Microsoft's security release of 14 July 2026
Patch Tuesday, July 2026, page 5
As of , CISA lists five of the 570 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-55040, Microsoft SharePoint Server Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 401 | CVE-2026-58536Windows Cloud Files Mini Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 402 | CVE-2026-58537Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 403 | CVE-2026-58538Windows Bluetooth Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 404 | CVE-2026-58540Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 405 | CVE-2026-58541Microsoft DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 406 | CVE-2026-58542Windows Media Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 407 | CVE-2026-58601Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | None | Not on CISA's list | 7.8 High | 0.00 |
| 408 | CVE-2026-58602Windows Kernel-Mode Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 409 | CVE-2026-58609Windows Graphics Component Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 410 | CVE-2026-58610Microsoft Windows Media Foundation Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 411 | CVE-2026-58613Windows Cloud Files Mini Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 412 | CVE-2026-58618Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 413 | CVE-2026-58628Windows Wireless Network Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 414 | CVE-2026-58631Windows Admin Center (WAC) Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 415 | CVE-2026-58632Windows Win32 Kernel Subsystem Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 416 | CVE-2026-58633Desktop Window Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 417 | CVE-2026-58634Desktop Window Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 418 | CVE-2026-58635Windows Narrator Braille Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 419 | CVE-2026-58636Microsoft PC Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 420 | CVE-2026-49171Windows Speech Runtime Elevation of Privilege | None | Not on CISA's list | 7.5 High | 0.00 |
| 421 | CVE-2026-54127Windows Hyper-V Elevation of Privilege | None | Not on CISA's list | 7.4 High | 0.00 |
| 422 | CVE-2026-49789Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.00 |
| 423 | CVE-2026-49790Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.00 |
| 424 | CVE-2026-50364Windows Backup Service Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.00 |
| 425 | CVE-2026-50482Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.3 High | 0.00 |
| 426 | CVE-2026-58640Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.3 High | 0.00 |
| 427 | CVE-2026-49165Microsoft Windows App Store Information Disclosure | None | Not on CISA's list | 7.1 High | 0.00 |
| 428 | CVE-2026-49791Windows Routing and Remote Access Service (RRAS) Elevation of Privilege | None | Not on CISA's list | 7.1 High | 0.00 |
| 429 | CVE-2026-50354Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.1 High | 0.00 |
| 430 | CVE-2026-50428Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure | None | Not on CISA's list | 7.1 High | 0.00 |
| 431 | CVE-2026-50451Windows Routing and Remote Access Service (RRAS) Elevation of Privilege | None | Not on CISA's list | 7.1 High | 0.00 |
| 432 | CVE-2026-50465Windows DNS Client Tampering | None | Not on CISA's list | 7.1 High | 0.00 |
| 433 | CVE-2026-55144Windows Cryptography API: Next Generation (CNG) Tampering | None | Not on CISA's list | 7.1 High | 0.00 |
| 434 | CVE-2026-56193Microsoft Office Information Disclosure | None | Not on CISA's list | 7.1 High | 0.00 |
| 435 | CVE-2026-57101Visual Studio Code Security Feature Bypass | None | Not on CISA's list | 7.1 High | 0.00 |
| 436 | CVE-2026-48571Windows App Package Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 437 | CVE-2026-48572Windows App Package Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 438 | CVE-2026-49162Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 439 | CVE-2026-49183Windows Clipboard Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 440 | CVE-2026-49784Microsoft Windows App Store Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 441 | CVE-2026-49802Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 442 | CVE-2026-49803Windows AppX Deployment Extensions Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 443 | CVE-2026-49805Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 444 | CVE-2026-49806Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 445 | CVE-2026-50296DirectX Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 446 | CVE-2026-50297Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 447 | CVE-2026-50307Windows TCP/IP Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 448 | CVE-2026-50322Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 449 | CVE-2026-50323Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 450 | CVE-2026-50325Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 451 | CVE-2026-50345Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 452 | CVE-2026-50348Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 453 | CVE-2026-50356Microsoft Windows App Store Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 454 | CVE-2026-50358Windows Media Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 455 | CVE-2026-50359Microsoft XML Core Services Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 456 | CVE-2026-50371Windows LUA File Virtualization Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 457 | CVE-2026-50372Windows Redirected Drive Buffering System Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 458 | CVE-2026-50384Windows Clip Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 459 | CVE-2026-50390Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 460 | CVE-2026-50392Windows Secure Kernel Mode Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 461 | CVE-2026-50393Windows Kernel-Mode Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 462 | CVE-2026-50396Windows Kernel-Mode Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 463 | CVE-2026-50397Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 464 | CVE-2026-50403Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 465 | CVE-2026-50404Windows Media Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 466 | CVE-2026-50406Windows Backup Engine Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 467 | CVE-2026-50410Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 468 | CVE-2026-50449Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 469 | CVE-2026-50452Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 470 | CVE-2026-50459Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 471 | CVE-2026-50490Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 472 | CVE-2026-50491Code Integrity DLL (ci.dll) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 473 | CVE-2026-50503Windows Runtime Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 474 | CVE-2026-50526.NET Tampering | None | Not on CISA's list | 7.0 High | 0.00 |
| 475 | CVE-2026-50658Microsoft Defender for Endpoint for Mac Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 476 | CVE-2026-50669Windows Telephony Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 477 | CVE-2026-50672Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 478 | CVE-2026-50674Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 479 | CVE-2026-54111Universal Print Management Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 480 | CVE-2026-54129Windows Hyper-V Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 481 | CVE-2026-54989Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 482 | CVE-2026-54996Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 483 | CVE-2026-56173Windows WebView Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 484 | CVE-2026-56183Windows MIDI Service Module Elevation of Privileges | None | Not on CISA's list | 7.0 High | 0.00 |
| 485 | CVE-2026-56187Windows MIDI Service Module Elevation of Privileges | None | Not on CISA's list | 7.0 High | 0.00 |
| 486 | CVE-2026-57093Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 487 | CVE-2026-58526Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 488 | CVE-2026-58544Windows Management Services Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 489 | CVE-2026-58619Windows Sensor Data Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 490 | CVE-2026-58629DirectX Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 491 | CVE-2026-58637Windows Client-Side Caching Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 492 | CVE-2026-49168Storage Spaces Direct Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 493 | CVE-2026-50298Windows Spaceport.sys Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 494 | CVE-2026-50299Windows Storage Spaces Direct Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 495 | CVE-2026-50492Windows Resilient File System (ReFS) Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 496 | CVE-2026-50668Windows Resilient File System (ReFS) Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 497 | CVE-2026-54132Windows Kernel Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 498 | CVE-2026-49804Windows USB Video Driver Elevation of Privilege | None | Not on CISA's list | 6.6 Medium | 0.00 |
| 499 | CVE-2026-50678Microsoft Excel Information Disclosure | None | Not on CISA's list | 6.6 Medium | 0.00 |
| 500 | CVE-2026-55000Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 6.4 Medium | 0.00 |