cve.bz

Microsoft Patch Tuesday, July 2026: the CVEs, page 5

Filter

Microsoft Patch Tuesday July 2026: the CVEs Microsoft published on 14 July 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025, Sep 2025, Aug 2025, Jul 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.8CVE-2026-58635EPSS 0.3%

    Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

  2. 7.8CVE-2026-58631EPSS 0.3%

    Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.

  3. 7.8CVE-2026-58618EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  4. 5.5CVE-2026-58614EPSS 0.4%

    Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally.

  5. 7.8CVE-2026-58610EPSS 0.5%

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.

  6. 7.8CVE-2026-58609EPSS 0.5%

    Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

  7. 7.5CVE-2026-58608EPSS 0.6%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network.

  8. 7.8CVE-2026-58602EPSS 0.3%

    Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2026-58601EPSS 0.3%

    Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

  10. 8.1CVE-2026-58595EPSS 0.7%

    Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network.

  11. 7.8CVE-2026-58526EPSS 0.2%

    Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

  12. 6.5CVE-2026-58279EPSS 0.6%

    Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

  13. 7.5CVE-2026-57979EPSS 0.9%

    Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

  14. 6.5CVE-2026-57976EPSS 1.1%

    Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

  15. 8.8CVE-2026-57969EPSS 0.8%

    Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

  16. 7.8CVE-2026-57107EPSS 0.3%

    Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.

  17. 6.8CVE-2026-57097EPSS 0.5%

    Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.

  18. 3.3CVE-2026-56193EPSS 0.5%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  19. 6.5CVE-2026-56185EPSS 0.8%

    Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.

  20. 7.5CVE-2026-56170EPSS 1.2%

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  21. 8.8CVE-2026-56169EPSS 0.7%

    Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

  22. 9.8CVE-2026-56164KEVEPSS 27%

    Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

  23. 7.8CVE-2026-56155KEVEPSS 0.3%

    Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

  24. 7.8CVE-2026-55948EPSS 0.5%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  25. 7.8CVE-2026-55899EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  26. 7.1CVE-2026-55144EPSS 0.2%

    Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally.

  27. 7.8CVE-2026-55014EPSS 0.3%

    Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally.

  28. 7.8CVE-2026-55012EPSS 0.5%

    Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.

  29. 7.8CVE-2026-55011EPSS 0.5%

    Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.

  30. 7.8CVE-2026-55009EPSS 2.5%

    Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

  31. 9.6CVE-2026-55008EPSS 0.9%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

  32. 7.8CVE-2026-55006EPSS 0.3%

    Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

  33. 8.8CVE-2026-55005EPSS 1.0%

    Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

  34. 7.8CVE-2026-55004EPSS 0.3%

    Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.

  35. 6.5CVE-2026-55003EPSS 0.9%

    Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

  36. 8.8CVE-2026-55002EPSS 0.9%

    External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

  37. 7.8CVE-2026-55001EPSS 0.3%

    Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally.

  38. 6.4CVE-2026-55000EPSS 0.3%

    Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  39. 8.8CVE-2026-54999EPSS 0.4%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

  40. 5.5CVE-2026-54997EPSS 0.4%

    Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.

  41. 7.0CVE-2026-54996EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

  42. 9.8CVE-2026-54995EPSS 0.8%

    Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

  43. 7.8CVE-2026-54993EPSS 0.5%

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.

  44. 7.8CVE-2026-54992EPSS 0.3%

    Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.

  45. 7.0CVE-2026-54991EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

  46. 8.8CVE-2026-54990EPSS 0.8%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  47. 7.8CVE-2026-54989EPSS 0.3%

    Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

  48. 6.1CVE-2026-54988EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  49. 7.8CVE-2026-54987EPSS 0.3%

    Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

  50. 7.8CVE-2026-54986EPSS 0.3%

    Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

  51. 7.5CVE-2026-54983EPSS 1.2%

    Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

  52. 8.8CVE-2026-54982EPSS 0.5%

    Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

  53. 6.8CVE-2026-54132EPSS 0.4%

    Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

  54. 7.8CVE-2026-54129EPSS 0.3%

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  55. 8.4CVE-2026-54127EPSS 0.3%

    Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

  56. 8.4CVE-2026-54122EPSS 0.4%

    Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

  57. 7.5CVE-2026-54119EPSS 1.2%

    Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network.

  58. 9.8CVE-2026-54118EPSS 1.5%

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  59. 9.8CVE-2026-54117EPSS 1.5%

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  60. 7.8CVE-2026-54114EPSS 0.3%

    Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

  61. 7.0CVE-2026-54112EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.

  62. 7.0CVE-2026-54111EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

  63. 7.8CVE-2026-54109EPSS 0.3%

    Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

  64. 6.5CVE-2026-54108EPSS 1.1%

    External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  65. 7.0CVE-2026-54107EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.

  66. 7.8CVE-2026-50697EPSS 0.4%

    Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  67. 7.5CVE-2026-50696EPSS 1.2%

    Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

  68. 7.5CVE-2026-50695EPSS 1.2%

    Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

  69. 9.8CVE-2026-50694EPSS 0.8%

    Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

  70. 3.3CVE-2026-50678EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  71. 7.8CVE-2026-50675EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  72. 8.8CVE-2026-50663EPSS 0.9%

    Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network.

  73. 7.5CVE-2026-50653EPSS 1.2%

    Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.

  74. 7.5CVE-2026-50652EPSS 1.7%

    Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.

  75. 9.8CVE-2026-50522KEVEPSS 3.0%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

  76. 8.4CVE-2026-50520EPSS 0.4%

    Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

  77. 7.5CVE-2026-50506EPSS 1.2%

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  78. 7.0CVE-2026-50384EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate privileges locally.

  79. 5.5CVE-2026-50381EPSS 0.4%

    Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information locally.

  80. 7.3CVE-2026-50364EPSS 0.5%

    Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally.

  81. 7.0CVE-2026-50356EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.

  82. 7.1CVE-2026-50354EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  83. 7.8CVE-2026-50351EPSS 0.3%

    Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.

  84. 5.5CVE-2026-50350EPSS 0.5%

    Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.

  85. 8.8CVE-2026-50342EPSS 0.3%

    Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

  86. 8.2CVE-2026-50338EPSS 0.5%

    Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network.

  87. 7.8CVE-2026-50333EPSS 0.3%

    Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

  88. 7.0CVE-2026-50325EPSS 0.2%

    Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

  89. 7.0CVE-2026-50323EPSS 0.3%

    Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

  90. 7.8CVE-2026-50318EPSS 0.3%

    Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

  91. 5.5CVE-2026-50316EPSS 0.5%

    Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

  92. 7.8CVE-2026-50311EPSS 0.3%

    Improper access control in Windows Server allows an authorized attacker to elevate privileges locally.

  93. 7.8CVE-2026-50308EPSS 0.5%

    Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally.

  94. 5.5CVE-2026-50303EPSS 0.3%

    Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally.

  95. 5.5CVE-2026-50300EPSS 0.4%

    Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally.

  96. 6.8CVE-2026-50299EPSS 0.4%

    Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack.

  97. 6.8CVE-2026-50298EPSS 0.4%

    Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.

  98. 7.0CVE-2026-50297EPSS 0.2%

    Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

  99. 7.0CVE-2026-50296EPSS 0.3%

    Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.

  100. 5.5CVE-2026-50295EPSS 0.3%

    Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.