Microsoft
June 2026 Security Updates
2026-Jun Jun 9, 2026 Source: Vendor
Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jun, revision 2026-07-15T07:00:00Z). 991 vulnerabilities, 215 of them carrying an acknowledgement. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://msrc.microsoft.com/update-guide/releaseNote/2026-Jun
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
332 lines
Showing 301–332 of 332 matching · page 7 of 7 · clear filters
CVE-2026-44803
BR2026-0000-002494
unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as SnowRockLab
CVE-2026-44812
BR2026-0000-002495
unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as SnowRockLab
CVE-2026-44812
BR2026-0000-002496
unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-44812
BR2026-0000-002497
unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as rustemsignore
CVE-2026-44812
BR2026-0000-002498
unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as Kyeongmin Kim (@hareh4ru) with KAIST Hacking Lab
CVE-2026-44812
BR2026-0000-002499
unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-44812
BR2026-0000-002500
unclaimed
Windows Graphics Component Remote Code Execution Vulnerability
Credited as txz
CVE-2026-42993
BR2026-0000-002501
unclaimed
Remote Desktop Client Remote Code Execution Vulnerability
Credited as pwn2addr
CVE-2026-44813
BR2026-0000-002502
unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Varun Goel
CVE-2026-44804
BR2026-0000-002503
unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as Varun Goel
CVE-2026-45497
BR2026-0000-002504
unclaimed
Microsoft M365 Copilot Remote Code Execution Vulnerability
Credited as Holly Wright with Microsoft
CVE-2026-45497
BR2026-0000-002505
unclaimed
Microsoft M365 Copilot Remote Code Execution Vulnerability
Credited as Yizhou Feng with Microsoft
CVE-2026-45497
BR2026-0000-002506
unclaimed
Microsoft M365 Copilot Remote Code Execution Vulnerability
Credited as Guillermo Diaz with Microsoft
CVE-2026-42824
BR2026-0000-002507
unclaimed
M365 Copilot Information Disclosure Vulnerability
Credited as Dolev Taler with Varonis
CVE-2026-48567
BR2026-0000-002508
unclaimed
Azure HorizonDB Elevation of Privilege Vulnerability
Credited as Sharath Unni
CVE-2026-48579
BR2026-0000-002509
unclaimed
Microsoft Exchange Online Information Disclosure Vulnerability
Credited as Henrique Pereira with Microsoft
CVE-2026-48579
BR2026-0000-002510
unclaimed
Microsoft Exchange Online Information Disclosure Vulnerability
Credited as Maxmillian Toor with Microsoft
CVE-2026-48582
BR2026-0000-002511
unclaimed
Microsoft Exchange Online Elevation of Privilege Vulnerability
Credited as Henrique Pereira with Microsoft
CVE-2026-47645
BR2026-0000-002512
unclaimed
Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
Credited as Yogeesh Seralathan with Microsoft
CVE-2026-47646
BR2026-0000-002513
unclaimed
Dynamics 365 Customer Voice Spoofing Vulnerability
Credited as Varsha Chahal with Microsoft
CVE-2026-45469
BR2026-0000-005948
unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45460
BR2026-0000-005949
unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as SeaDragnoL
CVE-2026-50508
BR2026-0000-005950
unclaimed
Windows NTLM Spoofing Vulnerability
Credited as yhw
CVE-2026-50508
BR2026-0000-005951
unclaimed
Windows NTLM Spoofing Vulnerability
Credited as txz
CVE-2026-45592
BR2026-0000-005952
unclaimed
Windows Internet (wininet.dll) Elevation of Privilege Vulnerability
Credited as K0shl
CVE-2026-45593
BR2026-0000-005953
unclaimed
Windows SDK Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-45597
BR2026-0000-005954
unclaimed
Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-42912
BR2026-0000-007182
unclaimed
Windows Telephony Service Elevation of Privilege Vulnerability
Credited as AIフィジカルインターフェイス二号機
CVE-2026-44808
BR2026-0000-008887
unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as yhw
CVE-2026-44808
BR2026-0000-008888
unclaimed
Windows DWM Core Library Elevation of Privilege Vulnerability
Credited as txz
CVE-2026-45639
BR2026-0000-009287
unclaimed
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Credited as PB18
CVE-2026-45639
BR2026-0000-009288
unclaimed
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Credited as Thanatos Tian of Diffract