BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Microsoft

June 2026 Security Updates

2026-Jun Jun 9, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Jun, revision 2026-07-15T07:00:00Z). 991 vulnerabilities, 215 of them carrying an acknowledgement. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Jun
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

332 lines
All 332 CVEs 332 Additional recognition 0 Unclaimed only
Showing 1–50 of 332 · page 1 of 7
CVE-2026-41108 BR2026-0000-002194 unclaimed
Windows DNS Client Elevation of Privilege Vulnerability
Credited as WARP team at Microsoft
CVE-2026-45467 BR2026-0000-002195 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45468 BR2026-0000-002196 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45469 BR2026-0000-002197 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Jeongmin Choi with S2W
CVE-2026-45469 BR2026-0000-002198 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-45475 BR2026-0000-002199 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45475 BR2026-0000-002200 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-45475 BR2026-0000-002201 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-45471 BR2026-0000-002202 unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45479 BR2026-0000-002203 unclaimed
Microsoft SharePoint Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-45486 BR2026-0000-002204 unclaimed
Microsoft Word Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45485 BR2026-0000-002205 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Haein Lee
CVE-2026-45483 BR2026-0000-002206 unclaimed
Microsoft Office Project Server Spoofing Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-47644 BR2026-0000-002207 unclaimed
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Credited as Jianyang Song
CVE-2026-47633 BR2026-0000-002208 unclaimed
Microsoft Cost Management Information Disclosure Vulnerability
Credited as Sourov Ghosh
CVE-2026-45480 BR2026-0000-002209 unclaimed
Azure Active Directory Elevation of Privilege Vulnerability
Credited as Microsoft Red Team
CVE-2026-42895 BR2026-0000-002210 unclaimed
Microsoft Copilot Tampering Vulnerability
Credited as Ofek Levin with Enclave
CVE-2026-54130 BR2026-0000-002211 unclaimed
M365 Copilot Information Disclosure Vulnerability
Credited as Yuval Weber with Microsoft
CVE-2026-54130 BR2026-0000-002212 unclaimed
M365 Copilot Information Disclosure Vulnerability
Credited as Shira Hoffman with Microsoft
CVE-2026-47647 BR2026-0000-002213 unclaimed
Dynamics 365 Elevation of Privilege Vulnerability
Credited as Brad Schlintz (nmdhkr)
CVE-2026-48584 BR2026-0000-002214 unclaimed
Microsoft Azure Synapse Elevation of Privilege Vulnerability
Credited as nicolas joly
CVE-2026-40409 BR2026-0000-002215 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as Thanatos Tian (PolyU) of Diffract
CVE-2026-40409 BR2026-0000-002216 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-40409 BR2026-0000-002217 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-40409 BR2026-0000-002218 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as @2st___ of Diffract
CVE-2026-40409 BR2026-0000-002219 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as 021w
CVE-2026-40409 BR2026-0000-002220 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as 1nv0k3r
CVE-2026-40409 BR2026-0000-002221 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as M00N with BeFunLab
CVE-2026-40404 BR2026-0000-002222 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as R4nger with Kunlun Lab
CVE-2026-40404 BR2026-0000-002223 unclaimed
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-33828 BR2026-0000-002224 unclaimed
Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
Credited as Akash Trehan
CVE-2026-34335 BR2026-0000-002225 unclaimed
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Credited as Angelboy (@scwuaptx) with DEVCORE
CVE-2026-42902 BR2026-0000-002226 unclaimed
Microsoft PowerToys Elevation of Privilege Vulnerability
Credited as s7331
CVE-2026-44817 BR2026-0000-002227 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as IceSword Lab and Vulnerability Research Institute
CVE-2026-44818 BR2026-0000-002228 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as f4
CVE-2026-44818 BR2026-0000-002229 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-44819 BR2026-0000-002230 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-44819 BR2026-0000-002231 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-44819 BR2026-0000-002232 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as Jeongmin Choi
CVE-2026-44820 BR2026-0000-002233 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as f4
CVE-2026-44820 BR2026-0000-002234 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Zhiniang Peng with HUST
CVE-2026-44821 BR2026-0000-002235 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-44821 BR2026-0000-002236 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as Jeongmin Choi(https://x.com/lmksecurity)
CVE-2026-44823 BR2026-0000-002237 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Jeongmin Choi with S2W
CVE-2026-44823 BR2026-0000-002238 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-44823 BR2026-0000-002239 unclaimed
Microsoft Excel Remote Code Execution Vulnerability
Credited as Haein Lee with KAIST Hacking Lab
CVE-2026-44824 BR2026-0000-002240 unclaimed
Microsoft Office Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-45456 BR2026-0000-002241 unclaimed
Microsoft Outlook and Word Remote Code Execution Vulnerability
Credited as tiebuchen
CVE-2026-45458 BR2026-0000-002242 unclaimed
Microsoft Outlook and Word Remote Code Execution Vulnerability
Credited as Jonghoi Kim, Donghyun Oh with kloy
CVE-2026-45460 BR2026-0000-002243 unclaimed
Microsoft Office Information Disclosure Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4