2026 CVE Vulnerabilities
44,067 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-45204 | MEDIUM | 5.5 | 0.2% | Aug 7, 2026 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kern... |
| CVE-2026-45198 | HIGH | 7.8 | 0.2% | Aug 7, 2026 | Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause G... |
| CVE-2026-19189 | HIGH | 7.8 | 0.1% | Aug 7, 2026 | A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functional... |
| CVE-2026-70332 | CRITICAL | 9.6 | 0.4% | Aug 7, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-68823 | CRITICAL | 9.1 | 0.5% | Aug 7, 2026 | Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a n... |
| CVE-2026-65668 | HIGH | 8.8 | 0.4% | Aug 7, 2026 | Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a netwo... |
| CVE-2026-65667 | CRITICAL | 10 | 0.4% | Aug 7, 2026 | Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-63508 | CRITICAL | 10 | 0.5% | Aug 7, 2026 | Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elev... |
| CVE-2026-62918 | HIGH | 7.5 | 0.3% | Aug 7, 2026 | Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing ... |
| CVE-2026-62896 | CRITICAL | 9.6 | 0.4% | Aug 7, 2026 | Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-62873 | CRITICAL | 9.8 | 0.4% | Aug 7, 2026 | Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevat... |
| CVE-2026-62836 | CRITICAL | 10 | 0.4% | Aug 7, 2026 | Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized... |
| CVE-2026-62830 | CRITICAL | 9.9 | 0.4% | Aug 7, 2026 | Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-59118 | CRITICAL | 9.3 | 0.4% | Aug 7, 2026 | Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-59115 | CRITICAL | 9.9 | 0.6% | Aug 7, 2026 | '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges ove... |
| CVE-2026-56162 | CRITICAL | 10 | 0.5% | Aug 7, 2026 | Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-56161 | CRITICAL | 9.6 | 0.4% | Aug 7, 2026 | Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network. |
| CVE-2026-50515 | CRITICAL | 9.9 | 0.9% | Aug 7, 2026 | Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network. |
| CVE-2026-50481 | CRITICAL | 9.9 | 0.5% | Aug 7, 2026 | Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privile... |
| CVE-2026-49163 | HIGH | 8.8 | 0.6% | Aug 7, 2026 | Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows a... |
| CVE-2026-17264 | MEDIUM | 5.3 | 0.3% | Aug 7, 2026 | Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of... |
| CVE-2026-15805 | — | — | — | Aug 7, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-8325 | HIGH | 7.8 | 0.1% | Aug 6, 2026 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A ma... |
| CVE-2026-7867 | HIGH | 7.8 | 0.2% | Aug 6, 2026 | A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization chec... |
| CVE-2026-7406 | HIGH | 7.8 | 0.1% | Aug 6, 2026 | A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now