BugRater
Early access: this site has moved to bugrater.com.

Security releases

Microsoft

June 2026 Security Updates

2026-Jun Jun 9, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jun, revision 2026-07-15T07:00:00Z). 991 vulnerabilities, 215 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Jun
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

332 lines
All 332 CVEs 332 Additional recognition 0 Unclaimed only
Showing 251–300 of 332 · page 6 of 7
CVE-2026-42968 BR2026-0000-002444 unclaimed
Windows Telephony Server Information Disclosure Vulnerability
Credited as wxz
CVE-2026-42968 BR2026-0000-002445 unclaimed
Windows Telephony Server Information Disclosure Vulnerability
Credited as Diffract
CVE-2026-42968 BR2026-0000-002446 unclaimed
Windows Telephony Server Information Disclosure Vulnerability
Credited as z1r0
CVE-2026-42972 BR2026-0000-002447 unclaimed
Windows Hyper-V Information Disclosure Vulnerability
Credited as DongJun Kim with Enki WhiteHat
CVE-2026-42972 BR2026-0000-002448 unclaimed
Windows Hyper-V Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-42972 BR2026-0000-002449 unclaimed
Windows Hyper-V Information Disclosure Vulnerability
Credited as cyanbamboo
CVE-2026-42972 BR2026-0000-002450 unclaimed
Windows Hyper-V Information Disclosure Vulnerability
Credited as b2ahex
CVE-2026-42972 BR2026-0000-002451 unclaimed
Windows Hyper-V Information Disclosure Vulnerability
Credited as Ahmad Abdillah bin Zaini
CVE-2026-42984 BR2026-0000-002452 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Jongseong Kim (nevul37), SEC-agent team
CVE-2026-42984 BR2026-0000-002453 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Hwiwon Lee (hwiwonl), SEC-agent team
CVE-2026-42984 BR2026-0000-002454 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Younggi Park (grill66), SEC-agent team
CVE-2026-42981 BR2026-0000-002455 unclaimed
Windows Performance Monitor Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU) with Diffract
CVE-2026-42981 BR2026-0000-002456 unclaimed
Windows Performance Monitor Remote Code Execution Vulnerability
Credited as @2st__ with Diffract
CVE-2026-42974 BR2026-0000-002457 unclaimed
Windows Performance Monitor Remote Code Execution Vulnerability
Credited as Thanatos Tian (PolyU) with Diffract, @2st___ of Diffract and Zhiniang Peng with HUST
CVE-2026-42986 BR2026-0000-002458 unclaimed
Microsoft Graphics Component Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-42978 BR2026-0000-002459 unclaimed
Windows Push Notifications Elevation of Privilege Vulnerability
Credited as Yun Cong
CVE-2026-42977 BR2026-0000-002460 unclaimed
Windows Push Notifications Elevation of Privilege Vulnerability
Credited as Yun Cong
CVE-2026-42979 BR2026-0000-002461 unclaimed
Windows Push Notifications Elevation of Privilege Vulnerability
Credited as Yun Cong
CVE-2026-42991 BR2026-0000-002462 unclaimed
Windows Push Notifications Elevation of Privilege Vulnerability
Credited as Yun Cong
CVE-2026-42989 BR2026-0000-002463 unclaimed
Winlogon Elevation of Privilege Vulnerability
Credited as Malvarez with TeamA
CVE-2026-42989 BR2026-0000-002464 unclaimed
Winlogon Elevation of Privilege Vulnerability
Credited as Chen Le Qi (@cplearns2h4ck) with STAR Labs SG Pte. Ltd.
CVE-2026-44809 BR2026-0000-002465 unclaimed
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Credited as Puneeth
CVE-2026-42992 BR2026-0000-002466 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-42992 BR2026-0000-002467 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as pwn2addr
CVE-2026-42992 BR2026-0000-002468 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-42992 BR2026-0000-002469 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as txz
CVE-2026-44805 BR2026-0000-002470 unclaimed
Windows Network Controller (NC) Host Agent Denial of Service Vulnerability
Credited as Microsoft
CVE-2026-44811 BR2026-0000-002471 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Seung Chan Kim
CVE-2026-44811 BR2026-0000-002472 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Owen McCullough with Microsoft
CVE-2026-44811 BR2026-0000-002473 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-44811 BR2026-0000-002474 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as PB18
CVE-2026-44811 BR2026-0000-002475 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-44808 BR2026-0000-002476 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Owen McCullough with Microsoft
CVE-2026-44807 BR2026-0000-002477 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Owen McCullough with Microsoft
CVE-2026-44799 BR2026-0000-002478 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-44815 BR2026-0000-002479 unclaimed
DHCP Client Service Remote Code Execution Vulnerability
Credited as Milan Justel with Microsoft
CVE-2026-44815 BR2026-0000-002480 unclaimed
DHCP Client Service Remote Code Execution Vulnerability
Credited as Brandon Fisher
CVE-2026-42983 BR2026-0000-002481 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Arjun Vasudeva with MSRC V&M - Exploit Research Team
CVE-2026-44802 BR2026-0000-002482 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Arjun with MSRC Vulnerabilities
CVE-2026-44802 BR2026-0000-002483 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Mitigations; Varun Goel
CVE-2026-44814 BR2026-0000-002484 unclaimed
Windows DWM Core Library Information Disclosure Vulnerability
Credited as Owen McCullough with Microsoft
CVE-2026-44814 BR2026-0000-002485 unclaimed
Windows DWM Core Library Information Disclosure Vulnerability
Credited as Seung Chan Kim
CVE-2026-44814 BR2026-0000-002486 unclaimed
Windows DWM Core Library Information Disclosure Vulnerability
Credited as yhw
CVE-2026-44814 BR2026-0000-002487 unclaimed
Windows DWM Core Library Information Disclosure Vulnerability
Credited as txz
CVE-2026-44801 BR2026-0000-002488 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-42985 BR2026-0000-002489 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-42987 BR2026-0000-002490 unclaimed
Windows Deployment Services (WDS) Remote Code Execution
Credited as R4nger with Kunlun Lab
CVE-2026-42987 BR2026-0000-002491 unclaimed
Windows Deployment Services (WDS) Remote Code Execution
Credited as Zhiniang Peng with HUST
CVE-2026-44803 BR2026-0000-002492 unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-44803 BR2026-0000-002493 unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as txz