Jeongmin Choi with S2W
CVE-2026-44823 BR2026-0000-002238 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-44823 BR2026-0000-002239 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-44824 BR2026-0000-002240 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45456 BR2026-0000-002241 unclaimed
Microsoft Outlook and Word Remote Code Execution Vulnerability
Credited as tiebuchen
CVE-2026-45458 BR2026-0000-002242 unclaimed
Microsoft Outlook and Word Remote Code Execution Vulnerability
Credited as Jonghoi Kim, Donghyun Oh with kloy
CVE-2026-45460 BR2026-0000-002243 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4