BugRater
Early access: this site has moved to bugrater.com.

Security releases

Microsoft

June 2026 Security Updates

2026-Jun Jun 9, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jun, revision 2026-07-15T07:00:00Z). 991 vulnerabilities, 215 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Jun
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

332 lines
All 332 CVEs 332 Additional recognition 0 Unclaimed only
Showing 101–150 of 332 matching · page 3 of 7 · clear filters
CVE-2026-47289 BR2026-0000-002294 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Raymond Reskusich
CVE-2026-47291 BR2026-0000-002295 unclaimed
HTTP.sys Remote Code Execution Vulnerability
Credited as Microsoft
CVE-2026-47291 BR2026-0000-002296 unclaimed
HTTP.sys Remote Code Execution Vulnerability
Credited as haowei yan
CVE-2026-47291 BR2026-0000-002297 unclaimed
HTTP.sys Remote Code Execution Vulnerability
Credited as goodbyeselene
CVE-2026-47292 BR2026-0000-002298 unclaimed
Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability
Credited as Bankde Eakasit with Secure D Center
CVE-2026-41092 BR2026-0000-002299 unclaimed
Microsoft Kinect Elevation of Privilege Vulnerability
Credited as Maximilian Letzner with Deutsche Bahn AG
CVE-2026-41092 BR2026-0000-002300 unclaimed
Microsoft Kinect Elevation of Privilege Vulnerability
Credited as Oliver Matula with DB Systel GmbH
CVE-2026-41092 BR2026-0000-002301 unclaimed
Microsoft Kinect Elevation of Privilege Vulnerability
Credited as Tim Kornhuber with DB Systel GmbH
CVE-2026-32193 BR2026-0000-002302 unclaimed
Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability
Credited as Ori Lahav with Rubrik
CVE-2026-47298 BR2026-0000-002303 unclaimed
Microsoft SharePoint Server Remote Code Execution Vulnerability
Credited as Chumy Tsai (@rm_rf_chumy) with CyCraft Technology
CVE-2026-47631 BR2026-0000-002304 unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as P1hcn
CVE-2026-47631 BR2026-0000-002305 unclaimed
Microsoft Exchange Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-41098 BR2026-0000-002306 unclaimed
Azure Stack Edge Spoofing Vulnerability
Credited as Hay Mizrachi with Microsoft
CVE-2026-47635 BR2026-0000-002307 unclaimed
Microsoft Outlook and Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-47636 BR2026-0000-002308 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as P1hcn
CVE-2026-47636 BR2026-0000-002309 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-47637 BR2026-0000-002310 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as Adi Ivascu
CVE-2026-47638 BR2026-0000-002311 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-47639 BR2026-0000-002312 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-47641 BR2026-0000-002313 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45588 BR2026-0000-002314 unclaimed
Secure Boot Security Feature Bypass Vulnerability
Credited as Alon Leviev with Microsoft Offensive Research
CVE-2026-45588 BR2026-0000-002315 unclaimed
Secure Boot Security Feature Bypass Vulnerability
Credited as Security Engineering (MORSE)
CVE-2026-47648 BR2026-0000-002316 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as QYmag1c
CVE-2026-8863 BR2026-0000-002317 unclaimed
UEFI Secure Boot Security Feature Bypass Vulnerability
Credited as Martin Smolar ESET
CVE-2026-47653 BR2026-0000-002318 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim with KAIST Hacking Lab
CVE-2026-47652 BR2026-0000-002319 unclaimed
Windows Hyper-V Remote Code Execution Vulnerability
Credited as MORSE with Microsoft
CVE-2026-47654 BR2026-0000-002320 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as ʌ!ɔ⊥ojv
CVE-2026-48563 BR2026-0000-002321 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Arnab Sengupta
CVE-2026-48566 BR2026-0000-002322 unclaimed
Windows DWM Core Library Information Disclosure Vulnerability
Credited as namnp with Viettel Cyber Security
CVE-2026-48568 BR2026-0000-002323 unclaimed
Secure Boot Security Feature Bypass Vulnerability
Credited as Alon Leviev with Microsoft (STORM)
CVE-2026-48570 BR2026-0000-002324 unclaimed
Secure Boot Security Feature Bypass Vulnerability
Credited as Alon Leviev with Microsoft (STORM)
CVE-2026-48573 BR2026-0000-002325 unclaimed
Secure Boot Security Feature Bypass Vulnerability
Credited as Alon Leviev with Microsoft (STORM)
CVE-2026-48575 BR2026-0000-002326 unclaimed
Secure Boot Security Feature Bypass Vulnerability
Credited as Alon Leviev with Microsoft (STORM)
CVE-2026-48576 BR2026-0000-002327 unclaimed
Secure Boot Security Feature Bypass Vulnerability
Credited as Alon Leviev with Microsoft (STORM)
CVE-2026-48578 BR2026-0000-002328 unclaimed
Secure Boot Security Feature Bypass Vulnerability
Credited as Alon Leviev with Microsoft (STORM)
CVE-2026-48583 BR2026-0000-002329 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Nathaniel Oh (@calysteon)
CVE-2026-49161 BR2026-0000-002330 unclaimed
Microsoft PC Manager Security Feature Bypass Vulnerability
Credited as Xin Liu with N05ec@LZU-DSLab
CVE-2026-50508 BR2026-0000-002331 unclaimed
Windows NTLM Spoofing Vulnerability
Credited as Jonathan Lein of TrendAI Research with https://www.zerodayinitiative.com/
CVE-2026-26142 BR2026-0000-002332 unclaimed
Nuance PowerScribe Remote Code Execution Vulnerability
Credited as Víctor A. Morales with GM Sectec, Corp.
CVE-2026-26142 BR2026-0000-002333 unclaimed
Nuance PowerScribe Remote Code Execution Vulnerability
Credited as Jan Rodríguez with GM Sectec, Corp.
CVE-2026-50519 BR2026-0000-002334 unclaimed
Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability
Credited as Tri Wanda Septian
CVE-2026-40371 BR2026-0000-002335 unclaimed
Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability
Credited as Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
CVE-2026-40371 BR2026-0000-002336 unclaimed
Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability
Credited as f7d8c52bec79e42795cf15888b85cbad
CVE-2026-42828 BR2026-0000-002337 unclaimed
Windows Projected File System Elevation of Privilege Vulnerability
Credited as DongJun Kim with Enki WhiteHat
CVE-2026-42828 BR2026-0000-002338 unclaimed
Windows Projected File System Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-42828 BR2026-0000-002339 unclaimed
Windows Projected File System Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-42828 BR2026-0000-002340 unclaimed
Windows Projected File System Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-42828 BR2026-0000-002341 unclaimed
Windows Projected File System Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-42828 BR2026-0000-002342 unclaimed
Windows Projected File System Elevation of Privilege Vulnerability
Credited as Vang3lis
CVE-2026-42829 BR2026-0000-002343 unclaimed
Windows Administrator Protection Secure Feature Bypass Vulnerability
Credited as Antonio Cocomazzi with SentinelOne