Microsoft

June 2026 Security Updates

2026-Jun Jun 9, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jun, revision 2026-07-15T07:00:00Z). 991 vulnerabilities, 215 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Jun

Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

332 lines

Showing 201–250 of 332 matching · page 5 of 7 · clear filters

CVE-2026-47284 BR2026-0000-002394 unclaimed

Visual Studio Code Information Disclosure Vulnerability

Credited as whoismarcel

CVE-2026-47293 BR2026-0000-002395 unclaimed

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Credited as 0ccbbf129444eb66344ccafb92b00df4

CVE-2026-42910 BR2026-0000-002396 unclaimed

Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability

Credited as Dongjun Lee (m0nd2y) with KAIST Hacking Lab

CVE-2026-47634 BR2026-0000-002397 unclaimed

Microsoft SharePoint Server Spoofing Vulnerability

Credited as José Pedro Pereira Junior

CVE-2026-47640 BR2026-0000-002398 unclaimed

Microsoft SharePoint Server Spoofing Vulnerability

Credited as 41ae55e9310ff27fa6f26af4727e5590

CVE-2026-47643 BR2026-0000-002399 unclaimed

Azure Stack Edge Remote Code Execution Vulnerability

Credited as Hay Mizrachi with Microsoft

CVE-2026-45481 BR2026-0000-002400 unclaimed

Microsoft SharePoint Server Spoofing Vulnerability

Credited as P1hcn

CVE-2026-45484 BR2026-0000-002401 unclaimed

Microsoft SharePoint Elevation of Privilege Vulnerability

Credited as Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.

CVE-2026-45484 BR2026-0000-002402 unclaimed

Microsoft SharePoint Elevation of Privilege Vulnerability

Credited as hamayanhamayan

CVE-2026-47656 BR2026-0000-002403 unclaimed

Windows Boot Manager Security Feature Bypass Vulnerability

Credited as Microsoft

CVE-2026-48560 BR2026-0000-002404 unclaimed

Microsoft SharePoint Server Spoofing Vulnerability

Credited as Oleksandr Mirosh

CVE-2026-48565 BR2026-0000-002405 unclaimed

Windows Narrator Braille Elevation of Privilege Vulnerability

Credited as Zeeshan Shaikh (@bugzzzhunter) working with TrendAI Zero Day Initiative

CVE-2026-48574 BR2026-0000-002406 unclaimed

Windows Media Remote Code Execution Vulnerability

Credited as cyanbamboo

CVE-2026-48574 BR2026-0000-002407 unclaimed

Windows Media Remote Code Execution Vulnerability

Credited as b2ahex

CVE-2026-48574 BR2026-0000-002408 unclaimed

Windows Media Remote Code Execution Vulnerability

Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab

CVE-2026-48574 BR2026-0000-002409 unclaimed

Windows Media Remote Code Execution Vulnerability

Credited as yhw

CVE-2026-48574 BR2026-0000-002410 unclaimed

Windows Media Remote Code Execution Vulnerability

Credited as txz

CVE-2026-49160 BR2026-0000-002411 unclaimed

HTTP.sys Denial of Service Vulnerability

Credited as Quang Luong of Calif.io in collaboration with Codex with Calif.io

CVE-2026-50511 BR2026-0000-002412 unclaimed

Microsoft PC Manager Elevation of Privilege Vulnerability

Credited as Xin Liu with N05ec@LZU-DSLab

CVE-2026-50512 BR2026-0000-002413 unclaimed

Microsoft PC Manager Elevation of Privilege Vulnerability

Credited as Xin Liu with N05ec@LZU-DSLab

CVE-2026-50521 BR2026-0000-002414 unclaimed

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Credited as sangnt (@gnas0x0018) with Viettel Cyber Security

CVE-2026-42836 BR2026-0000-002415 unclaimed

Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

Credited as AIフィジカルインターフェイス二号機

CVE-2026-42837 BR2026-0000-002416 unclaimed

Windows Projected File System Elevation of Privilege Vulnerability

Credited as DongJun Kim with Enki WhiteHat

CVE-2026-42837 BR2026-0000-002417 unclaimed

Windows Projected File System Elevation of Privilege Vulnerability

Credited as GwanHyun Lee

CVE-2026-42837 BR2026-0000-002418 unclaimed

Windows Projected File System Elevation of Privilege Vulnerability

Credited as RanchoIce

CVE-2026-42837 BR2026-0000-002419 unclaimed

Windows Projected File System Elevation of Privilege Vulnerability

Credited as Zeze with TXOne

CVE-2026-42903 BR2026-0000-002420 unclaimed

Windows Kerberos Denial of Service Vulnerability

Credited as Andrew Schwartz with Huntress Labs

CVE-2026-42903 BR2026-0000-002421 unclaimed

Windows Kerberos Denial of Service Vulnerability

Credited as Charlie Clark

CVE-2026-42904 BR2026-0000-002422 unclaimed

Windows TCP/IP Elevation of Privilege Vulnerability

Credited as Donghyeon Oh with Patchpoint

CVE-2026-42904 BR2026-0000-002423 unclaimed

Windows TCP/IP Elevation of Privilege Vulnerability

Credited as Jonghoi Kim

CVE-2026-42905 BR2026-0000-002424 unclaimed

Windows DWM Core Library Elevation of Privilege Vulnerability

Credited as Minjea Park, Jmini

CVE-2026-42905 BR2026-0000-002425 unclaimed

Windows DWM Core Library Elevation of Privilege Vulnerability

Credited as ji9umi with Stealien

CVE-2026-42906 BR2026-0000-002426 unclaimed

Windows Shell Information Disclosure Vulnerability

Credited as Microsoft

CVE-2026-42908 BR2026-0000-002427 unclaimed

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Credited as pwn2addr

CVE-2026-42980 BR2026-0000-002428 unclaimed

NT OS Kernel Elevation of Privilege Vulnerability

Credited as Pwnforr777

CVE-2026-42909 BR2026-0000-002429 unclaimed

Remote Desktop Client Remote Code Execution Vulnerability

Credited as pwn2addr

CVE-2026-42916 BR2026-0000-002430 unclaimed

NT OS Kernel Elevation of Privilege Vulnerability

Credited as Erik Egsgard with Field Effect

CVE-2026-42911 BR2026-0000-002431 unclaimed

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Credited as Angelboy (@scwuaptx) with DEVCORE

CVE-2026-42913 BR2026-0000-002432 unclaimed

Remote Desktop Client Remote Code Execution Vulnerability

Credited as pwn2addr

CVE-2026-42912 BR2026-0000-002433 unclaimed

Windows Telephony Service Elevation of Privilege Vulnerability

Credited as DongJun Kim with Enki WhiteHat

CVE-2026-42914 BR2026-0000-002434 unclaimed

Windows Kerberos Denial of Service Vulnerability

Credited as Microsoft

CVE-2026-42914 BR2026-0000-002435 unclaimed

Windows Kerberos Denial of Service Vulnerability

Credited as Andrew Schwartz with Huntress Labs and Charlie Clark

CVE-2026-42915 BR2026-0000-002436 unclaimed