Microsoft's security release of 14 July 2026
Patch Tuesday, July 2026, page 3
As of , CISA lists five of the 570 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-55040, Microsoft SharePoint Server Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 201 | CVE-2026-55135Microsoft SharePoint Server Spoofing | None | Not on CISA's list | 4.6 Medium | 0.01 |
| 202 | CVE-2026-50485Windows Hyper-V Denial of Service | None | Not on CISA's list | 4.5 Medium | 0.01 |
| 203 | CVE-2026-49798Windows Kernel Elevation of Privilege | None | Not on CISA's list | 9.3 Critical | 0.00 |
| 204 | CVE-2026-47632Azure Connected Machine Agent Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 205 | CVE-2026-49795Windows Kernel Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 206 | CVE-2026-50342Windows MIDI Service Module Elevation of Privileges | None | Not on CISA's list | 8.8 High | 0.00 |
| 207 | CVE-2026-50382DirectX Graphics Kernel Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.00 |
| 208 | CVE-2026-50385Windows Runtime Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 209 | CVE-2026-50413Windows Runtime Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 210 | CVE-2026-50438Microsoft PC Manager Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 211 | CVE-2026-50477Windows Kernel Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 212 | CVE-2026-50489Win32k Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 213 | CVE-2026-50670Windows Win32k Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 214 | CVE-2026-50687Windows Win32k Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 215 | CVE-2026-50692Desktop Window Manager Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 216 | CVE-2026-54107Windows Win32k Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 217 | CVE-2026-54999Windows TCP/IP Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.00 |
| 218 | CVE-2026-58534Windows Input Method Editor (IME) Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 219 | CVE-2026-49184Windows NTFS Remote Code Execution | None | Not on CISA's list | 8.4 High | 0.00 |
| 220 | CVE-2026-50520Visual Studio Code Remote Code Execution | None | Not on CISA's list | 8.4 High | 0.00 |
| 221 | CVE-2026-54122Windows GDI+ Remote Code Execution | None | Not on CISA's list | 8.4 High | 0.00 |
| 222 | CVE-2026-54128Windows DHCP Client Remote Code Execution | None | Not on CISA's list | 8.4 High | 0.00 |
| 223 | CVE-2026-54992Microsoft Message Queuing Queue Manager Remote Code Execution | None | Not on CISA's list | 8.4 High | 0.00 |
| 224 | CVE-2026-55045Microsoft Office Remote Code Execution | None | Not on CISA's list | 8.4 High | 0.00 |
| 225 | CVE-2026-56181Windows Network Address Translation (NAT) Spoofing | None | Not on CISA's list | 8.3 High | 0.00 |
| 226 | CVE-2026-50680Windows Hyper-V Elevation of Privilege | None | Not on CISA's list | 8.2 High | 0.00 |
| 227 | CVE-2026-47304.NET Security Feature Bypass | None | Not on CISA's list | 8.1 High | 0.00 |
| 228 | CVE-2026-42982Windows Secure Kernel Mode Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 229 | CVE-2026-44800Windows Push Notifications Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 230 | CVE-2026-47290Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 231 | CVE-2026-47305Visual Studio Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 232 | CVE-2026-47642Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 233 | CVE-2026-48581Surface Broker SDMA Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 234 | CVE-2026-49166Windows Print Configuration Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 235 | CVE-2026-49170Windows StateRepository API Server file Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 236 | CVE-2026-49173Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 237 | CVE-2026-49175Windows DNS Client Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 238 | CVE-2026-49176Windows WalletService Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 239 | CVE-2026-49783Secure Boot Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.00 |
| 240 | CVE-2026-49792Windows Resilient File System (ReFS) Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 241 | CVE-2026-49793Windows Resilient File System (ReFS) Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 242 | CVE-2026-49796Windows GDI+ Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 243 | CVE-2026-49797Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 244 | CVE-2026-49800Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 245 | CVE-2026-49808Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 246 | CVE-2026-50293Windows Internal Task Bar Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 247 | CVE-2026-50301Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 248 | CVE-2026-50305Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 249 | CVE-2026-50306Windows TCP/IP Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 250 | CVE-2026-50308Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 251 | CVE-2026-50309Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 252 | CVE-2026-50311Windows Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 253 | CVE-2026-50313Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 254 | CVE-2026-50314Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 255 | CVE-2026-50315Windows Image Acquisition Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 256 | CVE-2026-50317Windows Operating Systems Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 257 | CVE-2026-50318Windows Resilient File System (ReFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 258 | CVE-2026-50321Windows USB Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 259 | CVE-2026-50326Windows Unified Consent System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 260 | CVE-2026-50327Windows Media Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 261 | CVE-2026-50329Microsoft DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 262 | CVE-2026-50331Windows Application Model Core API Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 263 | CVE-2026-50332Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 264 | CVE-2026-50333Windows Spaceport.sys Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 265 | CVE-2026-50335Windows Operating Systems Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 266 | CVE-2026-50336Windows Media Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 267 | CVE-2026-50337Windows Notification Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 268 | CVE-2026-50343Microsoft Install Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 269 | CVE-2026-50344Windows OLE Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 270 | CVE-2026-50346Netlogon RPC Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 271 | CVE-2026-50347Windows Data.dll Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 272 | CVE-2026-50351Windows Audio Compression Manager (ACM) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 273 | CVE-2026-50353DirectX Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 274 | CVE-2026-50357Windows Resilient File System (ReFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 275 | CVE-2026-50361Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 276 | CVE-2026-50362Windows Resilient File System (ReFS) Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 277 | CVE-2026-50363Windows Push Notifications Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 278 | CVE-2026-50367Windows Sensor Data Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 279 | CVE-2026-50373Windows Search Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 280 | CVE-2026-50378Windows Key Guard Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 281 | CVE-2026-50386Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 282 | CVE-2026-50387Windows GDI Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 283 | CVE-2026-50388Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 284 | CVE-2026-50391Windows Group Policy Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 285 | CVE-2026-50399Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 286 | CVE-2026-50400Windows App Package Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 287 | CVE-2026-50402NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 288 | CVE-2026-50405Windows Filtering Platform Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 289 | CVE-2026-50407Windows Resilient File System (ReFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 290 | CVE-2026-50412Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 291 | CVE-2026-50417Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 292 | CVE-2026-50421Windows Connected User Experiences and Telemetry Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 293 | CVE-2026-50422Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 294 | CVE-2026-50423Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 295 | CVE-2026-50425Windows Internal System User Profile Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 296 | CVE-2026-50427Content Delivery Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 297 | CVE-2026-50433Windows Media Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 298 | CVE-2026-50435Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 299 | CVE-2026-50436Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 300 | CVE-2026-50440Windows Audio Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |