BugRater
Early access: this site has moved to bugrater.com.

Security releases

Microsoft

June 2026 Security Updates

2026-Jun Jun 9, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jun, revision 2026-07-15T07:00:00Z). 991 vulnerabilities, 215 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Jun
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

332 lines
All 332 CVEs 332 Additional recognition 0 Unclaimed only
Showing 151–200 of 332 · page 4 of 7
CVE-2026-42829 BR2026-0000-002344 unclaimed
Windows Administrator Protection Secure Feature Bypass Vulnerability
Credited as Simone Nicchi with SentinelOne
CVE-2026-42835 BR2026-0000-002345 unclaimed
Microsoft Teams for Android Information Disclosure Vulnerability
Credited as Ofek Levin Enclave with Enclave
CVE-2026-40376 BR2026-0000-002346 unclaimed
Visual Studio Code Elevation of Privilege Vulnerability
Credited as Adrian Frei
CVE-2026-44822 BR2026-0000-002347 unclaimed
Microsoft Excel Information Disclosure Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45454 BR2026-0000-002348 unclaimed
Microsoft SharePoint Remote Code Execution Vulnerability
Credited as Butterfly
CVE-2026-45455 BR2026-0000-002349 unclaimed
Microsoft Excel Information Disclosure Vulnerability
Credited as tibeuchen
CVE-2026-45457 BR2026-0000-002350 unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45459 BR2026-0000-002351 unclaimed
Microsoft Excel Security Feature Bypass Vulnerability
Credited as Ron Ben Yizhak with SafeBreach
CVE-2026-45462 BR2026-0000-002352 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
CVE-2026-45463 BR2026-0000-002353 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Ghirmay Desta
CVE-2026-45464 BR2026-0000-002354 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45465 BR2026-0000-002355 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
CVE-2026-45476 BR2026-0000-002356 unclaimed
Microsoft Azure Network Adapter Elevation of Privilege Vulnerability
Credited as Vincent Yin with Microsoft
CVE-2026-45476 BR2026-0000-002357 unclaimed
Microsoft Azure Network Adapter Elevation of Privilege Vulnerability
Credited as Jonathan Guerin with Microsoft
CVE-2026-45482 BR2026-0000-002358 unclaimed
Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability
Credited as Daniel Weglowski
CVE-2026-45591 BR2026-0000-002359 unclaimed
ASP.NET Core Denial of Service Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45594 BR2026-0000-002360 unclaimed
Windows Application Identity (AppID) Information Disclosure Vulnerability
Credited as Souhail Hammou
CVE-2026-45604 BR2026-0000-002361 unclaimed
Windows Managed Installer Information Disclosure Vulnerability
Credited as Souhail Hammou
CVE-2026-45595 BR2026-0000-002362 unclaimed
Windows Mark of the Web Security Feature Bypass Vulnerability
Credited as Rutger Flohil with https://pampuna.nl/
CVE-2026-45595 BR2026-0000-002363 unclaimed
Windows Mark of the Web Security Feature Bypass Vulnerability
Credited as Bob van der Staak with Grip op Security
CVE-2026-45599 BR2026-0000-002364 unclaimed
Windows UPnP Device Host Remote Code Execution Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-45601 BR2026-0000-002365 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-45598 BR2026-0000-002366 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-45636 BR2026-0000-002367 unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Jianliang Zhao
CVE-2026-45636 BR2026-0000-002368 unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as zhiniang Peng with HUST, R4nger with kunlun lab
CVE-2026-45596 BR2026-0000-002369 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-45600 BR2026-0000-002370 unclaimed
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Credited as hazard
CVE-2026-45638 BR2026-0000-002371 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as 0rb1t with None
CVE-2026-45638 BR2026-0000-002372 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Qanux with None
CVE-2026-45638 BR2026-0000-002373 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as 0rb1t
CVE-2026-45638 BR2026-0000-002374 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as wxz
CVE-2026-45638 BR2026-0000-002375 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Thanatos Tian with Diffract
CVE-2026-45638 BR2026-0000-002376 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as 021w with Vulnerability Research Institute
CVE-2026-45638 BR2026-0000-002377 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as wisi
CVE-2026-45603 BR2026-0000-002378 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-45637 BR2026-0000-002379 unclaimed
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Credited as Arjun Vasudeva with MSRC V&M - Exploit Research Team
CVE-2026-45637 BR2026-0000-002380 unclaimed
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Credited as wxz
CVE-2026-45637 BR2026-0000-002381 unclaimed
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Credited as Thanatos Tian
CVE-2026-45608 BR2026-0000-002382 unclaimed
Windows DHCP Client Information Disclosure Vulnerability
Credited as Microsoft
CVE-2026-45644 BR2026-0000-002383 unclaimed
Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability
Credited as Jianyang Song
CVE-2026-45653 BR2026-0000-002384 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Anil Chandra
CVE-2026-45654 BR2026-0000-002385 unclaimed
Secure Boot Security Feature Bypass Vulnerability
Credited as Alon Leviev with Microsoft (STORM)
CVE-2026-45647 BR2026-0000-002386 unclaimed
Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
Credited as Mihalis Haatainen with Bountyy Oy
CVE-2026-45658 BR2026-0000-002387 unclaimed
Windows BitLocker Security Feature Bypass Vulnerability
Credited as Niklas Tomsic with Cparta Cyber Defense
CVE-2026-47281 BR2026-0000-002388 unclaimed
Visual Studio Code Elevation of Privilege Vulnerability
Credited as Adam Baldwin with https://evilpacket.net/
CVE-2026-47284 BR2026-0000-002389 unclaimed
Visual Studio Code Information Disclosure Vulnerability
Credited as hamayanhamayan
CVE-2026-47284 BR2026-0000-002390 unclaimed
Visual Studio Code Information Disclosure Vulnerability
Credited as Abhishek Kushwaha with Zeta
CVE-2026-47284 BR2026-0000-002391 unclaimed
Visual Studio Code Information Disclosure Vulnerability
Credited as Jeroen Gui
CVE-2026-47284 BR2026-0000-002392 unclaimed
Visual Studio Code Information Disclosure Vulnerability
Credited as Adam Baldwin with https://evilpacket.net/
CVE-2026-47284 BR2026-0000-002393 unclaimed
Visual Studio Code Information Disclosure Vulnerability
Credited as Codermak