2026 CVE Vulnerabilities
56,985 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-55038 | HIGH | 7.8 | 0.4% | Jul 14, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-55037 | HIGH | 7.8 | 0.3% | Jul 14, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55036 | HIGH | 7.8 | 0.3% | Jul 14, 2026 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55035 | LOW | 3.3 | 0.5% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55034 | HIGH | 8.7 | 0.6% | Jul 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-55033 | HIGH | 7.8 | 0.5% | Jul 14, 2026 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-55032 | HIGH | 7.8 | 0.3% | Jul 14, 2026 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-55031 | HIGH | 7.8 | 0.4% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55030 | MEDIUM | 5.4 | 0.4% | Jul 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-55029 | HIGH | 7.8 | 0.3% | Jul 14, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-55028 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55027 | MEDIUM | 5.5 | 0.5% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55026 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55025 | HIGH | 7.8 | 0.3% | Jul 14, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker ... |
| CVE-2026-55024 | HIGH | 7.8 | 0.4% | Jul 14, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker ... |
| CVE-2026-55023 | MEDIUM | 5.5 | 0.5% | Jul 14, 2026 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-55022 | HIGH | 7.8 | 0.4% | Jul 14, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to exe... |
| CVE-2026-55021 | HIGH | 8.7 | 0.5% | Jul 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-55020 | MEDIUM | 5.4 | 0.3% | Jul 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-55019 | MEDIUM | 5.4 | 0.4% | Jul 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-55018 | HIGH | 7.8 | 0.3% | Jul 14, 2026 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-55017 | HIGH | 7.8 | 0.3% | Jul 14, 2026 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2026-55016 | MEDIUM | 5.4 | 0.3% | Jul 14, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-55010 | CRITICAL | 9.8 | 0.8% | Jul 14, 2026 | Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a ... |
| CVE-2026-54131 | HIGH | 7.8 | 0.3% | Jul 14, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now