cve.bz

Microsoft Patch Tuesday, July 2026: the CVEs, page 3

Filter

Microsoft Patch Tuesday July 2026: the CVEs Microsoft published on 14 July 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025, Sep 2025, Aug 2025, Jul 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 6.8CVE-2026-50668EPSS 0.4%

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack.

  2. 7.0CVE-2026-50667EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.

  3. 8.8CVE-2026-50666EPSS 0.9%

    Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network.

  4. 3.3CVE-2026-50665EPSS 0.5%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  5. 4.6CVE-2026-50661EPSS 0.5%

    Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

  6. 7.0CVE-2026-50658EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally.

  7. 5.5CVE-2026-50657EPSS 0.4%

    Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.

  8. 7.8CVE-2026-50655EPSS 0.5%

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

  9. 7.5CVE-2026-50647EPSS 1.2%

    Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

  10. 9.8CVE-2026-50518EPSS 1.0%

    Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  11. 7.8CVE-2026-50510EPSS 0.4%

    Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.

  12. 7.8CVE-2026-50509EPSS 3.5%

    Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.

  13. 8.8CVE-2026-50505EPSS 0.7%

    Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network.

  14. 7.5CVE-2026-50504EPSS 0.9%

    Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  15. 7.0CVE-2026-50503EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  16. 8.8CVE-2026-50502EPSS 0.7%

    Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network.

  17. 7.8CVE-2026-50501EPSS 0.4%

    Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.

  18. 8.8CVE-2026-50500EPSS 0.7%

    Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network.

  19. 7.8CVE-2026-50499EPSS 0.3%

    Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  20. 7.8CVE-2026-50498EPSS 0.4%

    Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker to elevate privileges locally.

  21. 7.5CVE-2026-50497EPSS 0.9%

    Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.

  22. 7.5CVE-2026-50496EPSS 1.2%

    Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.

  23. 5.5CVE-2026-50495EPSS 0.3%

    Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.

  24. 7.8CVE-2026-50494EPSS 0.3%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

  25. 7.8CVE-2026-50493EPSS 0.3%

    Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  26. 6.8CVE-2026-50492EPSS 0.4%

    Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with a physical attack.

  27. 7.8CVE-2026-50491EPSS 0.3%

    Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.

  28. 7.8CVE-2026-50490EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  29. 7.8CVE-2026-50489EPSS 0.3%

    Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

  30. 7.8CVE-2026-50488EPSS 0.3%

    Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

  31. 9.8CVE-2026-50487EPSS 0.8%

    Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.

  32. 7.8CVE-2026-50486EPSS 0.3%

    Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

  33. 5.7CVE-2026-50485EPSS 0.7%

    Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

  34. 7.8CVE-2026-50484EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  35. 5.5CVE-2026-50483EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally.

  36. 7.8CVE-2026-50482EPSS 0.4%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

  37. 7.8CVE-2026-50480EPSS 0.3%

    Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2026-50479EPSS 0.3%

    Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

  39. 7.8CVE-2026-50478EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  40. 7.8CVE-2026-50477EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2026-50476EPSS 0.3%

    Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally.

  42. 5.5CVE-2026-50475EPSS 0.4%

    Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.

  43. 8.8CVE-2026-50474EPSS 0.8%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  44. 5.5CVE-2026-50473EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

  45. 7.8CVE-2026-50471EPSS 0.5%

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

  46. 7.5CVE-2026-50470EPSS 1.0%

    Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.

  47. 7.8CVE-2026-50469EPSS 0.4%

    Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally.

  48. 6.5CVE-2026-50468EPSS 1.0%

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  49. 7.8CVE-2026-50467EPSS 0.5%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  50. 7.8CVE-2026-50466EPSS 0.3%

    Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

  51. 7.1CVE-2026-50465EPSS 0.3%

    Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.

  52. 7.5CVE-2026-50463EPSS 1.0%

    Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.

  53. 7.8CVE-2026-50462EPSS 0.5%

    External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  54. 7.8CVE-2026-50461EPSS 0.5%

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

  55. 8.1CVE-2026-50460EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

  56. 7.8CVE-2026-50459EPSS 0.3%

    Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

  57. 7.8CVE-2026-50458EPSS 0.3%

    Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  58. 7.8CVE-2026-50457EPSS 0.3%

    Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

  59. 5.5CVE-2026-50456EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

  60. 5.5CVE-2026-50455EPSS 0.4%

    Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

  61. 7.8CVE-2026-50454EPSS 0.4%

    Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

  62. 4.6CVE-2026-50453EPSS 0.5%

    Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.

  63. 8.1CVE-2026-50452EPSS 0.4%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

  64. 7.8CVE-2026-50451EPSS 0.3%

    Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

  65. 7.0CVE-2026-50450EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.

  66. 7.0CVE-2026-50449EPSS 0.3%

    Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

  67. 7.8CVE-2026-50448EPSS 0.5%

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

  68. 9.8CVE-2026-50447EPSS 1.0%

    Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

  69. 7.5CVE-2026-50445EPSS 0.9%

    Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.

  70. 8.8CVE-2026-50444EPSS 0.8%

    Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network.

  71. 5.5CVE-2026-50442EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

  72. 7.8CVE-2026-50441EPSS 0.3%

    Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

  73. 7.0CVE-2026-50440EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  74. 9.8CVE-2026-50439EPSS 0.8%

    Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

  75. 8.8CVE-2026-50438EPSS 0.4%

    Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

  76. 5.5CVE-2026-50437EPSS 0.4%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  77. 7.8CVE-2026-50436EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  78. 7.8CVE-2026-50435EPSS 0.3%

    Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

  79. 5.5CVE-2026-50434EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

  80. 7.8CVE-2026-50433EPSS 0.3%

    Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

  81. 6.5CVE-2026-50432EPSS 1.0%

    Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network.

  82. 5.5CVE-2026-50431EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to disclose information locally.

  83. 5.5CVE-2026-50430EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

  84. 8.2CVE-2026-50429EPSS 1.1%

    Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.

  85. 5.5CVE-2026-50428EPSS 0.4%

    Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.

  86. 7.8CVE-2026-50427EPSS 0.3%

    Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally.

  87. 6.8CVE-2026-50426EPSS 0.6%

    Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network.

  88. 7.8CVE-2026-50425EPSS 0.3%

    Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.

  89. 7.5CVE-2026-50424EPSS 1.2%

    Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network.

  90. 7.8CVE-2026-50423EPSS 0.3%

    Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.

  91. 7.8CVE-2026-50422EPSS 0.3%

    Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

  92. 7.8CVE-2026-50421EPSS 0.3%

    Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

  93. 5.5CVE-2026-50420EPSS 0.4%

    Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally.

  94. 3.3CVE-2026-50419EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.

  95. 6.1CVE-2026-50418EPSS 0.3%

    Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally.

  96. 7.8CVE-2026-50417EPSS 0.3%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

  97. 3.3CVE-2026-50416EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.

  98. 7.5CVE-2026-50415EPSS 0.9%

    Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network.

  99. 8.8CVE-2026-50414EPSS 0.6%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

  100. 7.8CVE-2026-50413EPSS 0.3%

    Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.