Microsoft's security release of 14 July 2026
Patch Tuesday, July 2026, page 6
As of , CISA lists five of the 570 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-55040, Microsoft SharePoint Server Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 501 | CVE-2026-50374Windows Cloud Files Mini Filter Driver Elevation of Privilege | None | Not on CISA's list | 6.3 Medium | 0.00 |
| 502 | CVE-2026-50375DirectX Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 6.3 Medium | 0.00 |
| 503 | CVE-2026-57973Windows Subsystem for Linux (WSL2) Kernel Tampering | None | Not on CISA's list | 6.3 Medium | 0.00 |
| 504 | CVE-2026-58543Universal Print Management Service Elevation of Privilege | None | Not on CISA's list | 6.3 Medium | 0.00 |
| 505 | CVE-2026-50420HTTP.sys Information Disclosure | None | Not on CISA's list | 6.2 Medium | 0.00 |
| 506 | CVE-2026-55026Microsoft Office Information Disclosure | None | Not on CISA's list | 6.2 Medium | 0.00 |
| 507 | CVE-2026-57095Win32k Elevation of Privilege | None | Not on CISA's list | 6.2 Medium | 0.00 |
| 508 | CVE-2026-49174DNS Client Tampering | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 509 | CVE-2026-50383Windows Print Spooler Information Disclosure | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 510 | CVE-2026-50495DNS Client Tampering | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 511 | CVE-2026-50661Windows BitLocker Security Feature Bypass | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 512 | CVE-2026-54988Microsoft Excel Information Disclosure | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 513 | CVE-2026-55898Microsoft Excel Information Disclosure | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 514 | CVE-2026-58638Windows Boot Loader Security Feature Bypass | None | Not on CISA's list | 6.0 Medium | 0.00 |
| 515 | CVE-2026-33842Windows File Explorer Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 516 | CVE-2026-34328Windows Audio Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 517 | CVE-2026-34346Windows Ancillary Function Driver for WinSock Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 518 | CVE-2026-34349Windows Media Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 519 | CVE-2026-40422Windows File Explorer Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 520 | CVE-2026-41087Windows File Explorer Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 521 | CVE-2026-45496Visual Studio Code Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 522 | CVE-2026-49177Windows TCP/IP Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 523 | CVE-2026-49180Universal Plug and Play (upnp.dll) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 524 | CVE-2026-49801Windows SMB Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 525 | CVE-2026-50295Windows Zero Trust DNS Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 526 | CVE-2026-50300Windows DWM Core Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 527 | CVE-2026-50303Windows Key Guard Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 528 | CVE-2026-50316Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 529 | CVE-2026-50334Windows Push Notification Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 530 | CVE-2026-50339Windows Push Notification Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 531 | CVE-2026-50341Windows NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 532 | CVE-2026-50350Windows Trusted Runtime Interface Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 533 | CVE-2026-50352Windows Cryptographic Services Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 534 | CVE-2026-50377Windows Kernel Elevation of Privilege | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 535 | CVE-2026-50381Composite Image File System driver (cimfs.sys) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 536 | CVE-2026-50389Windows File Explorer Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 537 | CVE-2026-50394Windows Media Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 538 | CVE-2026-50401Windows Cloud Files Mini Filter Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 539 | CVE-2026-50409Windows Overlay Filter Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 540 | CVE-2026-50430Windows Push Notification Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 541 | CVE-2026-50431Windows Quality of Service (QoS) Packet Scheduler Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 542 | CVE-2026-50434Windows Push Notification Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 543 | CVE-2026-50437Windows DWM Core Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 544 | CVE-2026-50442Windows File Explorer Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 545 | CVE-2026-50455Universal Plug and Play (upnp.dll) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 546 | CVE-2026-50456Windows File Explorer Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 547 | CVE-2026-50473Windows File Explorer Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 548 | CVE-2026-50475Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 549 | CVE-2026-50483Windows Graphics Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 550 | CVE-2026-50681Windows Secure Channel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 551 | CVE-2026-50690Windows SMB Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 552 | CVE-2026-54997Windows SMB Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 553 | CVE-2026-55139Microsoft Office Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 554 | CVE-2026-56178Microsoft Defender for Endpoint for Mac Elevation of Privilege | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 555 | CVE-2026-56184Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 556 | CVE-2026-57085Windows Print Spooler Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 557 | CVE-2026-58545Windows Kernel Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 558 | CVE-2026-58547Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 559 | CVE-2026-58614Windows Kernel Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 560 | CVE-2026-56157Microsoft SharePoint Server Spoofing | None | Not on CISA's list | 5.4 Medium | 0.00 |
| 561 | CVE-2026-50418Windows System Secure Feature Bypass | None | Not on CISA's list | 5.1 Medium | 0.00 |
| 562 | CVE-2026-50684Active Directory Federation Server Spoofing | None | Not on CISA's list | 4.8 Medium | 0.00 |
| 563 | CVE-2026-49167Windows Kernel Elevation of Privilege | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 564 | CVE-2026-50310Windows Human Interface Device Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 565 | CVE-2026-50312Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 566 | CVE-2026-50657Microsoft Defender for Endpoint for Mac Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 567 | CVE-2026-49794Windows USB Audio Class Driver Information Disclosure | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 568 | CVE-2026-50302Windows Cryptographic Services Security Feature Bypass | None | Not on CISA's list | 4.2 Medium | 0.00 |
| 569 | CVE-2026-50416Win32k Information Disclosure | None | Not on CISA's list | 3.3 Low | 0.00 |
| 570 | CVE-2026-50419Windows Kernel Information Disclosure | None | Not on CISA's list | 3.3 Low | 0.00 |