2026 CVE Vulnerabilities
85,180 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21523 | HIGH | 8 | 0.8% | Feb 10, 2026 | Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to e... |
| CVE-2026-21522 | MEDIUM | 6.7 | 0.4% | Feb 10, 2026 | Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an a... |
| CVE-2026-21519 | HIGH | 7.8 | 2.4% | Feb 10, 2026 | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to... |
| CVE-2026-21518 | HIGH | 8.8 | 1.4% | Feb 10, 2026 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio ... |
| CVE-2026-21517 | HIGH | 7 | 0.4% | Feb 10, 2026 | Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to e... |
| CVE-2026-21516 | HIGH | 7.8 | 0.8% | Feb 10, 2026 | Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an unauthor... |
| CVE-2026-21514 | HIGH | 7.8 | 1.5% | Feb 10, 2026 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a... |
| CVE-2026-21513 | HIGH | 8.8 | 15.4% | Feb 10, 2026 | Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a net... |
| CVE-2026-21512 | MEDIUM | 6.5 | 1.0% | Feb 10, 2026 | Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a netwo... |
| CVE-2026-21511 | HIGH | 7.5 | 3.6% | Feb 10, 2026 | Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a... |
| CVE-2026-21510 | HIGH | 8.8 | 25.8% | Feb 10, 2026 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a networ... |
| CVE-2026-21508 | HIGH | 7 | 0.4% | Feb 10, 2026 | Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21358 | MEDIUM | 5.5 | 0.2% | Feb 10, 2026 | InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could... |
| CVE-2026-21357 | HIGH | 7.8 | 0.2% | Feb 10, 2026 | InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could... |
| CVE-2026-21351 | HIGH | 7.8 | 0.2% | Feb 10, 2026 | After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary co... |
| CVE-2026-21350 | MEDIUM | 5.5 | 0.1% | Feb 10, 2026 | After Effects versions 25.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to appl... |
| CVE-2026-21340 | MEDIUM | 5.5 | 0.2% | Feb 10, 2026 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead t... |
| CVE-2026-21339 | MEDIUM | 5.5 | 0.2% | Feb 10, 2026 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead t... |
| CVE-2026-21338 | MEDIUM | 5.5 | 0.1% | Feb 10, 2026 | Substance3D - Designer versions 15.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could l... |
| CVE-2026-21337 | MEDIUM | 5.5 | 0.2% | Feb 10, 2026 | Substance3D - Designer versions 15.1.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead t... |
| CVE-2026-21336 | MEDIUM | 5.5 | 0.1% | Feb 10, 2026 | Substance3D - Designer versions 15.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could l... |
| CVE-2026-21335 | HIGH | 7.8 | 0.2% | Feb 10, 2026 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could resul... |
| CVE-2026-21334 | HIGH | 7.8 | 0.2% | Feb 10, 2026 | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could resul... |
| CVE-2026-21332 | MEDIUM | 5.5 | 0.2% | Feb 10, 2026 | InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead t... |
| CVE-2026-21330 | HIGH | 7.8 | 0.2% | Feb 10, 2026 | After Effects versions 25.6 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion')... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now