2026 CVE Vulnerabilities
50,391 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-32215 | MEDIUM | 5.5 | 0.4% | Apr 14, 2026 | Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information... |
| CVE-2026-32214 | MEDIUM | 5.5 | 0.2% | Apr 14, 2026 | Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information loca... |
| CVE-2026-32212 | MEDIUM | 5.5 | 0.3% | Apr 14, 2026 | Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorize... |
| CVE-2026-32202 | MEDIUM | 4.3 | 63.7% | Apr 14, 2026 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-32201 | MEDIUM | 6.5 | 24.2% | Apr 14, 2026 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netw... |
| CVE-2026-32196 | MEDIUM | 6.1 | 0.3% | Apr 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an u... |
| CVE-2026-32181 | MEDIUM | 5.5 | 0.4% | Apr 14, 2026 | Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally. |
| CVE-2026-32151 | MEDIUM | 6.5 | 0.7% | Apr 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose in... |
| CVE-2026-32088 | MEDIUM | 5.7 | 0.2% | Apr 14, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service... |
| CVE-2026-32085 | MEDIUM | 5.5 | 0.4% | Apr 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacke... |
| CVE-2026-32084 | MEDIUM | 5.5 | 0.4% | Apr 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis... |
| CVE-2026-32081 | MEDIUM | 5.5 | 0.4% | Apr 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis... |
| CVE-2026-32079 | MEDIUM | 5.5 | 0.3% | Apr 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis... |
| CVE-2026-32072 | MEDIUM | 6.2 | 0.3% | Apr 14, 2026 | Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally. |
| CVE-2026-27931 | MEDIUM | 5.5 | 0.5% | Apr 14, 2026 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. |
| CVE-2026-27930 | MEDIUM | 5.5 | 0.4% | Apr 14, 2026 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. |
| CVE-2026-27925 | MEDIUM | 6.5 | 0.4% | Apr 14, 2026 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose informa... |
| CVE-2026-27906 | MEDIUM | 4.4 | 0.4% | Apr 14, 2026 | Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-27288 | MEDIUM | 5.4 | 0.2% | Apr 14, 2026 | Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vuln... |
| CVE-2026-27258 | MEDIUM | 5.5 | 0.1% | Apr 14, 2026 | DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to applicat... |
| CVE-2026-26175 | MEDIUM | 4.6 | 0.4% | Apr 14, 2026 | Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with ... |
| CVE-2026-26169 | MEDIUM | 6.1 | 2.4% | Apr 14, 2026 | Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally. |
| CVE-2026-26155 | MEDIUM | 6.5 | 0.9% | Apr 14, 2026 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
| CVE-2026-24907 | MEDIUM | 5.4 | 0.2% | Apr 14, 2026 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.14 and 4.1.10 contain a stored cros... |
| CVE-2026-24906 | MEDIUM | 5.4 | 0.3% | Apr 14, 2026 | October is a Content Management System (CMS) and web platform. Versions prior to 3.7.14 and 4.1.10 contain a Stored Cros... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now