Microsoft's security release of 14 July 2026
Patch Tuesday, July 2026, page 4
As of , CISA lists five of the 570 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-55040, Microsoft SharePoint Server Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 301 | CVE-2026-50441Windows Resilient File System (ReFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 302 | CVE-2026-50448Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 303 | CVE-2026-50450Windows Network Connections Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 304 | CVE-2026-50454Windows User Interface Core Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 305 | CVE-2026-50457Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 306 | CVE-2026-50458Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 307 | CVE-2026-50461Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 308 | CVE-2026-50462Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 309 | CVE-2026-50466Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 310 | CVE-2026-50467Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 311 | CVE-2026-50469Windows Projected File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 312 | CVE-2026-50471Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 313 | CVE-2026-50476Windows Network Connections Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 314 | CVE-2026-50478Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 315 | CVE-2026-50479Windows USB Hub Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 316 | CVE-2026-50480Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 317 | CVE-2026-50484Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 318 | CVE-2026-50486Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 319 | CVE-2026-50488Clipboard User Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 320 | CVE-2026-50493DirectX Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 321 | CVE-2026-50494Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 322 | CVE-2026-50498Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 323 | CVE-2026-50499Windows Print Spooler Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 324 | CVE-2026-50501Windows Resilient File System (ReFS) Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 325 | CVE-2026-50510GitHub Copilot Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 326 | CVE-2026-50650.NET Framework Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 327 | CVE-2026-50655Microsoft Windows Media Foundation Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 328 | CVE-2026-50667Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 329 | CVE-2026-50673Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 330 | CVE-2026-50675Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 331 | CVE-2026-50676Windows Media Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 332 | CVE-2026-50677Windows Media Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 333 | CVE-2026-50679Windows Search Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 334 | CVE-2026-50688Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 335 | CVE-2026-50689Windows Clipboard Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 336 | CVE-2026-50697Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 337 | CVE-2026-54109Windows Resilient File System (ReFS) Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 338 | CVE-2026-54112Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 339 | CVE-2026-54114Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 340 | CVE-2026-54115Windows Message Queuing (MSMQ) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 341 | CVE-2026-54124Windows Terminal Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 342 | CVE-2026-54125Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 343 | CVE-2026-54131Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 344 | CVE-2026-54986Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 345 | CVE-2026-54987Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 346 | CVE-2026-54991Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 347 | CVE-2026-54993Microsoft Windows Media Foundation Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 348 | CVE-2026-55001Active Directory Domain Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 349 | CVE-2026-55004Windows Print Configuration Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 350 | CVE-2026-55006Microsoft Exchange Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 351 | CVE-2026-55011Microsoft Defender Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 352 | CVE-2026-55012Microsoft Defender Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 353 | CVE-2026-55014Windows Remote Help Defense Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 354 | CVE-2026-55017Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 355 | CVE-2026-55018Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 356 | CVE-2026-55022Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 357 | CVE-2026-55024Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 358 | CVE-2026-55025Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 359 | CVE-2026-55029Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 360 | CVE-2026-55031Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 361 | CVE-2026-55036Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 362 | CVE-2026-55037Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 363 | CVE-2026-55039Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 364 | CVE-2026-55041Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 365 | CVE-2026-55043Microsoft PowerPoint Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 366 | CVE-2026-55044Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 367 | CVE-2026-55048Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 368 | CVE-2026-55049Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 369 | CVE-2026-55053Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 370 | CVE-2026-55056Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 371 | CVE-2026-55058Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 372 | CVE-2026-55120Microsoft PowerPoint Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 373 | CVE-2026-55123Microsoft PowerPoint Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 374 | CVE-2026-55129Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 375 | CVE-2026-55131Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 376 | CVE-2026-55133Microsoft OneNote Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 377 | CVE-2026-55136Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 378 | CVE-2026-55137Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 379 | CVE-2026-55140Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 380 | CVE-2026-55141Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 381 | CVE-2026-55899Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 382 | CVE-2026-55947Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 383 | CVE-2026-55948Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 384 | CVE-2026-55949Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 385 | CVE-2026-56156Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 386 | CVE-2026-56175Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 387 | CVE-2026-56176Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 388 | CVE-2026-56182Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 389 | CVE-2026-56189Microsoft Windows Media Foundation Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 390 | CVE-2026-56643DirectX Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 391 | CVE-2026-56644DirectX Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 392 | CVE-2026-56650Windows Network File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 393 | CVE-2026-57088Extensible Storage Engine (ESENT) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 394 | CVE-2026-57091Windows File History Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 395 | CVE-2026-57096Windows Routing and Remote Access Service (RRAS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 396 | CVE-2026-57107Windows Admin Center Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 397 | CVE-2026-57968Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 398 | CVE-2026-58527Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 399 | CVE-2026-58530Windows Resilient File System (ReFS) Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 400 | CVE-2026-58532Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |