2026 CVE Vulnerabilities
43,880 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-58647 | MEDIUM | 5.4 | 0.5% | Jul 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized at... |
| CVE-2026-58614 | MEDIUM | 5.5 | 0.3% | Jul 14, 2026 | Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-58279 | MEDIUM | 6.5 | 0.4% | Jul 14, 2026 | Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-57976 | MEDIUM | 6.5 | 0.8% | Jul 14, 2026 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a networ... |
| CVE-2026-57097 | MEDIUM | 6.8 | 0.3% | Jul 14, 2026 | Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical atta... |
| CVE-2026-56185 | MEDIUM | 6.5 | 0.6% | Jul 14, 2026 | Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network. |
| CVE-2026-55003 | MEDIUM | 6.5 | 0.7% | Jul 14, 2026 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-55000 | MEDIUM | 6.4 | 0.3% | Jul 14, 2026 | Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-54997 | MEDIUM | 5.5 | 0.3% | Jul 14, 2026 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
| CVE-2026-54988 | MEDIUM | 6.1 | 0.3% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-54432 | MEDIUM | 4.7 | 0.2% | Jul 14, 2026 | Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting (XSS). The issue occurs becaus... |
| CVE-2026-54132 | MEDIUM | 6.8 | 0.3% | Jul 14, 2026 | Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attac... |
| CVE-2026-54108 | MEDIUM | 6.5 | 0.7% | Jul 14, 2026 | External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o... |
| CVE-2026-50381 | MEDIUM | 5.5 | 0.3% | Jul 14, 2026 | Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized... |
| CVE-2026-50350 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authori... |
| CVE-2026-50316 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information... |
| CVE-2026-50303 | MEDIUM | 5.5 | 0.2% | Jul 14, 2026 | Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypas... |
| CVE-2026-50300 | MEDIUM | 5.5 | 0.3% | Jul 14, 2026 | Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-50299 | MEDIUM | 6.8 | 0.3% | Jul 14, 2026 | Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a p... |
| CVE-2026-50298 | MEDIUM | 6.8 | 0.3% | Jul 14, 2026 | Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a phy... |
| CVE-2026-50295 | MEDIUM | 5.5 | 0.2% | Jul 14, 2026 | Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locall... |
| CVE-2026-50294 | MEDIUM | 6.2 | 0.4% | Jul 14, 2026 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized atta... |
| CVE-2026-49807 | MEDIUM | 6.2 | 0.4% | Jul 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclos... |
| CVE-2026-49804 | MEDIUM | 6.6 | 0.4% | Jul 14, 2026 | Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a phys... |
| CVE-2026-49801 | MEDIUM | 5.5 | 0.3% | Jul 14, 2026 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now