Microsoft
June 2026 Security Updates
2026-Jun Jun 9, 2026 Source: Vendor
Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jun, revision 2026-07-15T07:00:00Z). 991 vulnerabilities, 215 of them carrying an acknowledgement. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://msrc.microsoft.com/update-guide/releaseNote/2026-Jun
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
332 lines
Showing 151–200 of 332 matching · page 4 of 7 · clear filters
CVE-2026-42829
BR2026-0000-002344
unclaimed
Windows Administrator Protection Secure Feature Bypass Vulnerability
Credited as Simone Nicchi with SentinelOne
CVE-2026-42835
BR2026-0000-002345
unclaimed
Microsoft Teams for Android Information Disclosure Vulnerability
Credited as Ofek Levin Enclave with Enclave
CVE-2026-40376
BR2026-0000-002346
unclaimed
Visual Studio Code Elevation of Privilege Vulnerability
Credited as Adrian Frei
CVE-2026-44822
BR2026-0000-002347
unclaimed
Microsoft Excel Information Disclosure Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45454
BR2026-0000-002348
unclaimed
Microsoft SharePoint Remote Code Execution Vulnerability
Credited as Butterfly
CVE-2026-45455
BR2026-0000-002349
unclaimed
Microsoft Excel Information Disclosure Vulnerability
Credited as tibeuchen
CVE-2026-45457
BR2026-0000-002350
unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45459
BR2026-0000-002351
unclaimed
Microsoft Excel Security Feature Bypass Vulnerability
Credited as Ron Ben Yizhak with SafeBreach
CVE-2026-45462
BR2026-0000-002352
unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
CVE-2026-45463
BR2026-0000-002353
unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Ghirmay Desta
CVE-2026-45464
BR2026-0000-002354
unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45465
BR2026-0000-002355
unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
CVE-2026-45476
BR2026-0000-002356
unclaimed
Microsoft Azure Network Adapter Elevation of Privilege Vulnerability
Credited as Vincent Yin with Microsoft
CVE-2026-45476
BR2026-0000-002357
unclaimed
Microsoft Azure Network Adapter Elevation of Privilege Vulnerability
Credited as Jonathan Guerin with Microsoft
CVE-2026-45482
BR2026-0000-002358
unclaimed
Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability
Credited as Daniel Weglowski
CVE-2026-45591
BR2026-0000-002359
unclaimed
ASP.NET Core Denial of Service Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45594
BR2026-0000-002360
unclaimed
Windows Application Identity (AppID) Information Disclosure Vulnerability
Credited as Souhail Hammou
CVE-2026-45604
BR2026-0000-002361
unclaimed
Windows Managed Installer Information Disclosure Vulnerability
Credited as Souhail Hammou
CVE-2026-45595
BR2026-0000-002362
unclaimed
Windows Mark of the Web Security Feature Bypass Vulnerability
Credited as Rutger Flohil with https://pampuna.nl/
CVE-2026-45595
BR2026-0000-002363
unclaimed
Windows Mark of the Web Security Feature Bypass Vulnerability
Credited as Bob van der Staak with Grip op Security
CVE-2026-45599
BR2026-0000-002364
unclaimed
Windows UPnP Device Host Remote Code Execution Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-45601
BR2026-0000-002365
unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-45598
BR2026-0000-002366
unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-45636
BR2026-0000-002367
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as Jianliang Zhao
CVE-2026-45636
BR2026-0000-002368
unclaimed
Windows NTFS Remote Code Execution Vulnerability
Credited as zhiniang Peng with HUST, R4nger with kunlun lab
CVE-2026-45596
BR2026-0000-002369
unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-45600
BR2026-0000-002370
unclaimed
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Credited as hazard
CVE-2026-45638
BR2026-0000-002371
unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as 0rb1t with None
CVE-2026-45638
BR2026-0000-002372
unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Qanux with None
CVE-2026-45638
BR2026-0000-002373
unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as 0rb1t
CVE-2026-45638
BR2026-0000-002374
unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as wxz
CVE-2026-45638
BR2026-0000-002375
unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Thanatos Tian with Diffract
CVE-2026-45638
BR2026-0000-002376
unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as 021w with Vulnerability Research Institute
CVE-2026-45638
BR2026-0000-002377
unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as wisi
CVE-2026-45603
BR2026-0000-002378
unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-45637
BR2026-0000-002379
unclaimed
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Credited as Arjun Vasudeva with MSRC V&M - Exploit Research Team
CVE-2026-45637
BR2026-0000-002380
unclaimed
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Credited as wxz
CVE-2026-45637
BR2026-0000-002381
unclaimed
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Credited as Thanatos Tian
CVE-2026-45608
BR2026-0000-002382
unclaimed
Windows DHCP Client Information Disclosure Vulnerability
Credited as Microsoft
CVE-2026-45644
BR2026-0000-002383
unclaimed
Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability
Credited as Jianyang Song
CVE-2026-45653
BR2026-0000-002384
unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Anil Chandra
CVE-2026-45654
BR2026-0000-002385
unclaimed
Secure Boot Security Feature Bypass Vulnerability
Credited as Alon Leviev with Microsoft (STORM)
CVE-2026-45647
BR2026-0000-002386
unclaimed
Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
Credited as Mihalis Haatainen with Bountyy Oy
CVE-2026-45658
BR2026-0000-002387
unclaimed
Windows BitLocker Security Feature Bypass Vulnerability
Credited as Niklas Tomsic with Cparta Cyber Defense
CVE-2026-47281
BR2026-0000-002388
unclaimed
Visual Studio Code Elevation of Privilege Vulnerability
Credited as Adam Baldwin with https://evilpacket.net/
CVE-2026-47284
BR2026-0000-002389
unclaimed
Visual Studio Code Information Disclosure Vulnerability
Credited as hamayanhamayan
CVE-2026-47284
BR2026-0000-002390
unclaimed
Visual Studio Code Information Disclosure Vulnerability
Credited as Abhishek Kushwaha with Zeta
CVE-2026-47284
BR2026-0000-002391
unclaimed
Visual Studio Code Information Disclosure Vulnerability
Credited as Jeroen Gui
CVE-2026-47284
BR2026-0000-002392
unclaimed
Visual Studio Code Information Disclosure Vulnerability
Credited as Adam Baldwin with https://evilpacket.net/
CVE-2026-47284
BR2026-0000-002393
unclaimed
Visual Studio Code Information Disclosure Vulnerability
Credited as Codermak