BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

July 2026 Security Updates

2026-Jul Jul 14, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jul, revision 2026-08-03T07:00:00Z). 2070 vulnerabilities, 658 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Jul
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1055 lines
All 1055 CVEs 1055 Additional recognition 0 Unclaimed only
Showing 1–50 of 1055 · page 1 of 22
CVE-2026-48561 BR2026-0000-000001 unclaimed
Microsoft Edge Copilot Remote Code Execution Vulnerability
Credited as Ofek Levin Enclave with Enclave
CVE-2026-45488 BR2026-0000-000002 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Moch. Azril
CVE-2026-45488 BR2026-0000-000003 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Barath Stalin K
CVE-2026-45488 BR2026-0000-000004 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Hafiizh with https://www.linkedin.com/in/hafiizh-7aa6bb31/
CVE-2026-45488 BR2026-0000-000005 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as FARISSAL B
CVE-2026-45488 BR2026-0000-000006 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Francesco Jeremy Topol with k4tedu
CVE-2026-45488 BR2026-0000-000007 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Alfaz Hossain with POTDF
CVE-2026-45488 BR2026-0000-000008 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as xzyhellsing
CVE-2026-42982 BR2026-0000-000009 unclaimed
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Credited as Arush Agarampur (Microsoft)
CVE-2026-47296 BR2026-0000-000010 unclaimed
Microsoft SQL Server Elevation of Privilege Vulnerability
Credited as Sharath Unni
CVE-2026-45499 BR2026-0000-000011 unclaimed
Azure OpenAI Elevation of Privilege Vulnerability
Credited as brahim_nah
CVE-2026-54998 BR2026-0000-000012 unclaimed
Microsoft Exchange Online Elevation of Privilege Vulnerability
Credited as Stefan Wey with Alweys | (UMB AG)
CVE-2026-41106 BR2026-0000-000013 unclaimed
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Credited as Vaibhavi Kalgutkar with Microsoft
CVE-2026-41106 BR2026-0000-000014 unclaimed
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Credited as Dan Reimer with Microsoft
CVE-2026-41106 BR2026-0000-000015 unclaimed
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Credited as Henrique Pereira with Microsoft
CVE-2026-59117 BR2026-0000-000016 unclaimed
Windows Terminal Remote Code Execution Vulnerability
Credited as Dhiraj Mishra (@RandomDhiraj)
CVE-2026-56167 BR2026-0000-000017 unclaimed
Azure AI Search Elevation of Privilege Vulnerability
Credited as Asaf Cohen with XBreach.ai
CVE-2026-56163 BR2026-0000-000018 unclaimed
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Credited as Yuval Weber with Microsoft
CVE-2026-54120 BR2026-0000-000019 unclaimed
Microsoft Surface Remote Code Execution Vulnerability
Credited as Nikhil Sahoo with Microsoft
CVE-2026-54120 BR2026-0000-000020 unclaimed
Microsoft Surface Remote Code Execution Vulnerability
Credited as Prashant Kumar with Microsoft
CVE-2026-54120 BR2026-0000-000021 unclaimed
Microsoft Surface Remote Code Execution Vulnerability
Credited as Deepak Bhardwaj with Microsoft
CVE-2026-56160 BR2026-0000-000022 unclaimed
Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability
Credited as Hillary Lipsig with Red Hat
CVE-2026-66318 BR2026-0000-000023 unclaimed
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-66321 BR2026-0000-000024 unclaimed
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Credited as Kugelblitz with Microsoft
CVE-2026-34349 BR2026-0000-000025 unclaimed
Windows Media Information Disclosure Vulnerability
Credited as Byunghyun Kang with KAIST
CVE-2026-34346 BR2026-0000-000026 unclaimed
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
Credited as David Zhu with Microsoft
CVE-2026-45489 BR2026-0000-000027 unclaimed
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Credited as Ofek Levin Enclave with Enclave
CVE-2026-42975 BR2026-0000-000028 unclaimed
Windows Bluetooth Port Driver Remote Code Execution
Credited as Philip Tsukerman with Palo Alto Networks
CVE-2026-42975 BR2026-0000-000029 unclaimed
Windows Bluetooth Port Driver Remote Code Execution
Credited as Christian Siegert - chrisbsd
CVE-2026-42975 BR2026-0000-000030 unclaimed
Windows Bluetooth Port Driver Remote Code Execution
Credited as Hyeon Park (`@_p0her_`) of Korea University
CVE-2026-42975 BR2026-0000-000031 unclaimed
Windows Bluetooth Port Driver Remote Code Execution
Credited as TwinkleStar03 with DEVCORE Internship Program
CVE-2026-47300 BR2026-0000-000032 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Lucas Futures
CVE-2026-47300 BR2026-0000-000033 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Artur Stetsko
CVE-2026-47302 BR2026-0000-000034 unclaimed
.NET Denial of Service Vulnerability
Credited as Levi Broderick with Microsoft
CVE-2026-47303 BR2026-0000-000035 unclaimed
ASP.NET Core Elevation of Privilege Vulnerability
Credited as Pham Quang Minh
CVE-2026-42990 BR2026-0000-000036 unclaimed
SQL Server ODBC driver Elevation of Privilege Vulnerability
Credited as Mathias Vorreiter Pedersen with Microsoft
CVE-2026-49162 BR2026-0000-000037 unclaimed
Microsoft Brokering File System Elevation of Privilege Vulnerability
Credited as Grant Hume
CVE-2026-49164 BR2026-0000-000038 unclaimed
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Credited as Linzishan
CVE-2026-49164 BR2026-0000-000039 unclaimed
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Credited as Anemone
CVE-2026-49164 BR2026-0000-000040 unclaimed
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Credited as Zhiniang Peng (HUST)
CVE-2026-49167 BR2026-0000-000041 unclaimed
Windows Kernel Elevation of Privilege Vulnerability
Credited as hazard
CVE-2026-49168 BR2026-0000-000042 unclaimed
Storage Spaces Direct Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-49168 BR2026-0000-000043 unclaimed
Storage Spaces Direct Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-49168 BR2026-0000-000044 unclaimed
Storage Spaces Direct Elevation of Privilege Vulnerability
Credited as @2st__ with Diffract
CVE-2026-49168 BR2026-0000-000045 unclaimed
Storage Spaces Direct Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-49169 BR2026-0000-000046 unclaimed
Windows DNS Server Remote Code Execution Vulnerability
Credited as pwnky
CVE-2026-49170 BR2026-0000-000047 unclaimed
Windows StateRepository API Server file Elevation of Privilege Vulnerability
Credited as pwnky
CVE-2026-49171 BR2026-0000-000048 unclaimed
Windows Speech Runtime Elevation of Privilege Vulnerability
Credited as k0shl
CVE-2026-49176 BR2026-0000-000049 unclaimed
Windows WalletService Elevation of Privilege Vulnerability
Credited as Chen Le Qi (@cplearns2h4ck) with STAR Labs SG Pte. Ltd.
CVE-2026-49176 BR2026-0000-000050 unclaimed
Windows WalletService Elevation of Privilege Vulnerability
Credited as Nguyn ng Nguyn (@MochiNishimiya) with STAR Labs SG Pte. Ltd.