BugRater
Early access. This site has moved to bugrater.com.

Security releases

Microsoft

June 2026 Security Updates

2026-Jun Jun 9, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jun, revision 2026-07-15T07:00:00Z). 991 vulnerabilities, 215 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Jun
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

334 lines
All 334 CVEs 334 Additional recognition 0 Unclaimed only
Showing 251–300 of 334 , page 6 of 7
CVE-2026-42968 BR2026-0000-002444 unclaimed
Windows Telephony Server Information Disclosure Vulnerability
Credited as wxz
CVE-2026-42968 BR2026-0000-002445 unclaimed
Windows Telephony Server Information Disclosure Vulnerability
Credited as Diffract
CVE-2026-42968 BR2026-0000-002446 unclaimed
Windows Telephony Server Information Disclosure Vulnerability
Credited as z1r0
CVE-2026-42972 BR2026-0000-002447 unclaimed
Windows Hyper-V Information Disclosure Vulnerability
Credited as DongJun Kim with Enki WhiteHat
CVE-2026-42972 BR2026-0000-002448 unclaimed
Windows Hyper-V Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-42972 BR2026-0000-002449 unclaimed
Windows Hyper-V Information Disclosure Vulnerability
Credited as cyanbamboo
CVE-2026-42972 BR2026-0000-002450 unclaimed
Windows Hyper-V Information Disclosure Vulnerability
Credited as b2ahex
CVE-2026-42972 BR2026-0000-002451 unclaimed
Windows Hyper-V Information Disclosure Vulnerability
Credited as Ahmad Abdillah bin Zaini
CVE-2026-42984 BR2026-0000-002452 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Jongseong Kim (nevul37), SEC-agent team
CVE-2026-42984 BR2026-0000-002453 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Hwiwon Lee (hwiwonl), SEC-agent team
CVE-2026-42984 BR2026-0000-002454 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as Younggi Park (grill66), SEC-agent team
CVE-2026-42981 BR2026-0000-002455 unclaimed
Windows Performance Monitor Remote Code Execution Vulnerability
Credited as Thanatos Tian (HKPolyU) with Diffract
CVE-2026-42981 BR2026-0000-002456 unclaimed
Windows Performance Monitor Remote Code Execution Vulnerability
Credited as @2st__ with Diffract
CVE-2026-42974 BR2026-0000-002457 unclaimed
Windows Performance Monitor Remote Code Execution Vulnerability
Credited as Thanatos Tian (PolyU) with Diffract, @2st___ of Diffract and Zhiniang Peng with HUST
CVE-2026-42986 BR2026-0000-002458 unclaimed
Microsoft Graphics Component Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-42978 BR2026-0000-002459 unclaimed
Windows Push Notifications Elevation of Privilege Vulnerability
Credited as Yun Cong
CVE-2026-42977 BR2026-0000-002460 unclaimed
Windows Push Notifications Elevation of Privilege Vulnerability
Credited as Yun Cong
CVE-2026-42979 BR2026-0000-002461 unclaimed
Windows Push Notifications Elevation of Privilege Vulnerability
Credited as Yun Cong
CVE-2026-42991 BR2026-0000-002462 unclaimed
Windows Push Notifications Elevation of Privilege Vulnerability
Credited as Yun Cong
CVE-2026-42989 BR2026-0000-002463 unclaimed
Winlogon Elevation of Privilege Vulnerability
Credited as Malvarez with TeamA
CVE-2026-42989 BR2026-0000-002464 unclaimed
Winlogon Elevation of Privilege Vulnerability
Credited as Chen Le Qi (@cplearns2h4ck) with STAR Labs SG Pte. Ltd.
CVE-2026-44809 BR2026-0000-002465 unclaimed
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Credited as Puneeth
CVE-2026-42992 BR2026-0000-002466 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-42992 BR2026-0000-002467 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as pwn2addr
CVE-2026-42992 BR2026-0000-002468 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-42992 BR2026-0000-002469 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as txz
CVE-2026-44805 BR2026-0000-002470 unclaimed
Windows Network Controller (NC) Host Agent Denial of Service Vulnerability
Credited as Microsoft
CVE-2026-44811 BR2026-0000-002471 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Seung Chan Kim
CVE-2026-44811 BR2026-0000-002472 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Owen McCullough with Microsoft
CVE-2026-44811 BR2026-0000-002473 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-44811 BR2026-0000-002474 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as PB18
CVE-2026-44811 BR2026-0000-002475 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-44808 BR2026-0000-002476 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Owen McCullough with Microsoft
CVE-2026-44807 BR2026-0000-002477 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Owen McCullough with Microsoft
CVE-2026-44799 BR2026-0000-002478 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-44815 BR2026-0000-002479 unclaimed
DHCP Client Service Remote Code Execution Vulnerability
Credited as Milan Justel with Microsoft
CVE-2026-44815 BR2026-0000-002480 unclaimed
DHCP Client Service Remote Code Execution Vulnerability
Credited as Brandon Fisher
CVE-2026-42983 BR2026-0000-002481 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Arjun Vasudeva with MSRC V&M - Exploit Research Team
CVE-2026-44802 BR2026-0000-002482 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Arjun with MSRC Vulnerabilities
CVE-2026-44802 BR2026-0000-002483 unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Mitigations; Varun Goel
CVE-2026-44814 BR2026-0000-002484 unclaimed
Windows DWM Core Library Information Disclosure Vulnerability
Credited as Owen McCullough with Microsoft
CVE-2026-44814 BR2026-0000-002485 unclaimed
Windows DWM Core Library Information Disclosure Vulnerability
Credited as Seung Chan Kim
CVE-2026-44814 BR2026-0000-002486 unclaimed
Windows DWM Core Library Information Disclosure Vulnerability
Credited as yhw
CVE-2026-44814 BR2026-0000-002487 unclaimed
Windows DWM Core Library Information Disclosure Vulnerability
Credited as txz
CVE-2026-44801 BR2026-0000-002488 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-42985 BR2026-0000-002489 unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-42987 BR2026-0000-002490 unclaimed
Windows Deployment Services (WDS) Remote Code Execution
Credited as R4nger with Kunlun Lab
CVE-2026-42987 BR2026-0000-002491 unclaimed
Windows Deployment Services (WDS) Remote Code Execution
Credited as Zhiniang Peng with HUST
CVE-2026-44803 BR2026-0000-002492 unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-44803 BR2026-0000-002493 unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as txz