Microsoft Server security updates, July 2026 (Patch Tuesday 2026-07-14)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in July 2026, including the Patch Tuesday release on 2026-07-14 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 294
Critical: 17
High: 208
In CISA KEV: 4

Microsoft server CVEs, July 2026

Jul 14, 2026
High [CVE-2026-58527] Windows Runtime Elevation of Privilege Vulnerability
High7.8
Jul 14, 2026
High [CVE-2026-58538] Windows Bluetooth Service Elevation of Privilege Vulnerability
High7.8
Jul 14, 2026
High [CVE-2026-58531] Windows SMB Elevation of Privilege Vulnerability
High7.5
Jul 14, 2026
High [CVE-2026-58537] Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability
High7.8
Jul 14, 2026
High [CVE-2026-58534] Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
High8.8
Jul 14, 2026
High [CVE-2026-58536] Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High7.8
Jul 14, 2026
High [CVE-2026-58544] Windows Management Services Elevation of Privilege Vulnerability
High7.0
Jul 14, 2026
High [CVE-2026-58541] Microsoft DWM Core Library Elevation of Privilege Vulnerability
High7.8
Jul 14, 2026
High [CVE-2026-58619] Windows Sensor Data Service Elevation of Privilege Vulnerability
High7.0
Jul 14, 2026
High [CVE-2026-58626] Windows Remote Desktop Services Remote Code Execution Vulnerability
High8.8
Jul 14, 2026
High [CVE-2026-58627] Windows DHCP Server Denial of Service Vulnerability
High7.5
Jul 14, 2026
High [CVE-2026-58628] Windows Wireless Network Manager Elevation of Privilege Vulnerability
High7.8
Jul 14, 2026
High [CVE-2026-58629] DirectX Graphics Kernel Elevation of Privilege Vulnerability
High7.0
Jul 14, 2026
High [CVE-2026-58632] Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
High7.8
Jul 14, 2026
High [CVE-2026-58637] Windows Client-Side Caching Elevation of Privilege Vulnerability
High7.0
Jul 14, 2026
High [CVE-2026-56181] Windows Network Address Translation (NAT) Spoofing Vulnerability
High8.3
Jul 14, 2026
High [CVE-2026-47304] .NET Security Feature Bypass Vulnerability
High8.1
Jul 14, 2026
High [CVE-2026-50525] .NET Denial of Service Vulnerability
High7.5
Jul 14, 2026
High [CVE-2026-50649] .NET Remote Code Execution Vulnerability
High7.8
Jul 14, 2026
Medium [CVE-2026-55121] Microsoft Office Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-55142] Microsoft Word Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-55124] Microsoft Word Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-55050] Microsoft Word Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-55026] Microsoft Office Information Disclosure Vulnerability
Medium6.2
Jul 14, 2026
Medium [CVE-2026-50303] Windows Key Guard Security Feature Bypass Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50300] Windows DWM Core Library Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50381] Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50350] Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50295] Windows Zero Trust DNS Security Feature Bypass Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50316] Windows Kernel Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50298] Windows Spaceport.sys Elevation of Privilege Vulnerability
Medium6.8
Jul 14, 2026
Medium [CVE-2026-49807] Windows DirectX Information Disclosure Vulnerability
Medium6.2
Jul 14, 2026
Medium [CVE-2026-49801] Windows SMB Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50294] Windows Kernel Information Disclosure Vulnerability
Medium6.2
Jul 14, 2026
Medium [CVE-2026-49804] Windows USB Video Driver Elevation of Privilege Vulnerability
Medium6.6
Jul 14, 2026
Medium [CVE-2026-50299] Windows Storage Spaces Direct Remote Code Execution Vulnerability
Medium6.8
Jul 14, 2026
Medium [CVE-2026-49794] Windows USB Audio Class Driver Information Disclosure Vulnerability
Medium4.6
Jul 14, 2026
Medium [CVE-2026-49180] Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-44806] Windows Secure Channel Denial of Service Vulnerability
Medium5.3
Jul 14, 2026
Medium [CVE-2026-34348] Windows Event Logging Service Information Disclosure Vulnerability
Medium6.5
Jul 14, 2026
Medium [CVE-2026-41087] Windows File Explorer Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-34328] Windows Audio Service Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-33842] Windows File Explorer Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-58614] Windows Kernel Security Feature Bypass Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-57979] Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Medium6.5
Jul 14, 2026
Medium [CVE-2026-57976] Windows Active Directory Domain Services Denial of Service Vulnerability
Medium6.5
Jul 14, 2026
Medium [CVE-2026-57097] Microsoft XML Security Feature Bypass Vulnerability
Medium6.4
Jul 14, 2026
Medium [CVE-2026-56164] Microsoft SharePoint Server Elevation of Privilege Vulnerability
Medium5.3ExploitedCISA KEV
Jul 14, 2026
Medium [CVE-2026-55003] Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Medium6.5
Jul 14, 2026
Medium [CVE-2026-54132] Windows Kernel Elevation of Privilege Vulnerability
Medium6.8
Jul 14, 2026
Medium [CVE-2026-49174] DNS Client Tampering Vulnerability
Medium6.1
Jul 14, 2026
Medium [CVE-2026-49168] Storage Spaces Direct Elevation of Privilege Vulnerability
Medium6.8
Jul 14, 2026
Medium [CVE-2026-34346] Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-34349] Windows Media Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-49177] Windows TCP/IP Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50302] Windows Cryptographic Services Security Feature Bypass Vulnerability
Medium4.2
Jul 14, 2026
Medium [CVE-2026-50341] Windows NTFS Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50434] Windows Push Notification Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50339] Windows Push Notification Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50430] Windows Push Notification Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50310] Windows Human Interface Device Information Disclosure Vulnerability
Medium4.7
Jul 14, 2026
Medium [CVE-2026-50324] Windows Active Directory Federation Services Denial of Service Vulnerability
Medium5.9
Jul 14, 2026
Medium [CVE-2026-50418] Windows System Secure Feature Bypass Vulnerability
Medium5.1
Jul 14, 2026
Medium [CVE-2026-50401] Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50376] Windows Remote Desktop Client Information Disclosure Vulnerability
Medium6.5
Jul 14, 2026
Medium [CVE-2026-50334] Windows Push Notification Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50352] Windows Cryptographic Services Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50426] Windows DNS Server Remote Code Execution Vulnerability
Medium6.8
Jul 14, 2026
Medium [CVE-2026-50383] Windows Print Spooler Information Disclosure Vulnerability
Medium6.1
Jul 14, 2026
Medium [CVE-2026-50409] Windows Overlay Filter Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50456] Windows File Explorer Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50432] Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability
Medium5.3
Jul 14, 2026
Medium [CVE-2026-50431] Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50420] HTTP.sys Information Disclosure Vulnerability
Medium6.2
Jul 14, 2026
Medium [CVE-2026-50394] Windows Media Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50483] Windows Graphics Component Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-50485] Windows Hyper-V Denial of Service Vulnerability
Medium4.5
Jul 14, 2026
Medium [CVE-2026-50661] Windows BitLocker Security Feature Bypass Vulnerability
Medium6.1PoC reported
Jul 14, 2026
Medium [CVE-2026-50684] Active Directory Federation Server Spoofing Vulnerability
Medium4.8
Jul 14, 2026
Medium [CVE-2026-50681] Windows Secure Channel Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-54126] Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Medium6.5
Jul 14, 2026
Medium [CVE-2026-55051] Microsoft SharePoint Server Information Disclosure Vulnerability
Medium6.5
Jul 14, 2026
Medium [CVE-2026-50468] Microsoft SQL Server Information Disclosure Vulnerability
Medium6.5
Jul 14, 2026
Medium [CVE-2026-56168] Windows SMB Server Denial of Service Vulnerability
Medium6.5
Jul 14, 2026
Medium [CVE-2026-56184] Win32k Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-56649] Windows Network File System Remote Code Execution Vulnerability
Medium5.9
Jul 14, 2026
Medium [CVE-2026-57083] Windows Media Photo Codec Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-57085] Windows Print Spooler Information Disclosure Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-58528] Windows USB Audio Class Driver Information Disclosure Vulnerability
Medium6.8
Jul 14, 2026
Medium [CVE-2026-58547] Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Medium5.5
Jul 14, 2026
Medium [CVE-2026-58638] Windows Boot Loader Security Feature Bypass Vulnerability
Medium6.0
Jul 14, 2026
Medium [CVE-2026-50659] .NET Spoofing Vulnerability
Medium6.5
Jul 14, 2026
Low [CVE-2026-50416] Win32k Information Disclosure Vulnerability
Low3.3
Jul 2, 2026
High [CVE-2026-54998] Microsoft Exchange Online Elevation of Privilege Vulnerability
High8.8

Page 3 of 3 · 94 of 294

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.