2026 CVE Vulnerabilities
46,942 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-45658 | MEDIUM | 6.8 | 0.3% | Jun 9, 2026 | Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-45655 | MEDIUM | 5.3 | 0.4% | Jun 9, 2026 | Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a ph... |
| CVE-2026-45650 | MEDIUM | 4.3 | 0.6% | Jun 9, 2026 | User interface (ui) misrepresentation of critical information in Microsoft Bing allows an unauthorized attacker to perfo... |
| CVE-2026-45634 | MEDIUM | 5.5 | 0.4% | Jun 9, 2026 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally. |
| CVE-2026-45608 | MEDIUM | 6.8 | 0.3% | Jun 9, 2026 | Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally. |
| CVE-2026-45606 | MEDIUM | 5.5 | 0.4% | Jun 9, 2026 | Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally. |
| CVE-2026-45604 | MEDIUM | 5.5 | 0.3% | Jun 9, 2026 | Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose informati... |
| CVE-2026-45595 | MEDIUM | 5.4 | 0.4% | Jun 9, 2026 | Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feat... |
| CVE-2026-45594 | MEDIUM | 5.5 | 0.4% | Jun 9, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Application Identity (AppID) Subsystem allows an a... |
| CVE-2026-45503 | MEDIUM | 6.5 | 0.4% | Jun 9, 2026 | Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network... |
| CVE-2026-45502 | MEDIUM | 5 | 20.3% | Jun 9, 2026 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information ov... |
| CVE-2026-45501 | MEDIUM | 6.1 | 0.3% | Jun 9, 2026 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a... |
| CVE-2026-45500 | MEDIUM | 6.1 | 0.4% | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows... |
| CVE-2026-45491 | MEDIUM | 5.5 | 0.4% | Jun 9, 2026 | Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tamper... |
| CVE-2026-45483 | MEDIUM | 5.4 | 0.5% | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Project Server ... |
| CVE-2026-45481 | MEDIUM | 5.4 | 0.7% | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-45479 | MEDIUM | 5.4 | 0.5% | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-45468 | MEDIUM | 5.4 | 0.5% | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-45467 | MEDIUM | 5.4 | 0.5% | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-45465 | MEDIUM | 5.4 | 0.5% | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-45464 | MEDIUM | 5.4 | 0.5% | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-45462 | MEDIUM | 5.4 | 0.5% | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-45460 | MEDIUM | 4.7 | 0.4% | Jun 9, 2026 | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-45455 | MEDIUM | 4.3 | 0.6% | Jun 9, 2026 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-45453 | MEDIUM | 5.4 | 0.5% | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now