Microsoft
June 2026 Security Updates
2026-Jun Jun 9, 2026 Source: Vendor
Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jun, revision 2026-07-15T07:00:00Z). 991 vulnerabilities, 215 of them carrying an acknowledgement. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://msrc.microsoft.com/update-guide/releaseNote/2026-Jun
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
332 lines
Showing 51–100 of 332 matching · page 2 of 7 · clear filters
CVE-2026-45460
BR2026-0000-002244
unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as FluddSec with RunicLabs
CVE-2026-45466
BR2026-0000-002245
unclaimed
Microsoft Word Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45487
BR2026-0000-002246
unclaimed
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Credited as Ariel Terry
CVE-2026-45490
BR2026-0000-002247
unclaimed
.NET SDK Elevation of Privilege Vulnerability
Credited as Ky0toFu
CVE-2026-45490
BR2026-0000-002248
unclaimed
.NET SDK Elevation of Privilege Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45490
BR2026-0000-002249
unclaimed
.NET SDK Elevation of Privilege Vulnerability
Credited as chupaohong
CVE-2026-45490
BR2026-0000-002250
unclaimed
.NET SDK Elevation of Privilege Vulnerability
Credited as kai63001
CVE-2026-45491
BR2026-0000-002251
unclaimed
.NET Tampering Vulnerability
Credited as Ashmit Sharma
CVE-2026-45491
BR2026-0000-002252
unclaimed
.NET Tampering Vulnerability
Credited as Ky0toFu
CVE-2026-45491
BR2026-0000-002253
unclaimed
.NET Tampering Vulnerability
Credited as phrolo7a
CVE-2026-45500
BR2026-0000-002254
unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as P1hcn
CVE-2026-45500
BR2026-0000-002255
unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as DongJun Kim with UIUC
CVE-2026-45500
BR2026-0000-002256
unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45501
BR2026-0000-002257
unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as MARIOS GYFTOS
CVE-2026-45501
BR2026-0000-002258
unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as DongJun Kim (smlijun) with UIUC
CVE-2026-45501
BR2026-0000-002259
unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as Hwiwon Lee (hwiwonl) with UIUC
CVE-2026-45501
BR2026-0000-002260
unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as Jongseong Kim (nevul37) with UIUC
CVE-2026-45501
BR2026-0000-002261
unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as TALHA GÜNAY
CVE-2026-45501
BR2026-0000-002262
unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as Younggi Park (grill66) with UIUC
CVE-2026-45501
BR2026-0000-002263
unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as Artemy Tsetsersky with Angara Security
CVE-2026-45502
BR2026-0000-002264
unclaimed
Microsoft Exchange Server Information Disclosure Vulnerability
Credited as DongJun Kim (smlijun) with UIUC
CVE-2026-45502
BR2026-0000-002265
unclaimed
Microsoft Exchange Server Information Disclosure Vulnerability
Credited as Hwiwon Lee (hwiwonl) with UIUC
CVE-2026-45502
BR2026-0000-002266
unclaimed
Microsoft Exchange Server Information Disclosure Vulnerability
Credited as Jongseong Kim (nevul37) with UIUC
CVE-2026-45502
BR2026-0000-002267
unclaimed
Microsoft Exchange Server Information Disclosure Vulnerability
Credited as Younggi Park (grill66) with UIUC
CVE-2026-45502
BR2026-0000-002268
unclaimed
Microsoft Exchange Server Information Disclosure Vulnerability
Credited as Guy Hayou with SecCreative
CVE-2026-45502
BR2026-0000-002269
unclaimed
Microsoft Exchange Server Information Disclosure Vulnerability
Credited as Navapon Premkasem
CVE-2026-45502
BR2026-0000-002270
unclaimed
Microsoft Exchange Server Information Disclosure Vulnerability
Credited as TALHA GÜNAY
CVE-2026-45503
BR2026-0000-002271
unclaimed
Microsoft Exchange Server Information Disclosure Vulnerability
Credited as Vaibhavi Kalgutkar with Microsoft
CVE-2026-45504
BR2026-0000-002272
unclaimed
Microsoft Exchange Server Elevation of Privilege Vulnerability
Credited as DongJun Kim with UIUC
CVE-2026-45504
BR2026-0000-002273
unclaimed
Microsoft Exchange Server Elevation of Privilege Vulnerability
Credited as Batuhan Er with HawkTrace
CVE-2026-45504
BR2026-0000-002274
unclaimed
Microsoft Exchange Server Elevation of Privilege Vulnerability
Credited as MARIOS GYFTOS
CVE-2026-45605
BR2026-0000-002275
unclaimed
Windows Bluetooth Service Elevation of Privilege Vulnerability
Credited as hazard
CVE-2026-45639
BR2026-0000-002276
unclaimed
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-45639
BR2026-0000-002277
unclaimed
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Credited as pwn2addr
CVE-2026-45640
BR2026-0000-002278
unclaimed
Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
Credited as hazard
CVE-2026-45606
BR2026-0000-002279
unclaimed
Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
Credited as HeeChan Kim of TeamH4C
CVE-2026-45607
BR2026-0000-002280
unclaimed
Windows Hyper-V Remote Code Execution Vulnerability
Credited as MORSE with Microsoft
CVE-2026-45641
BR2026-0000-002281
unclaimed
Windows Hyper-V Remote Code Execution Vulnerability
Credited as MORSE with Microsoft
CVE-2026-45634
BR2026-0000-002282
unclaimed
Windows DHCP Client Information Disclosure Vulnerability
Credited as Microsoft
CVE-2026-45634
BR2026-0000-002283
unclaimed
Windows DHCP Client Information Disclosure Vulnerability
Credited as Brandon Fisher
CVE-2026-45642
BR2026-0000-002284
unclaimed
Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability
Credited as Nick Peterson with Riot Games
CVE-2026-45643
BR2026-0000-002285
unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45645
BR2026-0000-002286
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45649
BR2026-0000-002287
unclaimed
Office for Android Spoofing Vulnerability
Credited as Yanir Tsarimi
CVE-2026-45650
BR2026-0000-002288
unclaimed
Microsoft Bing Search Spoofing Vulnerability
Credited as Alfaz Hossain
CVE-2026-45655
BR2026-0000-002289
unclaimed
Windows BitLocker Security Feature Bypass Vulnerability
Credited as Alon Leviev with Microsoft (STORM)
CVE-2026-45656
BR2026-0000-002290
unclaimed
UEFI Secure Boot Security Feature Bypass Vulnerability
Credited as Alon Leviev with Microsoft (STORM)
CVE-2026-45657
BR2026-0000-002291
unclaimed
Windows Kernel Remote Code Execution Vulnerability
Credited as Microsoft
CVE-2026-47287
BR2026-0000-002292
unclaimed
Visual Studio Code Tampering Vulnerability
Credited as Ian Brandeberry with Microsoft
CVE-2026-47288
BR2026-0000-002293
unclaimed
Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
Credited as Microsoft