2026 CVE Vulnerabilities
43,872 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-55121 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55057 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55054 | MEDIUM | 6.5 | 0.6% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-55051 | MEDIUM | 6.5 | 0.6% | Jul 14, 2026 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information ... |
| CVE-2026-55050 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55047 | MEDIUM | 5.5 | 0.5% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55046 | MEDIUM | 5.5 | 0.5% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55042 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55030 | MEDIUM | 5.4 | 0.4% | Jul 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-55028 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55027 | MEDIUM | 5.5 | 0.5% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55026 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55023 | MEDIUM | 5.5 | 0.5% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55020 | MEDIUM | 5.4 | 0.3% | Jul 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-55019 | MEDIUM | 5.4 | 0.4% | Jul 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-55016 | MEDIUM | 5.4 | 0.3% | Jul 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-54126 | MEDIUM | 6.5 | 0.7% | Jul 14, 2026 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-54116 | MEDIUM | 6.5 | 1.0% | Jul 14, 2026 | Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose in... |
| CVE-2026-50690 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
| CVE-2026-50684 | MEDIUM | 4.8 | 0.4% | Jul 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Serv... |
| CVE-2026-50681 | MEDIUM | 5.5 | 0.5% | Jul 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attack... |
| CVE-2026-50668 | MEDIUM | 6.8 | 0.3% | Jul 14, 2026 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-50661 | MEDIUM | 4.6 | 0.4% | Jul 14, 2026 | Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a ph... |
| CVE-2026-50657 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to... |
| CVE-2026-50495 | MEDIUM | 5.5 | 0.3% | Jul 14, 2026 | Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now