2026 CVE Vulnerabilities
85,283 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21277 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could... |
| CVE-2026-21276 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that... |
| CVE-2026-21275 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that... |
| CVE-2026-21274 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result... |
| CVE-2026-21272 | HIGH | 8.6 | 0.2% | Jan 13, 2026 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead... |
| CVE-2026-21271 | HIGH | 8.6 | 0.2% | Jan 13, 2026 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could resu... |
| CVE-2026-21268 | HIGH | 8.6 | 0.2% | Jan 13, 2026 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could resu... |
| CVE-2026-21267 | HIGH | 8.6 | 0.7% | Jan 13, 2026 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special Elements used in an ... |
| CVE-2026-21226 | HIGH | 7.5 | 0.8% | Jan 13, 2026 | Deserialization of untrusted data in Azure Core shared client library for Python allows an authorized attacker to execut... |
| CVE-2026-21265 | MEDIUM | 6.4 | 1.0% | Jan 13, 2026 | Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching ex... |
| CVE-2026-21224 | HIGH | 7.8 | 0.3% | Jan 13, 2026 | Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally... |
| CVE-2026-21221 | HIGH | 7 | 0.2% | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Managem... |
| CVE-2026-21219 | HIGH | 7 | 0.3% | Jan 13, 2026 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. |
| CVE-2026-20965 | HIGH | 7.5 | 0.2% | Jan 13, 2026 | Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privil... |
| CVE-2026-20963 | CRITICAL | 9.8 | 31.1% | Jan 13, 2026 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a ... |
| CVE-2026-20962 | MEDIUM | 4.4 | 0.4% | Jan 13, 2026 | Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized attacker to disclose ... |
| CVE-2026-20959 | MEDIUM | 5.4 | 7.0% | Jan 13, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-20958 | MEDIUM | 5.4 | 0.3% | Jan 13, 2026 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information ... |
| CVE-2026-20957 | HIGH | 7.8 | 0.4% | Jan 13, 2026 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally... |
| CVE-2026-20956 | HIGH | 7.8 | 0.4% | Jan 13, 2026 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-20955 | HIGH | 7.8 | 0.6% | Jan 13, 2026 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-20953 | HIGH | 8.4 | 0.6% | Jan 13, 2026 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-20952 | HIGH | 8.4 | 0.5% | Jan 13, 2026 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-20951 | HIGH | 7.8 | 0.8% | Jan 13, 2026 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. |
| CVE-2026-20950 | HIGH | 7.8 | 0.4% | Jan 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now