PatchaPalooza

Microsoft Patch Tuesday: July 2026

July 2026: 2,012 vulnerabilities, one dot each, grouped by product family and colored by severity

In July 2026, Microsoft released security updates for 2,012 vulnerabilities, 571 of them on Patch Tuesday, 14 July 2026. 70 are rated critical, 3 were exploited in the wild before the fix, and 1 was publicly disclosed. The most common impacts are edge - chromium (933), elevation of privilege (263), remote code execution (150). The most affected product families are Browser (937), Open Source Software (474), Windows (416), ESU (337).

Last change to this release: .

Read the July 2026 briefing · Previous: June 2026 Patch Tuesday · Next: August 2026 Patch Tuesday

Exploited and publicly disclosed (4)

CVETitleSeverityCVSSImpactStatus
CVE-2026-58644Microsoft SharePoint Remote Code Execution VulnerabilityCritical9.8Remote Code ExecutionExploited
CVE-2026-56155Active Directory Federation Services Elevation of Privilege VulnerabilityHigh7.8Elevation of PrivilegeExploited
CVE-2026-56164Microsoft SharePoint Server Elevation of Privilege VulnerabilityMedium5.3Elevation of PrivilegeExploited
CVE-2026-50661Windows BitLocker Security Feature Bypass VulnerabilityMedium6.1Security Feature BypassPublicly disclosed

Critical vulnerabilities (69)

CVETitleSeverityCVSSImpactStatus
CVE-2026-50518Windows DHCP Server Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-50522Microsoft SharePoint Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-55010Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-55944Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-56188Windows Server Network driver Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass VulnerabilityCritical9.1Security Feature Bypass
CVE-2026-49172Windows FTP Service Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-50447Windows Message Queuing Service (MSMQ) Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-54117Microsoft SQL Server Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-54118Microsoft SQL Server Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-54990Remote Desktop Client Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-56190Remote Desktop Protocol Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-42990SQL Server ODBC driver Elevation of Privilege VulnerabilityCritical9.8Remote Code Execution
CVE-2026-56159DHCP Server Service Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-55008Microsoft Exchange Server Spoofing VulnerabilityCritical9.6Spoofing
CVE-2026-49798Windows Kernel Elevation of Privilege VulnerabilityCritical9.3Elevation of Privilege
CVE-2026-66803Azure Cosmos DB Remote Code Execution VulnerabilityCritical10Remote Code Execution
CVE-2026-57092Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityCritical9.9Elevation of Privilege
CVE-2026-56165Microsoft Account Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-50380Windows GDI+ Remote Code Execution VulnerabilityCritical9.6Remote Code Execution
CVE-2026-58289Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCritical9Edge - Chromium
CVE-2026-56163Microsoft Azure Kubernetes Service Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-56191Microsoft Exchange Online Tampering VulnerabilityCritical10Tampering
CVE-2026-57106Data Quality Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-58275Azure DNS Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-58630Azure App Service on Azure Stack Hub Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-62825Azure Key Vault Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-44210Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod AnnotationsCritical9.9
CVE-2026-45499Azure OpenAI Elevation of Privilege VulnerabilityCritical9.9Elevation of Privilege
CVE-2026-50517Microsoft M365 Copilot Remote Code Execution VulnerabilityCritical9.9Remote Code Execution
CVE-2026-54120Microsoft Surface Remote Code Execution VulnerabilityCritical9.9Remote Code Execution
CVE-2026-57100Microsoft Entra Provisioning Service Elevation of Privilege VulnerabilityCritical9.9Elevation of Privilege
CVE-2026-15043DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on textCritical9.8
CVE-2026-17543SQL injection in ext-pgsql via E'...' backslash breakoutCritical9.8
CVE-2026-38968ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.Critical9.8
CVE-2026-53374drm/amdgpu: zero-initialize GART table on allocationCritical9.8
CVE-2026-53376drm/amdkfd: Add upper bound check for num_of_nodesCritical9.8
CVE-2026-53384serial: 8250_dw: unregister 8250 port if clk_notifier_register() failsCritical9.8
CVE-2026-53403fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_varCritical9.8
CVE-2026-55971Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()Critical9.8
CVE-2026-57433Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK recordCritical9.8
CVE-2026-63800pNFS: Fix use-after-free in pnfs_update_layout()Critical9.8
CVE-2026-63824KEYS: fix overflow in keyctl_pkey_params_get_2()Critical9.8
CVE-2026-63827apparmor: fix use-after-free in rawdata dedup loopCritical9.8
CVE-2026-63828apparmor: mediate the implicit connect of TCP fast open sendmsgCritical9.8
CVE-2026-63833ntfs3: reject direct userspace writes to reserved $LX* xattrsCritical9.8
CVE-2026-63881drm/amdkfd: fix a vulnerability of integer overflow in kfd debuggerCritical9.8
CVE-2026-63882drm/amdkfd: fix NULL pointer bug in svm_range_set_attrCritical9.8
CVE-2026-63959usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNTCritical9.8
CVE-2026-63974Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device closeCritical9.8
CVE-2026-63979net/handshake: hand off the pinned file reference to accept_doitCritical9.8
CVE-2026-63983net/sched: fix packet loop on netem when duplicate is onCritical9.8
CVE-2026-63999ethtool: rss: fix indir_table and hkey leak on get_rxfh failureCritical9.8
CVE-2026-64017blk-mq: pop cached request if it is usableCritical9.8
CVE-2026-64070powerpc/hv-gpci: fix preempt count leak in sysfs show pathsCritical9.8
CVE-2026-64076netfilter: bridge: eb_tables: close module init raceCritical9.8
CVE-2026-64078netfilter: x_tables: add and use xtables_unregister_table_exitCritical9.8
CVE-2026-64079netfilter: x_tables: allocate hook ops while under mutexCritical9.8
CVE-2026-64138ksmbd: validate SID in parent security descriptor during ACL inheritanceCritical9.8
CVE-2026-41106Microsoft 365 Copilot Elevation of Privilege VulnerabilityCritical9.3Elevation of Privilege
CVE-2026-62835Azure Portal Information Disclosure VulnerabilityCritical9.3Information Disclosure
CVE-2026-11564Native CA trust persistCritical9.1
CVE-2026-14740DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL commentCritical9.1
CVE-2026-48144Apache Thrift: c_glib TLS Client Missing Hostname VerificationCritical9.1
CVE-2026-57075YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64decCritical9.1
CVE-2026-58023Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes pathCritical9.1
CVE-2026-58662Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypassCritical9.1
CVE-2026-60082DBI versions before 1.651 for Perl do not enforce statement handle consistency with the rowCritical9.1
CVE-2026-8924trailing dot domain super cookieCritical9.1

Severity breakdown

Severity (CVSS)CVEs
Critical70
High646
Medium370
Low23
N/A903

Impact categories

ImpactCVEs
Edge - Chromium933
Elevation of Privilege263
Remote Code Execution150
Information Disclosure106
Denial of Service35
Spoofing18
Security Feature Bypass17
Tampering10

Product families

Product familyCVEs
Browser937
Open Source Software474
Windows416
ESU337
Microsoft Office102
Developer Tools35
Azure19
SQL Server9
Apps8
Mariner8
System Center6
Server Software6
Other4
Device1
Microsoft Dynamics1

All 2,012 vulnerabilities

CVETitleSeverityCVSSImpactStatus
CVE-2026-58644Microsoft SharePoint Remote Code Execution VulnerabilityCritical9.8Remote Code ExecutionExploited
CVE-2026-56155Active Directory Federation Services Elevation of Privilege VulnerabilityHigh7.8Elevation of PrivilegeExploited
CVE-2026-56164Microsoft SharePoint Server Elevation of Privilege VulnerabilityMedium5.3Elevation of PrivilegeExploited
CVE-2026-50518Windows DHCP Server Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-50522Microsoft SharePoint Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-55010Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-55944Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-56188Windows Server Network driver Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass VulnerabilityCritical9.1Security Feature Bypass
CVE-2026-49172Windows FTP Service Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-50447Windows Message Queuing Service (MSMQ) Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-54117Microsoft SQL Server Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-54118Microsoft SQL Server Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-54990Remote Desktop Client Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-56190Remote Desktop Protocol Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-42990SQL Server ODBC driver Elevation of Privilege VulnerabilityCritical9.8Remote Code Execution
CVE-2026-56159DHCP Server Service Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-55008Microsoft Exchange Server Spoofing VulnerabilityCritical9.6Spoofing
CVE-2026-49798Windows Kernel Elevation of Privilege VulnerabilityCritical9.3Elevation of Privilege
CVE-2026-49795Windows Kernel Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50370DHCP Server Service Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-50489Win32k Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-54128Windows DHCP Client Remote Code Execution VulnerabilityHigh8.4Remote Code Execution
CVE-2026-54992Microsoft Message Queuing Queue Manager Remote Code Execution VulnerabilityHigh8.4Remote Code Execution
CVE-2026-58596Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityHigh8.3Edge - Chromium
CVE-2026-49170Windows StateRepository API Server file Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50327Windows Media Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50329Microsoft DWM Core Library Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50332Windows Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50343Microsoft Install Service Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50351Windows Audio Compression Manager (ACM) Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50387Windows GDI Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50423Windows Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50433Windows Media Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50436Windows Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50454Windows User Interface Core Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50476Windows Network Connections Service Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50509Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50655Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50667Windows Common Log File System Driver Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50688Windows Win32k Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-54114Windows Win32k Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-54986Windows Win32k Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-57091Windows File History Service Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58536Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58631Windows Admin Center (WAC) Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-58633Desktop Window Manager Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58531Windows SMB Elevation of Privilege VulnerabilityHigh7.5Elevation of Privilege
CVE-2026-49805Win32k Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50297Win32k Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50325Win32k Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50390Windows Kernel Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50375DirectX Graphics Kernel Elevation of Privilege VulnerabilityMedium6.3Elevation of Privilege
CVE-2026-58638Windows Boot Loader Security Feature Bypass VulnerabilityMedium6Security Feature Bypass
CVE-2026-50475Windows Kernel Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50661Windows BitLocker Security Feature Bypass VulnerabilityMedium6.1Security Feature BypassPublicly disclosed
CVE-2026-66803Azure Cosmos DB Remote Code Execution VulnerabilityCritical10Remote Code Execution
CVE-2026-57092Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityCritical9.9Elevation of Privilege
CVE-2026-56165Microsoft Account Remote Code Execution VulnerabilityCritical9.8Remote Code Execution
CVE-2026-50380Windows GDI+ Remote Code Execution VulnerabilityCritical9.6Remote Code Execution
CVE-2026-41109GitHub Copilot and Visual Studio Code Security Feature Bypass VulnerabilityHigh8.8Security Feature Bypass
CVE-2026-47295Microsoft SQL Server Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-47300ASP.NET Core Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-47303ASP.NET Core Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-47632Azure Connected Machine Agent Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-48564DHCP Server Service Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-50342Windows MIDI Service Module Elevation of Privileges VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50369Windows Remote Desktop Services Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50382DirectX Graphics Kernel Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-50413Windows Runtime Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50438Microsoft PC Manager Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50444Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50477Windows Kernel Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50663Game: Age of Empires II: Definitive Edition Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-50666Windows Remote Access Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50670Windows Win32k Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50687Windows Win32k Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-54107Windows Win32k Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-54121Active Directory Certificate Services Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-54982Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-54999Windows TCP/IP Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-55002Microsoft SQL Server Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-55005Microsoft Exchange Server Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-56194Windows NFS Server Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-56196Windows Admin Center (WAC) Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-56197Windows Admin Center (WAC) Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-56645Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh8.8Edge - Chromium
CVE-2026-56647Windows Remote Access Service Infrastructure Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-57087Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-57090Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-57094Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-58277Microsoft SharePoint Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-58534Windows Input Method Editor (IME) Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-58594Remote Desktop Client Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-58608Windows Print Spooler Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-62870Microsoft Excel Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-49184Windows NTFS Remote Code Execution VulnerabilityHigh8.4Remote Code Execution
CVE-2026-50301Microsoft Office Remote Code Execution VulnerabilityHigh8.4Remote Code Execution
CVE-2026-50520Visual Studio Code Remote Code Execution VulnerabilityHigh8.4Remote Code Execution
CVE-2026-54122Windows GDI+ Remote Code Execution VulnerabilityHigh8.4Remote Code Execution
CVE-2026-55045Microsoft Office Remote Code Execution VulnerabilityHigh8.4Remote Code Execution
CVE-2026-56181Windows Network Address Translation (NAT) Spoofing VulnerabilityHigh8.3Spoofing
CVE-2026-50338Azure Spring Apps Elevation of Privilege VulnerabilityHigh8.2Elevation of Privilege
CVE-2026-50429Windows Kernel Information Disclosure VulnerabilityHigh8.2Information Disclosure
CVE-2026-50528.NET Security Feature Bypass VulnerabilityHigh8.2Security Feature Bypass
CVE-2026-50680Windows Hyper-V Elevation of Privilege VulnerabilityHigh8.2Elevation of Privilege
CVE-2026-47304.NET Security Feature Bypass VulnerabilityHigh8.1Security Feature Bypass
CVE-2026-50439Microsoft Message Queuing Queue Manager Remote Code Execution VulnerabilityHigh8.1Remote Code Execution
CVE-2026-50487Windows DNS Client Elevation of Privilege VulnerabilityHigh8.1Elevation of Privilege
CVE-2026-50686Windows OLE Remote Code Execution VulnerabilityHigh8.1Remote Code Execution
CVE-2026-56169Windows Admin Center Elevation of Privilege VulnerabilityHigh8.1Elevation of Privilege
CVE-2026-58595Microsoft Bing App for IOS Spoofing VulnerabilityHigh8.1Spoofing
CVE-2026-58617M365 Copilot for iOS Elevation of Privilege VulnerabilityHigh8.1Elevation of Privilege
CVE-2026-42975Windows Bluetooth Port Driver Remote Code ExecutionHigh8Remote Code Execution
CVE-2026-49169Windows DNS Server Remote Code Execution VulnerabilityHigh8Remote Code Execution
CVE-2026-50365Remote Access Management service/API (RPC server) Elevation of Privilege VulnerabilityHigh8Elevation of Privilege
CVE-2026-50502Windows Event Logging Service Remote Code Execution VulnerabilityHigh8Remote Code Execution
CVE-2026-42982Windows Secure Kernel Mode Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-44800Windows Push Notifications Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-47290Microsoft Office Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-47642Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-48581Surface Broker SDMA Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-49166Windows Print Configuration Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-49173Windows Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-49175Windows DNS Client Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-49176Windows WalletService Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-49783Secure Boot Security Feature Bypass VulnerabilityHigh7.8Security Feature Bypass
CVE-2026-49793Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-49796Windows GDI+ Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-49797Windows NTFS Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-49800Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-49808Windows Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50293Windows Internal Task Bar Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50305Microsoft Brokering File System Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50306Windows TCP/IP Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50309Windows NTFS Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50311Windows Server Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50313Windows NTFS Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50314Microsoft Office Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50317Windows Operating Systems Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50331Windows Application Model Core API Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50333Windows Spaceport.sys Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50335Windows Operating Systems Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50336Windows Media Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50337Windows Notification Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50344Windows OLE Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50353DirectX Graphics Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50362Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50363Windows Push Notifications Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50367Windows Sensor Data Service Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50373Windows Search Service Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50378Windows Key Guard Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50386Windows NTFS Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50388Windows NTFS Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50391Windows Group Policy Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50399Windows Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50405Windows Filtering Platform Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50407Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50412Windows NTFS Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50417Windows NTFS Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50422Windows NTFS Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50425Windows Internal System User Profile Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50435Windows Overlay Filter Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50441Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50448Windows NTFS Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50450Windows Network Connections Service Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50458Microsoft Brokering File System Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50461Windows NTFS Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50462Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50467Microsoft Office Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50471Windows NTFS Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50478Windows Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50479Windows USB Hub Driver Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50480Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50484Windows Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50488Clipboard User Service Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50493DirectX Graphics Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50494Windows NTFS Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50498Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50499Windows Print Spooler Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50646.NET Framework Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50649.NET Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50650.NET Framework Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50665Microsoft Office Information Disclosure VulnerabilityHigh7.8Information Disclosure
CVE-2026-50673Windows Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50675Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50679Windows Search Service Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50689Windows Clipboard Server Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-54124Windows Terminal Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-54125Windows Runtime Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-54131Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-54987Windows Overlay Filter Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-54991Windows USB Print Driver Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-54993Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55001Active Directory Domain Services Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-55004Windows Print Configuration Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-55006Microsoft Exchange Server Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-55011Microsoft Defender Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55012Microsoft Defender Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55014Windows Remote Help Defense Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-55017Microsoft Office Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55018Microsoft Office Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55022Microsoft Office Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55024Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55029Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55031Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55032Microsoft Word Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55033Microsoft Word Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55036Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55037Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55039Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55041Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55043Microsoft PowerPoint Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55044Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55048Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55049Microsoft Office Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55053Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55055Microsoft Word Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55056Microsoft Office Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55058Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55120Microsoft PowerPoint Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55123Microsoft PowerPoint Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55125Microsoft Office Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55127Microsoft Word Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55129Microsoft Office Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55131Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55132Microsoft Word Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55133Microsoft OneNote Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55137Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55140Microsoft Office Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55141Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55899Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55947Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55949Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-56156Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-56175Windows NTFS Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-56176Windows Win32k Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-56189Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-56643DirectX Graphics Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-56644DirectX Graphics Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-56650Windows Network File System Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-57088Extensible Storage Engine (ESENT) Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-57096Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-57107Windows Admin Center Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-57968Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58527Windows Runtime Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58532Windows Kernel Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58537Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58538Windows Bluetooth Service Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58540Windows Installer Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58541Microsoft DWM Core Library Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58601Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityHigh7.8Elevation of Privilege
CVE-2026-58613Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58618Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-58628Windows Wireless Network Manager Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58632Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58634Desktop Window Manager Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58635Windows Narrator Braille Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58636Microsoft PC Manager Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-40378Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-45646OData for ASP.NET and ASP.NET Core Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-47296Microsoft SQL Server Elevation of Privilege VulnerabilityHigh7.5Elevation of Privilege
CVE-2026-47302.NET Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-49171Windows Speech Runtime Elevation of Privilege VulnerabilityHigh7.5Elevation of Privilege
CVE-2026-49181Windows DHCP Client Elevation of Privilege VulnerabilityHigh7.5Elevation of Privilege
CVE-2026-49787HTTP.sys Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-49788HTTP/2 Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50328Windows Server Update Service (WSUS) Tampering VulnerabilityHigh7.5Tampering
CVE-2026-50355Windows Active Directory Federation Services Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50411Windows Active Directory Federation Services Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50424Windows Domain Controller Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50463Windows Kernel Information Disclosure VulnerabilityHigh7.5Information Disclosure
CVE-2026-50470Windows Network Policy Server SNMP Information Disclosure VulnerabilityHigh7.5Information Disclosure
CVE-2026-50496Windows Network Policy Server SNMP Information Disclosure VulnerabilityHigh7.5Information Disclosure
CVE-2026-50505Windows Message Queuing Service (MSMQ) Remote Code Execution VulnerabilityHigh7.5Remote Code Execution
CVE-2026-50506OData for ASP.NET and ASP.NET Core Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50524.NET Framework Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50525.NET Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50527.NET Framework Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50647Active Directory Federation Server Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50648.NET Framework Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50651.NET Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50652Azure Active Directory Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50653Azure Active Directory Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-56170ASP.NET Core Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-57108.NET Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-59117Windows Terminal Remote Code Execution VulnerabilityHigh7.5Remote Code Execution
CVE-2026-54127Windows Hyper-V Elevation of Privilege VulnerabilityHigh7.4Elevation of Privilege
CVE-2026-49789Windows NTFS Elevation of Privilege VulnerabilityHigh7.3Elevation of Privilege
CVE-2026-49790Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityHigh7.3Elevation of Privilege
CVE-2026-50364Windows Backup Service Elevation of Privilege VulnerabilityHigh7.3Elevation of Privilege
CVE-2026-50482Windows NTFS Remote Code Execution VulnerabilityHigh7.3Remote Code Execution
CVE-2026-55034Microsoft SharePoint Server Spoofing VulnerabilityHigh7.3Spoofing
CVE-2026-55126Microsoft SharePoint Server Spoofing VulnerabilityHigh7.3Spoofing
CVE-2026-58640Windows NTFS Remote Code Execution VulnerabilityHigh7.3Remote Code Execution
CVE-2026-49165Microsoft Windows App Store Information Disclosure VulnerabilityHigh7.1Information Disclosure
CVE-2026-49791Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityHigh7.1Elevation of Privilege
CVE-2026-50354Windows Kernel Elevation of Privilege VulnerabilityHigh7.1Elevation of Privilege
CVE-2026-50428Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure VulnerabilityHigh7.1Information Disclosure
CVE-2026-50451Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityHigh7.1Elevation of Privilege
CVE-2026-50465Windows DNS Client Tampering VulnerabilityHigh7.1Tampering
CVE-2026-55122Microsoft Excel Information Disclosure VulnerabilityHigh7.1Information Disclosure
CVE-2026-56171Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityHigh7.1Information Disclosure
CVE-2026-56193Microsoft Office Information Disclosure VulnerabilityHigh7.1Information Disclosure
CVE-2026-57101Visual Studio Code Security Feature Bypass VulnerabilityHigh7.1Security Feature Bypass
CVE-2026-58529Windows Active Directory Federation Services (ADFS) Information Disclosure VulnerabilityHigh7.1Information Disclosure
CVE-2026-48571Windows App Package Installer Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-48572Windows App Package Installer Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-49162Microsoft Brokering File System Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-49183Windows Clipboard Server Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-49784Microsoft Windows App Store Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-49802Windows USB Print Driver Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-49803Windows AppX Deployment Extensions Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-49806Windows USB Print Driver Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50296DirectX Graphics Kernel Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50358Windows Media Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50359Microsoft XML Core Services Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50384Windows Clip Service Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50392Windows Secure Kernel Mode Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50397Windows Kernel Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50406Windows Backup Engine Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50410Windows Runtime Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50449Windows Runtime Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50459Windows Kernel Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50490Windows Installer Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50491Code Integrity DLL (ci.dll) Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50503Windows Runtime Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50526.NET Tampering VulnerabilityHigh7Tampering
CVE-2026-50658Microsoft Defender for Endpoint for Mac Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50672Windows NTFS Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50674Windows USB Print Driver Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-54111Universal Print Management Service Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-54129Windows Hyper-V Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-54989Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-54996Windows USB Print Driver Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-56183Windows MIDI Service Module Elevation of Privileges VulnerabilityHigh7Elevation of Privilege
CVE-2026-56187Windows MIDI Service Module Elevation of Privileges VulnerabilityHigh7Elevation of Privilege
CVE-2026-57093Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-58526Windows Storage Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-58544Windows Management Services Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-58598Windows Backup Service Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-58619Windows Sensor Data Service Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-49168Storage Spaces Direct Elevation of Privilege VulnerabilityMedium6.8Elevation of Privilege
CVE-2026-50299Windows Storage Spaces Direct Remote Code Execution VulnerabilityMedium6.8Remote Code Execution
CVE-2026-54132Windows Kernel Elevation of Privilege VulnerabilityMedium6.8Elevation of Privilege
CVE-2026-58528Windows USB Audio Class Driver Information Disclosure VulnerabilityMedium6.8Information Disclosure
CVE-2026-49804Windows USB Video Driver Elevation of Privilege VulnerabilityMedium6.6Elevation of Privilege
CVE-2026-50678Microsoft Excel Information Disclosure VulnerabilityMedium6.6Information Disclosure
CVE-2026-34348Windows Event Logging Service Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-47282GitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-49799Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMedium6.5Denial of Service
CVE-2026-50376Windows Remote Desktop Client Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-50445Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-50468Microsoft SQL Server Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-50504Windows Remote Desktop Client Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-50659.NET Spoofing VulnerabilityMedium6.5Spoofing
CVE-2026-54108Microsoft SharePoint Server Spoofing VulnerabilityMedium6.5Spoofing
CVE-2026-54116Microsoft SQL Server Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-55051Microsoft SharePoint Server Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-55054Microsoft Excel Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-56168Windows SMB Server Denial of Service VulnerabilityMedium6.5Denial of Service
CVE-2026-56185Windows Admin Center Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-57976Windows Active Directory Domain Services Denial of Service VulnerabilityMedium6.5Denial of Service
CVE-2026-57979Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-57982Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-58279Azure CycleCloud Elevation of Privilege VulnerabilityMedium6.5Elevation of Privilege
CVE-2026-58533Windows Remote Desktop Client Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-58535Windows Remote Desktop Client Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-58546Windows Remote Desktop Client Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-55000Windows USB Print Driver Elevation of Privilege VulnerabilityMedium6.4Elevation of Privilege
CVE-2026-57097Microsoft XML Security Feature Bypass VulnerabilityMedium6.4Security Feature Bypass
CVE-2026-50374Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMedium6.3Elevation of Privilege
CVE-2026-57973Windows Subsystem for Linux (WSL2) Kernel Tampering VulnerabilityMedium6.3Tampering
CVE-2026-58543Universal Print Management Service Elevation of Privilege VulnerabilityMedium6.3Elevation of Privilege
CVE-2026-49807Windows DirectX Information Disclosure VulnerabilityMedium6.2Information Disclosure
CVE-2026-50294Windows Kernel Information Disclosure VulnerabilityMedium6.2Information Disclosure
CVE-2026-50420HTTP.sys Information Disclosure VulnerabilityMedium6.2Information Disclosure
CVE-2026-55026Microsoft Office Information Disclosure VulnerabilityMedium6.2Information Disclosure
CVE-2026-50383Windows Print Spooler Information Disclosure VulnerabilityMedium6.1Information Disclosure
CVE-2026-50453Windows USB Audio Class Driver Information Disclosure VulnerabilityMedium6.1Information Disclosure
CVE-2026-50495DNS Client Tampering VulnerabilityMedium6.1Tampering
CVE-2026-50324Windows Active Directory Federation Services Denial of Service VulnerabilityMedium5.9Denial of Service
CVE-2026-34346Windows Ancillary Function Driver for WinSock Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-40422Windows File Explorer Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-45496Visual Studio Code Security Feature Bypass VulnerabilityMedium5.5Security Feature Bypass
CVE-2026-48580Microsoft Excel Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-49177Windows TCP/IP Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-49180Universal Plug and Play (upnp.dll) Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-49801Windows SMB Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50295Windows Zero Trust DNS Security Feature Bypass VulnerabilityMedium5.5Security Feature Bypass
CVE-2026-50300Windows DWM Core Library Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50303Windows Key Guard Security Feature Bypass VulnerabilityMedium5.5Security Feature Bypass
CVE-2026-50316Windows Kernel Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50341Windows NTFS Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50377Windows Kernel Elevation of Privilege VulnerabilityMedium5.5Elevation of Privilege
CVE-2026-50381Composite Image File System driver (cimfs.sys) Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50401Windows Cloud Files Mini Filter Driver Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50408Microsoft Excel Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50409Windows Overlay Filter Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50437Windows DWM Core Library Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50483Windows Graphics Component Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55027Microsoft Office Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55028Microsoft Office Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55035Microsoft Office Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55046Microsoft Excel Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55047Microsoft Office Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55057Microsoft Office Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55124Microsoft Word Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55138Microsoft Excel Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55139Microsoft Office Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55142Microsoft Word Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-56178Microsoft Defender for Endpoint for Mac Elevation of Privilege VulnerabilityMedium5.5Elevation of Privilege
CVE-2026-56184Win32k Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-56192Microsoft Office Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-56195Microsoft Office Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-57084Windows File Explorer Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-58547Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityMedium5.5Elevation of Privilege
CVE-2026-56157Microsoft SharePoint Server Spoofing VulnerabilityMedium5.4Spoofing
CVE-2026-62828Microsoft Edge for Android (Chromium-based) Tampering VulnerabilityMedium5.4Tampering
CVE-2026-44806Windows Secure Channel Denial of Service VulnerabilityMedium5.3Denial of Service
CVE-2026-50415Windows Media Information Disclosure VulnerabilityMedium5.3Information Disclosure
CVE-2026-50432Window Virtual Filtering Platform (VFP) Denial of Service VulnerabilityMedium5.3Denial of Service
CVE-2026-49167Windows Kernel Elevation of Privilege VulnerabilityMedium4.7Elevation of Privilege
CVE-2026-50310Windows Human Interface Device Information Disclosure VulnerabilityMedium4.7Information Disclosure
CVE-2026-50312Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMedium4.7Elevation of Privilege
CVE-2026-50657Microsoft Defender for Endpoint for Mac Information Disclosure VulnerabilityMedium4.7Information Disclosure
CVE-2026-49794Windows USB Audio Class Driver Information Disclosure VulnerabilityMedium4.6Information Disclosure
CVE-2026-55016Microsoft SharePoint Server Spoofing VulnerabilityMedium4.6Spoofing
CVE-2026-55135Microsoft SharePoint Server Spoofing VulnerabilityMedium4.6Spoofing
CVE-2026-62826Microsoft SharePoint Server Spoofing VulnerabilityMedium4.6Spoofing
CVE-2026-50485Windows Hyper-V Denial of Service VulnerabilityMedium4.5Denial of Service
CVE-2026-50416Win32k Information Disclosure VulnerabilityLow3.3Information Disclosure
CVE-2026-48561Microsoft Edge Copilot Remote Code Execution VulnerabilityN/ARemote Code Execution
CVE-2026-58289Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCritical9Edge - Chromium
CVE-2026-49178Windows Active Directory Domain Services Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-50360Windows SMB Server Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50385Windows Runtime Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50398Windows Media Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50474Remote Desktop Client Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-55052Microsoft SharePoint Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-56642Microsoft Fabric Data Warehouse Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-57102Visual Studio Code Security Feature Bypass VulnerabilityHigh8.8Security Feature Bypass
CVE-2026-57974Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh8.8Edge - Chromium
CVE-2026-57981Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh8.8Edge - Chromium
CVE-2026-58626Windows Remote Desktop Services Remote Code Execution VulnerabilityHigh8.8Remote Code Execution
CVE-2026-57983Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityHigh8.7Edge - Chromium
CVE-2026-50340Windows Runtime Elevation of Privilege VulnerabilityHigh8.5Elevation of Privilege
CVE-2026-58281Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh8.3Edge - Chromium
CVE-2026-58284Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh8.3Edge - Chromium
CVE-2026-58285Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh8.3Edge - Chromium
CVE-2026-58287Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh8.3Edge - Chromium
CVE-2026-58288Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh8.3Edge - Chromium
CVE-2026-58295Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityHigh8.3Edge - Chromium
CVE-2026-58525Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityHigh8.2Edge - Chromium
CVE-2026-42900Microsoft Windows App Store Elevation of Privilege VulnerabilityHigh8.1Elevation of Privilege
CVE-2026-49164Windows Active Directory Domain Services Remote Code Execution VulnerabilityHigh8.1Remote Code Execution
CVE-2026-50460Windows Runtime Elevation of Privilege VulnerabilityHigh8.1Elevation of Privilege
CVE-2026-50694Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityHigh8.1Remote Code Execution
CVE-2026-54995Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityHigh8.1Remote Code Execution
CVE-2026-56186Windows Secure Channel Information Disclosure VulnerabilityHigh8.1Information Disclosure
CVE-2026-58282Microsoft Edge (Chromium-based) Spoofing VulnerabilityHigh8.1Edge - Chromium
CVE-2026-58283Microsoft Edge (Chromium-based) Spoofing VulnerabilityHigh8.1Edge - Chromium
CVE-2026-58286Microsoft Edge (Chromium-based) Spoofing VulnerabilityHigh8.1Edge - Chromium
CVE-2026-58293Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh8.1Edge - Chromium
CVE-2026-66318Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityHigh8.1Edge - Chromium
CVE-2026-40400Windows PowerShell Remote Code Execution VulnerabilityHigh8Remote Code Execution
CVE-2026-50683Windows DHCP Client Elevation of Privilege VulnerabilityHigh8Elevation of Privilege
CVE-2026-58647Microsoft PowerBI Report Server Spoofing VulnerabilityHigh8Spoofing
CVE-2026-47305Visual Studio Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-49792Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50308Windows NTFS Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50315Windows Image Acquisition Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50318Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50321Windows USB Driver Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50326Windows Unified Consent System Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50346Netlogon RPC Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50347Windows Data.dll Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50357Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50361Microsoft Brokering File System Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50400Windows App Package Installer Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50402NTFS Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50421Windows Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50427Content Delivery Manager Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50440Windows Audio Service Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50457Windows Runtime Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50466Microsoft Brokering File System Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50469Windows Projected File System Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50501Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-50676Windows Media Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50677Windows Media Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50697Windows Common Log File System Driver Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-54109Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-54112Windows Win32k Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-54115Windows Message Queuing (MSMQ) Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-55009Microsoft Exchange Server Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-55025Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55038Microsoft Word Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55128Microsoft Word Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55130Microsoft Word Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55134Microsoft Word Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55136Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-55948Microsoft Excel Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-56182Windows NTFS Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58530Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-58542Windows Media Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-58602Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-58609Windows Graphics Component Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-58610Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-66310Microsoft Edge for Android Information Disclosure VulnerabilityHigh7.7Information Disclosure
CVE-2026-57985Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh7.6Edge - Chromium
CVE-2026-50304Windows Active Directory Federation Services Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50330Windows Remote Desktop Client Elevation of Privilege VulnerabilityHigh7.5Elevation of Privilege
CVE-2026-50368Windows Active Directory Federation Services Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50379Windows Media Elevation of Privilege VulnerabilityHigh7.5Elevation of Privilege
CVE-2026-50414Windows Media Elevation of Privilege VulnerabilityHigh7.5Elevation of Privilege
CVE-2026-50500Windows Netlogon Elevation of Privilege VulnerabilityHigh7.5Elevation of Privilege
CVE-2026-50685Windows DHCP Server Remote Code Execution VulnerabilityHigh7.5Remote Code Execution
CVE-2026-50695Windows Active Directory Federation Services Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-50696Internet Key Exchange (IKE) Protocol Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-54119Windows Active Directory Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-54983Windows Active Directory Federation Services Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-56648Windows NFS Server Elevation of Privilege VulnerabilityHigh7.5Elevation of Privilege
CVE-2026-57089Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution VulnerabilityHigh7.5Remote Code Execution
CVE-2026-57975Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh7.5Edge - Chromium
CVE-2026-57984Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh7.5Edge - Chromium
CVE-2026-57986Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh7.5Edge - Chromium
CVE-2026-57992Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh7.5Edge - Chromium
CVE-2026-58276Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh7.5Edge - Chromium
CVE-2026-58290Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh7.5Edge - Chromium
CVE-2026-58292Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh7.5Edge - Chromium
CVE-2026-58294Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh7.5Edge - Chromium
CVE-2026-58299Microsoft Edge for Android Remote Code Execution VulnerabilityHigh7.5Edge - Chromium
CVE-2026-58627Windows DHCP Server Denial of Service VulnerabilityHigh7.5Denial of Service
CVE-2026-66315Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh7.5Edge - Chromium
CVE-2026-57989Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityHigh7.4Edge - Chromium
CVE-2026-57990Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityHigh7.4Edge - Chromium
CVE-2026-57991Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityHigh7.4Edge - Chromium
CVE-2026-57993Microsoft Edge (Chromium-based) Spoofing VulnerabilityHigh7.4Edge - Chromium
CVE-2026-65802Microsoft Edge for Android Information Disclosure VulnerabilityHigh7.4Edge - Chromium
CVE-2026-66321Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh7.4Edge - Chromium
CVE-2026-55021Microsoft SharePoint Server Spoofing VulnerabilityHigh7.3Spoofing
CVE-2026-58298Microsoft Edge (Chromium-based) Spoofing VulnerabilityHigh7.2Edge - Chromium
CVE-2026-50682Active Directory Denial of Service VulnerabilityHigh7.1Denial of Service
CVE-2026-55144Windows Cryptography API: Next Generation (CNG) Tampering VulnerabilityHigh7.1Tampering
CVE-2026-57977Microsoft Edge (Chromium-based) Spoofing VulnerabilityHigh7.1Edge - Chromium
CVE-2026-57988Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHigh7.1Edge - Chromium
CVE-2026-58296Microsoft Edge for Android Information Disclosure VulnerabilityHigh7.1Edge - Chromium
CVE-2026-58297Microsoft Edge for Android Information Disclosure VulnerabilityHigh7.1Edge - Chromium
CVE-2026-66322Microsoft Edge (Chromium-based) Spoofing VulnerabilityHigh7.1Edge - Chromium
CVE-2026-50307Windows TCP/IP Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50322Windows Runtime Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50323Windows Runtime Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50345Windows Runtime Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50348Windows Runtime Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50356Microsoft Windows App Store Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50371Windows LUA File Virtualization Filter Driver Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50372Windows Redirected Drive Buffering System Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50393Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50396Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50403Windows Runtime Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50404Windows Media Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50452Windows Runtime Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50669Windows Telephony Server Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-56173Windows WebView Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-58629DirectX Graphics Kernel Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-58637Windows Client-Side Caching Elevation of Privilege VulnerabilityHigh7Elevation of Privilege
CVE-2026-50298Windows Spaceport.sys Elevation of Privilege VulnerabilityMedium6.8Elevation of Privilege
CVE-2026-50426Windows DNS Server Remote Code Execution VulnerabilityMedium6.8Remote Code Execution
CVE-2026-50492Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityMedium6.8Remote Code Execution
CVE-2026-50668Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMedium6.8Elevation of Privilege
CVE-2026-58522Microsoft Edge for Android Information Disclosure VulnerabilityMedium6.8Edge - Chromium
CVE-2026-66313Microsoft Edge (Chromium-based) Tampering VulnerabilityMedium6.8Edge - Chromium
CVE-2026-45489Microsoft Edge (Chromium-based) Spoofing VulnerabilityMedium6.5Edge - Chromium
CVE-2026-50366Windows Active Directory Domain Services Denial of Service VulnerabilityMedium6.5Denial of Service
CVE-2026-50497Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-54126Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-55003Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-56646Microsoft Edge (Chromium-based) Spoofing VulnerabilityMedium6.5Edge - Chromium
CVE-2026-57987Microsoft Edge (Chromium-based) Spoofing VulnerabilityMedium6.5Edge - Chromium
CVE-2026-58523Microsoft Edge for Android Security Feature Bypass VulnerabilityMedium6.5Edge - Chromium
CVE-2026-58539Windows Remote Desktop Client Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-66312Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMedium6.5Edge - Chromium
CVE-2026-66314Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMedium6.5Edge - Chromium
CVE-2026-66326Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMedium6.5Edge - Chromium
CVE-2026-57095Win32k Elevation of Privilege VulnerabilityMedium6.2Elevation of Privilege
CVE-2026-58300Microsoft Edge for Android Information Disclosure VulnerabilityMedium6.2Edge - Chromium
CVE-2026-66311Microsoft Edge (Chromium-based) Tampering VulnerabilityMedium6.2Edge - Chromium
CVE-2026-49174DNS Client Tampering VulnerabilityMedium6.1Tampering
CVE-2026-54988Microsoft Excel Information Disclosure VulnerabilityMedium6.1Information Disclosure
CVE-2026-55898Microsoft Excel Information Disclosure VulnerabilityMedium6.1Information Disclosure
CVE-2026-58291Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMedium6.1Edge - Chromium
CVE-2026-65804Microsoft Edge (Chromium-based) Spoofing VulnerabilityMedium6.1Edge - Chromium
CVE-2026-66325Microsoft Edge (Chromium-based) Spoofing VulnerabilityMedium6.1Edge - Chromium
CVE-2026-56649Windows Network File System Remote Code Execution VulnerabilityMedium5.9Remote Code Execution
CVE-2026-33842Windows File Explorer Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-34328Windows Audio Service Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-34349Windows Media Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-41087Windows File Explorer Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50334Windows Push Notification Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50339Windows Push Notification Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50350Windows Trusted Runtime Interface Driver Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50352Windows Cryptographic Services Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50389Windows File Explorer Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50394Windows Media Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50430Windows Push Notification Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50431Windows Quality of Service (QoS) Packet Scheduler Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50434Windows Push Notification Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50442Windows File Explorer Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50455Universal Plug and Play (upnp.dll) Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50456Windows File Explorer Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50473Windows File Explorer Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50681Windows Secure Channel Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-50690Windows SMB Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-54997Windows SMB Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55023Microsoft Office Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55042Microsoft Office Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-55121Microsoft Office Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-57083Windows Media Photo Codec Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-57085Windows Print Spooler Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-58545Windows Kernel Security Feature Bypass VulnerabilityMedium5.5Security Feature Bypass
CVE-2026-58614Windows Kernel Security Feature Bypass VulnerabilityMedium5.5Security Feature Bypass
CVE-2026-57978Microsoft Edge (Chromium-based) Spoofing VulnerabilityMedium5.4Edge - Chromium
CVE-2026-57980Microsoft Edge (Chromium-based) Tampering VulnerabilityMedium5.4Edge - Chromium
CVE-2026-58278Microsoft Edge (Chromium-based) Spoofing VulnerabilityMedium5.4Edge - Chromium
CVE-2026-58524Microsoft Edge (Chromium-based) Spoofing VulnerabilityMedium5.4Edge - Chromium
CVE-2026-66316Microsoft Edge (Chromium-based) Spoofing VulnerabilityMedium5.4Edge - Chromium
CVE-2026-66317Microsoft Edge (Chromium-based) Tampering VulnerabilityMedium5.4Edge - Chromium
CVE-2026-50418Windows System Secure Feature Bypass VulnerabilityMedium5.1Security Feature Bypass
CVE-2026-55019Microsoft SharePoint Server Spoofing VulnerabilityMedium4.6Spoofing
CVE-2026-55020Microsoft SharePoint Server Spoofing VulnerabilityMedium4.6Spoofing
CVE-2026-50302Windows Cryptographic Services Security Feature Bypass VulnerabilityMedium4.2Security Feature Bypass
CVE-2026-50419Windows Kernel Information Disclosure VulnerabilityLow3.3Information Disclosure
CVE-2026-56163Microsoft Azure Kubernetes Service Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-56191Microsoft Exchange Online Tampering VulnerabilityCritical10Tampering
CVE-2026-57106Data Quality Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-58275Azure DNS Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-58630Azure App Service on Azure Stack Hub Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-62825Azure Key Vault Elevation of Privilege VulnerabilityCritical10Elevation of Privilege
CVE-2026-44210Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod AnnotationsCritical9.9
CVE-2026-45499Azure OpenAI Elevation of Privilege VulnerabilityCritical9.9Elevation of Privilege
CVE-2026-50517Microsoft M365 Copilot Remote Code Execution VulnerabilityCritical9.9Remote Code Execution
CVE-2026-54120Microsoft Surface Remote Code Execution VulnerabilityCritical9.9Remote Code Execution
CVE-2026-57100Microsoft Entra Provisioning Service Elevation of Privilege VulnerabilityCritical9.9Elevation of Privilege
CVE-2026-15043DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on textCritical9.8
CVE-2026-17543SQL injection in ext-pgsql via E'...' backslash breakoutCritical9.8
CVE-2026-38968ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.Critical9.8
CVE-2026-53374drm/amdgpu: zero-initialize GART table on allocationCritical9.8
CVE-2026-53376drm/amdkfd: Add upper bound check for num_of_nodesCritical9.8
CVE-2026-53384serial: 8250_dw: unregister 8250 port if clk_notifier_register() failsCritical9.8
CVE-2026-53403fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_varCritical9.8
CVE-2026-55971Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()Critical9.8
CVE-2026-57433Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK recordCritical9.8
CVE-2026-63800pNFS: Fix use-after-free in pnfs_update_layout()Critical9.8
CVE-2026-63824KEYS: fix overflow in keyctl_pkey_params_get_2()Critical9.8
CVE-2026-63827apparmor: fix use-after-free in rawdata dedup loopCritical9.8
CVE-2026-63828apparmor: mediate the implicit connect of TCP fast open sendmsgCritical9.8
CVE-2026-63833ntfs3: reject direct userspace writes to reserved $LX* xattrsCritical9.8
CVE-2026-63881drm/amdkfd: fix a vulnerability of integer overflow in kfd debuggerCritical9.8
CVE-2026-63882drm/amdkfd: fix NULL pointer bug in svm_range_set_attrCritical9.8
CVE-2026-63959usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNTCritical9.8
CVE-2026-63974Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device closeCritical9.8
CVE-2026-63979net/handshake: hand off the pinned file reference to accept_doitCritical9.8
CVE-2026-63983net/sched: fix packet loop on netem when duplicate is onCritical9.8
CVE-2026-63999ethtool: rss: fix indir_table and hkey leak on get_rxfh failureCritical9.8
CVE-2026-64017blk-mq: pop cached request if it is usableCritical9.8
CVE-2026-64070powerpc/hv-gpci: fix preempt count leak in sysfs show pathsCritical9.8
CVE-2026-64076netfilter: bridge: eb_tables: close module init raceCritical9.8
CVE-2026-64078netfilter: x_tables: add and use xtables_unregister_table_exitCritical9.8
CVE-2026-64079netfilter: x_tables: allocate hook ops while under mutexCritical9.8
CVE-2026-64138ksmbd: validate SID in parent security descriptor during ACL inheritanceCritical9.8
CVE-2026-41106Microsoft 365 Copilot Elevation of Privilege VulnerabilityCritical9.3Elevation of Privilege
CVE-2026-62835Azure Portal Information Disclosure VulnerabilityCritical9.3Information Disclosure
CVE-2026-11564Native CA trust persistCritical9.1
CVE-2026-14740DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL commentCritical9.1
CVE-2026-48144Apache Thrift: c_glib TLS Client Missing Hostname VerificationCritical9.1
CVE-2026-57075YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64decCritical9.1
CVE-2026-58023Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes pathCritical9.1
CVE-2026-58662Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypassCritical9.1
CVE-2026-60082DBI versions before 1.651 for Perl do not enforce statement handle consistency with the rowCritical9.1
CVE-2026-8924trailing dot domain super cookieCritical9.1
CVE-2026-14380DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced ProfileHigh8.8
CVE-2026-47301Configuration Manager Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-50692Desktop Window Manager Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-54998Microsoft Exchange Online Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-57215RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantomHigh8.8
CVE-2026-57969Azure CycleCloud Elevation of Privilege VulnerabilityHigh8.8Elevation of Privilege
CVE-2026-58253NATS Server: Route API Auth BypassHigh8.8
CVE-2026-63807KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping levelHigh8.8
CVE-2026-64475vfio/pci: Release the VGA arbiter client on register_device() failureHigh8.8
CVE-2026-66032libssh2 Double-Free Heap Corruption via sftp_open()High8.8
CVE-2026-13321DNSSEC Validation Bypass via Out-of-Zone NSEC Next FieldHigh8.6
CVE-2026-14739DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholdersHigh8.6
CVE-2026-53366ipv4: account for fraggap on the paged allocation pathHigh8.5
CVE-2026-56001libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer OverflowHigh8.5
CVE-2026-56002libXfont2 PCF Font Parsing Heap Buffer OverflowHigh8.5
CVE-2026-56003libXfont2 computeProps Property Buffer Heap Buffer OverflowHigh8.5
CVE-2026-56167Azure AI Search Elevation of Privilege VulnerabilityHigh8.5Elevation of Privilege
CVE-2026-63803hdlc_ppp: sync per-proto timers before freeing hdlc stateHigh8.4
CVE-2026-63823keys: Pin request_key_auth payload in instantiate pathsHigh8.4
CVE-2026-64320nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log PageHigh8.4
CVE-2026-64456hwrng: virtio: clamp device-reported used.len at copy_data()High8.4
CVE-2026-64513KVM: x86: Unconditionally recompute CR8 intercept on PPR updateHigh8.4
CVE-2026-60005NGINX ngx_http_slice_module vulnerabilityHigh8.2
CVE-2026-63829net: ip_gre: require CAP_NET_ADMIN in the device netns for changelinkHigh8.2
CVE-2026-64380smb: client: harden POSIX SID length parsingHigh8.2
CVE-2026-42533NGINX Map directive and Regex matching vulnerabilityHigh8.1
CVE-2026-50721IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payloadHigh8.1
CVE-2026-50722IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payloadHigh8.1
CVE-2026-53381virtiofs: fix UAF on submount umountHigh8.1
CVE-2026-64448smb: client: restrict implied bcc[0] exemption to responses without data areaHigh8.1
CVE-2026-8286wrong STARTTLS connection reuseHigh8.1
CVE-2026-35425Azure API Management (APIM) Remote Code Execution VulnerabilityHigh8Remote Code Execution
CVE-2026-12484Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_configHigh7.8
CVE-2026-14191WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeaderHigh7.8
CVE-2026-16493Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)High7.8
CVE-2026-3842Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob writeHigh7.8
CVE-2026-39822Root escape via symlink plus trailing slash in osHigh7.8
CVE-2026-50486Windows Runtime Elevation of Privilege VulnerabilityHigh7.8Elevation of Privilege
CVE-2026-50510GitHub Copilot Remote Code Execution VulnerabilityHigh7.8Remote Code Execution
CVE-2026-53388fuse: re-lock request before replacing page cache folioHigh7.8
CVE-2026-57076YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchorHigh7.8
CVE-2026-59856Vim: Arbitrary Code Execution via PHP Omni-CompletionHigh7.8
CVE-2026-63794KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT pathHigh7.8
CVE-2026-63802blk-cgroup: fix UAF in __blkcg_rstat_flush()High7.8
CVE-2026-63831mac802154: llsec: add skb_cow_data() before in-place cryptoHigh7.8
CVE-2026-63832wifi: mt76: add wcid publish check in mt76_sta_addHigh7.8
CVE-2026-63853drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ringHigh7.8
CVE-2026-63858netfilter: nf_tables: add hook transactions for device deletionsHigh7.8
CVE-2026-64191i2c: stub: Reject I2C block transfers with invalid lengthHigh7.8
CVE-2026-64192bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitializedHigh7.8
CVE-2026-64266fuse: re-lock request before returning from fuse_ref_folio()High7.8
CVE-2026-64298NFSv4: include MAY_WRITE in open permission mask for O_TRUNCHigh7.8
CVE-2026-64305crypto: qat - protect service table iterations with service_lockHigh7.8
CVE-2026-64313crypto: ecc - Fix carry overflow in vli multiplicationHigh7.8
CVE-2026-64322udf: validate sparing table length as an entry count, not a byte countHigh7.8
CVE-2026-64341USB: iowarrior: fix use-after-free on disconnect raceHigh7.8
CVE-2026-64382smb: client: fix double-free in SMB2_open() replayHigh7.8
CVE-2026-64389ksmbd: validate NTLMv2 response before updating session keyHigh7.8
CVE-2026-64391ksmbd: use opener credentials for ADS I/OHigh7.8
CVE-2026-64423ipv4: igmp: remove multicast group from hash table on device destructionHigh7.8
CVE-2026-64481ALSA: hda/cs35l41: Fix firmware load work teardownHigh7.8
CVE-2026-64508bpf: Support for hardening against JIT sprayingHigh7.8
CVE-2026-64556perf/core: Detach event groups during remove_on_execHigh7.8
CVE-2026-64600xfs: resample the data fork mapping after cycling ILOCKHigh7.8
CVE-2026-15392DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted locationHigh7.7
CVE-2026-17527Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc cloneHigh7.7
CVE-2026-55953TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authenticationHigh7.7
CVE-2026-57077YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_lenHigh7.7
CVE-2026-58207NATS Server: Remote crash via integer overflow in Connz paginationHigh7.7
CVE-2026-60002ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)High7.7
CVE-2026-63940KVM: SEV: Ignore Port I/O requests of length '0'High7.7
CVE-2025-63913An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function #2 or the 'Find and configure a matching counter' function of SBI PMU extension.High7.5
CVE-2026-11331Potential wildcard CNAME RPZ policy bypassHigh7.5
CVE-2026-11352QUIC zero-length UDP datagrams busy-loopHigh7.5
CVE-2026-11586WS Auto-PONG memory exhaustionHigh7.5
CVE-2026-11605Unnecessary validation of DNSSEC signed recordsHigh7.5
CVE-2026-11622Potential memory usage beyond configured limitsHigh7.5
CVE-2026-11721Cache poisoning possible with label count discrepancy, RRSIG, and wildcardsHigh7.5
CVE-2026-12413IKEv2 Denial of Service via malformed fragmentationHigh7.5
CVE-2026-12617Record ordering based unexpected exit with CNAME or DNAMEHigh7.5
CVE-2026-13204Unexpected exit in certain situations with NSEC and NSEC3 both presentHigh7.5
CVE-2026-15308Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarationsHigh7.5
CVE-2026-15709Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of serviceHigh7.5
CVE-2026-15711Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violationHigh7.5
CVE-2026-16313Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --exportHigh7.5
CVE-2026-20213ClamAV PE File Format Processing Out-of-Bounds Memory Corruption VulnerabilityHigh7.5
CVE-2026-20214ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption VulnerabilityHigh7.5
CVE-2026-20215ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption VulnerabilityHigh7.5
CVE-2026-20216ClamAV InstallShield File Format Processing Resource Exhaustion VulnerabilityHigh7.5
CVE-2026-20217ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption VulnerabilityHigh7.5
CVE-2026-20243ClamAV ALZ Archive Processing Denial of Service VulnerabilityHigh7.5
CVE-2026-32665Remote DNS-over-QUIC denial of service due to `quic-size` budget bypassHigh7.5
CVE-2026-38754A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.High7.5
CVE-2026-38755A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.High7.5
CVE-2026-38969ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggling.High7.5
CVE-2026-40691Packet of death for DNSCrypt over TCPHigh7.5
CVE-2026-41608Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransportHigh7.5
CVE-2026-43871Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limitHigh7.5
CVE-2026-44690Cross-zone wildcard cache poisoning via RRSIG.labels manipulationHigh7.5
CVE-2026-46600Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessageHigh7.5
CVE-2026-48145Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard BypassHigh7.5
CVE-2026-48586Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size LimitHigh7.5
CVE-2026-48863Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of serviceHigh7.5
CVE-2026-53375drm/amdgpu/vce: Prevent partial address patchesHigh7.5
CVE-2026-53400i2c: core: fix adapter registration raceHigh7.5
CVE-2026-54332GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoSHigh7.5
CVE-2026-55969Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()High7.5
CVE-2026-55973'dns-error-reporting: yes' leads to stack buffer overflowHigh7.5
CVE-2026-56852Infinite loop on invalid input in golang.org/x/textHigh7.5
CVE-2026-57219RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurationsHigh7.5
CVE-2026-57220RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoSHigh7.5
CVE-2026-57432Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpackHigh7.5
CVE-2026-58043A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under `--permission`, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This vulnerability affects Node.js **main**, **22.x**, **24.x**, and **26.x**.High7.5
CVE-2026-58227TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chainHigh7.5
CVE-2026-58250NATS Server: Pre-auth server crash via double INFO in leafnode handshakeHigh7.5
CVE-2026-59884pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDsHigh7.5
CVE-2026-59885pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of serviceHigh7.5
CVE-2026-59886pyasn1: Uncontrolled resource consumption when converting decoded REAL valuesHigh7.5
CVE-2026-59922Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)High7.5
CVE-2026-59925inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairsHigh7.5
CVE-2026-59928Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitionsHigh7.5
CVE-2026-60081DBI::ProfileData versions before 1.651 for Perl do not limit the path indexHigh7.5
CVE-2026-62309CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoSHigh7.5
CVE-2026-63793ntfs: serialize volume label accessesHigh7.5
CVE-2026-63836batman-adv: tp_meter: avoid divide-by-zero for dec_cwndHigh7.5
CVE-2026-63872esp: fix page frag reference leak on skb_to_sgvec failureHigh7.5
CVE-2026-64383smb: client: fix double-free in SMB2_flush() replayHigh7.5
CVE-2026-66033libssh2 Integer Underflow DoS via AES-GCM Cipher NegotiationHigh7.5
CVE-2026-66034libssh2 Heap Out-of-Bounds Read via publickey subsystemHigh7.5
CVE-2026-66035libssh2 Heap Buffer Overflow via ETM Cipher NegotiationHigh7.5
CVE-2026-66373Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free. NOTE: this issue exists because of an incomplete fix for CVE-2026-25243.High7.5
CVE-2026-67215cJSON JSON Patch copy/add Uncontrolled Recursion Stack ExhaustionHigh7.5
CVE-2026-8932incomplete mTLS config matching in conn reuseHigh7.5
CVE-2026-9545exposing HTTP/3 early dataHigh7.5
CVE-2026-9546sending old refererHigh7.5
CVE-2026-12064proto-default skips SSH verificationHigh7.4
CVE-2026-64112rbd: eliminate a race in lock_dwork draining on unmapHigh7.4
CVE-2026-12080Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keysHigh7.3
CVE-2026-53362ipv6: account for fraggap on the paged allocation pathHigh7.3
CVE-2026-63806KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()High7.3
CVE-2026-53329drm/amd/display: Use krealloc_array() in dal_vector_reserve()High7.1
CVE-2026-53343ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadowHigh7.1
CVE-2026-53354arm64: errata: Mitigate TLBI errata on various Arm CPUsHigh7.1
CVE-2026-53356drm/i915/gem: Fix phys BO pread/pwrite with offsetHigh7.1
CVE-2026-53368f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usageHigh7.1
CVE-2026-53402fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()High7.1
CVE-2026-63796ocfs2: reject oversized group bitmap descriptorsHigh7.1
CVE-2026-63801tipc: fix slab-use-after-free Read in tipc_aead_decrypt_doneHigh7.1
CVE-2026-63805crypto: nx - fix nx_crypto_ctx_exit argumentHigh7.1
CVE-2026-63810block: Avoid mounting the bdev pseudo-filesystem in userspaceHigh7.1
CVE-2026-63826fbdev: fix use-after-free in store_modes()High7.1
CVE-2026-63879drm/amdgpu: fix amdgpu_hmm_range_get_pagesHigh7.1
CVE-2026-63961usb: typec: altmodes/displayport: validate count before reading Status Update VDOHigh7.1
CVE-2026-63963usb: typec: tcpm: validate VDO count in Discover Identity ACK handlersHigh7.1
CVE-2026-63978net/handshake: Drain pending requests at net namespace exitHigh7.1
CVE-2026-64117wifi: mac80211: capture fast-RX rate before mesh reuses skb->cbHigh7.1
CVE-2026-64133ALSA: asihpi: Fix potential OOB array access at reading cacheHigh7.1
CVE-2026-64146erofs: fix metabuf leak in inode xattr initializationHigh7.1
CVE-2026-64154drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()High7.1
CVE-2026-64189netfilter: ipset: fix race between dump and ip_set_list resizeHigh7.1
CVE-2026-64210net/mlx5e: xsk: Fix unlocked writing to ICOSQHigh7.1
CVE-2026-64212wifi: iwlwifi: mld: don't dereference a pointer before NULL checking itHigh7.1
CVE-2026-64213hwmon: (lm90) Add lock protection to lm90_alertHigh7.1
CVE-2026-64219drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_asyncHigh7.1
CVE-2026-64227ACPI: driver: Check ACPI_COMPANION() against NULL during probeHigh7.1
CVE-2026-64245fbdev: modedb: fix a possible UAF in fb_find_mode()High7.1
CVE-2026-64255wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlersHigh7.1
CVE-2026-64268RDMA/siw: bound Read Response placement to the RREAD lengthHigh7.1
CVE-2026-64280fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()High7.1
CVE-2026-64286KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPUHigh7.1
CVE-2026-64294mm: do file ownership checks with the proper mount idmapHigh7.1
CVE-2026-64303spi: fsl-lpspi: terminate the RX channel on TX prepare failure pathHigh7.1
CVE-2026-64316crypto: caam - use print_hex_dump_devel to guard key hex dumpsHigh7.1
CVE-2026-64355bpf: Reject fragmented frames in devmapHigh7.1
CVE-2026-64362HID: lg-g15: cancel pending work on remove to fix a use-after-freeHigh7.1
CVE-2026-64372cpufreq: pcc: fix use-after-free and double free in _OSC evaluationHigh7.1
CVE-2026-64375proc: protect ptrace_may_access() with exec_update_lock (FD links)High7.1
CVE-2026-64379smb: client: mask server-provided mode to 07777 in modefromsidHigh7.1
CVE-2026-64384smb: client: fix change notify replay double-freeHigh7.1
CVE-2026-64385smb: client: fix double-free in SMB2_ioctl() replayHigh7.1
CVE-2026-64386smb: client: fix query_info() replay double-freeHigh7.1
CVE-2026-64403Bluetooth: L2CAP: validate option length before reading conf opt valueHigh7.1
CVE-2026-64405Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()High7.1
CVE-2026-64411netfilter: ebtables: terminate table name before find_table_lock()High7.1
CVE-2026-64428gpio: sch: use raw_spinlock_t in the irq startup pathHigh7.1
CVE-2026-64435audit: Fix data races of skb_queue_len() readers on audit_queueHigh7.1
CVE-2026-64470Bluetooth: btusb: fix use-after-free on marvell probe failureHigh7.1
CVE-2026-64471Bluetooth: btusb: fix use-after-free on registration failureHigh7.1
CVE-2026-64496iio: event: Fix event FIFO reset raceHigh7.1
CVE-2026-64510ACPI: NFIT: core: Fix acpi_nfit_init() error cleanupHigh7.1
CVE-2026-64514userfaultfd: gate must_wait writability check on pte_present()High7.1
CVE-2026-64536staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loopHigh7.1
CVE-2026-64557Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()High7.1
CVE-2026-7017HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targetsHigh7.1
CVE-2026-53401fbdev: omap2: fix use-after-free in omapfb_mmapHigh7
CVE-2026-64377cpufreq: qcom-cpufreq-hw: Fix possible double freeHigh7
CVE-2026-64530net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handleHigh7
CVE-2026-64560posix-cpu-timers: Prevent UAF caused by non-leader exec() raceHigh7
CVE-2026-10723Incorrect acceptance of NSEC3 recordsMedium6.8
CVE-2026-16615Librest: weak random number generation in pkce implementationMedium6.8
CVE-2026-57216RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checksMedium6.8
CVE-2026-58208NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is EnabledMedium6.8
CVE-2026-6390Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.Medium6.8
CVE-2026-53397nfsd: fix posix_acl leak on SETACL decode failureMedium6.7
CVE-2026-10822Key Record using PRIVATEDNS algorithm may lead to unexpected exitMedium6.5
CVE-2026-14258Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handlingMedium6.5
CVE-2026-15714Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary stringMedium6.5
CVE-2026-16277Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()Medium6.5
CVE-2026-16461Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formattingMedium6.5
CVE-2026-47729Squid: Memory disclosure in FTP gatewayMedium6.5
CVE-2026-49159Microsoft Graph Information Disclosure VulnerabilityMedium6.5Information Disclosure
CVE-2026-50248BOGUS configured primary hostname accepted for XFR in auth/rpz zonesMedium6.5
CVE-2026-53345KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dyingMedium6.5
CVE-2026-54171Excon: redact additional sensitive/risky headers when following redirectsMedium6.5
CVE-2026-55970Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()Medium6.5
CVE-2026-56434NGINX ngx_http_ssi_module vulnerabilityMedium6.5
CVE-2026-57211RabbitMQ: UNC SSRF affecting the management UI on WindowsMedium6.5
CVE-2026-57217RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypassMedium6.5
CVE-2026-58251NATS Server: Queue Subscribe Authz BypassMedium6.5
CVE-2026-58252NATS Server: Subscribe Authz Bypass via Wildcard-OverlapMedium6.5
CVE-2026-59818etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocationMedium6.5
CVE-2026-59843Libssh: libssh: denial of service via zero advertised channel packet sizeMedium6.5
CVE-2026-59844Libssh: libssh: denial of service via oversized sftp read lengthMedium6.5
CVE-2026-60001sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.Medium6.5
CVE-2026-64381smb: client: Fix next buffer leak in receive_encrypted_standard()Medium6.5
CVE-2026-64534nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error pathMedium6.5
CVE-2026-66337Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()Medium6.5
CVE-2026-66339Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnelsMedium6.5
CVE-2026-8458wrong reuse for different servicesMedium6.5
CVE-2026-55145Outlook Copilot Tampering VulnerabilityMedium6.3Tampering
CVE-2026-58040An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934). This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.Medium6.3
CVE-2026-63871Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route callsMedium6.3
CVE-2026-64434Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn refMedium6.3
CVE-2026-13713YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stackMedium6.2
CVE-2026-56391Out‑of‑bounds Read in GNU coreutilsMedium6.1
CVE-2026-59890setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+Medium6.1
CVE-2026-59926Mistune: XSS via unescaped class option in Admonition directiveMedium6.1
CVE-2026-64001ALSA: pcm: oss: Fix setup list UAF on proc write errorMedium6.1
CVE-2026-64287KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPUMedium6.1
CVE-2026-64450tipc: fix out-of-bounds read in broadcast Gap ACK blocksMedium6.1
CVE-2026-64539Bluetooth: eir: Fix stack OOB write when prepending the Flags ADMedium6
CVE-2026-14586Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environmentsMedium5.9
CVE-2026-15712Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumptionMedium5.9
CVE-2026-15713Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leakMedium5.9
CVE-2026-44621Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminatedMedium5.9
CVE-2026-50046Possible heap use-after-free in an error path when a DoT forwarded query is jostled outMedium5.9
CVE-2026-52863Memory corruption could lead to crash and denial of serviceMedium5.9
CVE-2026-53357Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()Medium5.9
CVE-2026-53393nfsd: reset write verifier on deferred writeback errorsMedium5.9
CVE-2026-55717'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crashMedium5.9
CVE-2026-55950DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessionsMedium5.9
CVE-2026-55990Packet of death for a DNSCrypt misconfigured UnboundMedium5.9
CVE-2026-55991Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2Medium5.9
CVE-2026-56444Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configurationMedium5.9
CVE-2026-59847Libssh: libssh: integrity downgrade via openssl aes-gcm tag verificationMedium5.9
CVE-2026-59999In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.Medium5.9
CVE-2026-64535nvmet-tcp: Fix potential UAF when ddgst mismatchMedium5.9
CVE-2026-66053Apache Thrift: Python TSSLSocket Hostname Matcher ImportMedium5.9
CVE-2026-67216cJSON cJSON_Compare Exponential Complexity Denial of ServiceMedium5.9
CVE-2026-8926password leak with netrc and user in URLMedium5.9
CVE-2026-64160netfs: Fix potential for tearing in ->remote_i_size and ->zero_pointMedium5.8
CVE-2026-64269RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sgMedium5.7
CVE-2026-14355ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PADMedium5.6
CVE-2026-15003Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of serviceMedium5.6
CVE-2024-14040net: nexthop: Increase weight to u16Medium5.5
CVE-2026-12480Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/kerasMedium5.5
CVE-2026-50012Squid: Memory corruption in cache_digest reply handlingMedium5.5
CVE-2026-53337net: bonding: fix NULL pointer dereference in bond_do_ioctl()Medium5.5
CVE-2026-53347drm/virtio: Fix driver removal with disabled KMSMedium5.5
CVE-2026-53349netfilter: nf_conntrack: destroy stale expectfn expectations on unregisterMedium5.5
CVE-2026-53352signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()Medium5.5
CVE-2026-53353hsr: Remove WARN_ONCE() in hsr_addr_is_self().Medium5.5
CVE-2026-53355net: rds: clear i_sends on setup unwindMedium5.5
CVE-2026-53377drm/msm: always recover the gpuMedium5.5
CVE-2026-53382media: vidtv: fix NULL pointer dereference in vidtv_mux_push_siMedium5.5
CVE-2026-53385vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_writeMedium5.5
CVE-2026-53391NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addrMedium5.5
CVE-2026-53392NFSv4/flexfiles: reject zero filehandle version countMedium5.5
CVE-2026-53398NFSD: Fix SECINFO_NO_NAME decode error cleanupMedium5.5
CVE-2026-53399nfsd: release layout stid on setlease failureMedium5.5
CVE-2026-55050Microsoft Word Information Disclosure VulnerabilityMedium5.5Information Disclosure
CVE-2026-637959p: avoid putting oldfid in p9_client_walk() error pathMedium5.5
CVE-2026-63809bpf: use kvfree() for replaced sysctl write bufferMedium5.5
CVE-2026-63811f2fs: read COW data with the original inode during atomic writeMedium5.5
CVE-2026-63821wifi: rtw88: usb: fix memory leaks on USB write failuresMedium5.5
CVE-2026-63825gcov: use atomic counter updates to fix concurrent access crashesMedium5.5
CVE-2026-63834batman-adv: tp_meter: restrict number of unacked list entriesMedium5.5
CVE-2026-63954hpfs: fix a crash if hpfs_map_dnode_bitmap failsMedium5.5
CVE-2026-63960usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()Medium5.5
CVE-2026-63962usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()Medium5.5
CVE-2026-63964usb: typec: ucsi: ccg: reject firmware images without a ':' record headerMedium5.5
CVE-2026-64036cgroup/rstat: validate cpu before css_rstat_cpu() accessMedium5.5
CVE-2026-64038hwmon: (lm90) Stop work before releasing hwmon deviceMedium5.5
CVE-2026-64060netfs: Fix leak of request in netfs_write_begin() error handlingMedium5.5
CVE-2026-64077netfilter: ebtables: move to two-stage removal schemeMedium5.5
CVE-2026-64097drm/amd/display: Validate GPIO pin LUT table size before iteratingMedium5.5
CVE-2026-64187xfs: fail recovery on a committed log item with no regionsMedium5.5
CVE-2026-64188net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()Medium5.5
CVE-2026-64190net: team: fix NULL pointer dereference in team_xmit during mode changeMedium5.5
CVE-2026-64205i2c: i801: fix hardware state machine corruption in error pathMedium5.5
CVE-2026-64206Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lockMedium5.5
CVE-2026-64237Input: elan_i2c - validate firmware size before useMedium5.5
CVE-2026-64241gpio: rockchip: teardown bugs and resource leaksMedium5.5
CVE-2026-64244drivers/base/memory: set mem->altmap after successful device registrationMedium5.5
CVE-2026-64247KVM: x86: hyper-v: Bound the bank index when querying sparse banksMedium5.5
CVE-2026-64248MIPS: smp: report dying CPU to RCU in stop_this_cpu()Medium5.5
CVE-2026-64250LoongArch: Report dying CPU to RCU in stop_this_cpu()Medium5.5
CVE-2026-64275Input: elan_i2c - prevent division by zero and arithmetic underflowMedium5.5
CVE-2026-64276Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED countMedium5.5
CVE-2026-64277Input: synaptics-rmi4 - bound the F3A keymap to the GPIO countMedium5.5
CVE-2026-64299tracing: Prevent out-of-bounds read in glob matchingMedium5.5
CVE-2026-64306crypto: drbg - Fix returning success on failure in CTR_DRBGMedium5.5
CVE-2026-64317isofs: bound Rock Ridge symlink components to the SL recordMedium5.5
CVE-2026-64318partitions: aix: bound the pp_count scan to the ppe arrayMedium5.5
CVE-2026-64323udf: validate VAT header length against the VAT inode sizeMedium5.5
CVE-2026-64324udf: validate free block extents against the partition lengthMedium5.5
CVE-2026-64326block: skip sync_blockdev() on surprise removal in bdev_mark_dead()Medium5.5
CVE-2026-64332USB: ulpi: fix memory leak on registration failureMedium5.5
CVE-2026-64346usb: gadget: udc: Fix use-after-free in gadget_match_driverMedium5.5
CVE-2026-64348usb: free iso schedules on failed submitMedium5.5
CVE-2026-64350usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()Medium5.5
CVE-2026-64351net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()Medium5.5
CVE-2026-64352bpf: Allow LPM map access from sleepable BPF programsMedium5.5
CVE-2026-64363HID: appleir: fix UAF on pending key_up_timer in remove()Medium5.5
CVE-2026-64364HID: multitouch: fix out-of-bounds bit access on mt_io_flagsMedium5.5
CVE-2026-64368mm/slab: do not limit zeroing to orig_size when only red zoning is enabledMedium5.5
CVE-2026-64370posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error pathMedium5.5
CVE-2026-64374sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RTMedium5.5
CVE-2026-64387smb: client: fix query directory replay double-freeMedium5.5
CVE-2026-64400ksmbd: prevent path traversal bypass by restricting caseless retryMedium5.5
CVE-2026-64406Bluetooth: fix UAF in bt_accept_dequeue()Medium5.5
CVE-2026-64408Bluetooth: bnep: pin L2CAP connection during netdev registrationMedium5.5
CVE-2026-64409Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()Medium5.5
CVE-2026-64412netfilter: ebtables: module names must be null-terminatedMedium5.5
CVE-2026-64413netfilter: ebtables: zero chainstack arrayMedium5.5
CVE-2026-64422net: ipv4: bound TCP reordering sysctl writes and MTU probe sizesMedium5.5
CVE-2026-64425io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work itemMedium5.5
CVE-2026-64429gpio: eic-sprd: use raw_spinlock_t in the irq startup pathMedium5.5
CVE-2026-64433Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_completeMedium5.5
CVE-2026-64441staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()Medium5.5
CVE-2026-64443staging: rtl8723bs: fix OOB read in update_beacon_info() IE loopMedium5.5
CVE-2026-64444staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loopMedium5.5
CVE-2026-644526lowpan: fix NHC entry use-after-free on error pathMedium5.5
CVE-2026-64462PCI: altera: Fix resource leaks on probe failureMedium5.5
CVE-2026-64465usb: xhci: Fix sleep in atomic context in xhci_free_streams()Medium5.5
CVE-2026-64474vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arcMedium5.5
CVE-2026-64482ALSA: gus: check snd_ctl_new1() return valueMedium5.5
CVE-2026-64487ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parserMedium5.5
CVE-2026-64507x86/bugs: Enable IBPB flush on BPF JIT allocationMedium5.5
CVE-2026-64511ACPI: NFIT: core: Fix possible NULL pointer dereferenceMedium5.5
CVE-2026-64523net/handshake: Take a long-lived file reference at submitMedium5.5
CVE-2026-64525xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exitMedium5.5
CVE-2026-64533fs/ntfs3: validate lcns_follow in log_replay conversionMedium5.5
CVE-2026-7260Stack overflow in phar with circular symlinksMedium5.5
CVE-2026-45488Microsoft Edge (Chromium-based) Spoofing VulnerabilityMedium5.4Edge - Chromium
CVE-2026-54522MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer DisclosureMedium5.4
CVE-2026-66338Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()Medium5.4
CVE-2026-11856cross-origin Digest auth state leakMedium5.3
CVE-2026-15588Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line bufferingMedium5.3
CVE-2026-16768Gdk-pixbuf: out-of-bounds read in ico parserMedium5.3
CVE-2026-42505Invoking Encrypted Client Hello privacy leak in crypto/tlsMedium5.3
CVE-2026-50045'max-global-quota' reset by DNSSEC validation restartsMedium5.3
CVE-2026-50251Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flushMedium5.3
CVE-2026-59845Libssh: libssh: denial of service via unchecked proxycommand fork() failureMedium5.3
CVE-2026-59848Libssh: libssh: denial of service via sftp responses with unknown request idsMedium5.3
CVE-2026-62299CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT recordMedium5.3
CVE-2026-64082riscv: Fix register corruption from uninitialized cregs on errorMedium5.3
CVE-2026-8927env-set cross-proxy Digest auth state leakMedium5.3
CVE-2026-64478ALSA: usb-audio: avoid kobject path lookup in DualSense matchMedium5.2
CVE-2026-47143Capstone has a NULL Pointer Dereference with 3DNow! opcodesMedium5.1
CVE-2026-63819f2fs: fix to do sanity check on f2fs_get_node_folio_ra()Medium5
CVE-2026-38753A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.Medium4.9
CVE-2026-16729undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fieldsMedium4.8
CVE-2026-26081HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.Medium4.8
CVE-2026-26145Microsoft Azure Synapse Elevation of Privilege VulnerabilityMedium4.8Elevation of Privilege
CVE-2026-50684Active Directory Federation Server Spoofing VulnerabilityMedium4.8Spoofing
CVE-2026-54887DTLS server cookie bypass during startup window due to empty initial cookie secretMedium4.8
CVE-2026-56416Possible heap buffer overflow when validator canonicalizes RDATA that contains domain nameMedium4.8
CVE-2026-57213RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag renderingMedium4.8
CVE-2026-59998sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.Medium4.8
CVE-2026-10536HTTP/2 stream-dependency tree UAFMedium4.7
CVE-2026-64279i2c: core: fix adapter deregistration raceMedium4.7
CVE-2026-64371proc: protect ptrace_may_access() with exec_update_lock (part 1)Medium4.7
CVE-2026-64373cpufreq: Fix hotplug-suspend race during rebootMedium4.7
CVE-2026-64378writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()Medium4.7
CVE-2026-64542ipv6: ndisc: fix NULL deref in accept_untracked_na()Medium4.7
CVE-2026-55030Microsoft SharePoint Server Spoofing VulnerabilityMedium4.6Spoofing
CVE-2026-64547net: usb: net1080: validate packet_len before pad-byte access in rx_fixupMedium4.6
CVE-2026-53361af_unix: Set gc_in_progress to true in unix_gc().Medium4.5
CVE-2026-59831GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious CodespaceMedium4.4
CVE-2026-63830net: skmsg: preserve sg.copy across SG transformsMedium4.4
CVE-2026-63835batman-adv: v: prevent OGM aggregation on disabled hardifMedium4.4
CVE-2026-64388smb/client: fix chown/chgrp with SMB3 POSIX ExtensionsMedium4.4
CVE-2026-64531net: openvswitch: reject oversized nested action attrsMedium4.4
CVE-2026-64544crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contentsMedium4.4
CVE-2026-14647onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-boundsMedium4.3
CVE-2026-58209NATS Server: MQTT retained and QoS replay bypass subscribe deny filtersMedium4.3
CVE-2026-58597Microsoft Edge (Chromium-based) Spoofing VulnerabilityMedium4.3Edge - Chromium
CVE-2026-59850Libssh: libssh: use-after-free via data callbacks on closed channelsMedium4.3
CVE-2026-59930Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` contentMedium4.3
CVE-2026-63308Helm Files.Lines Denial of Service via Empty Chart FilesMedium4.3
CVE-2026-15157undici vulnerable to CRLF Injection via blob-like body 'type' propertyMedium4.2
CVE-2026-55945Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMedium4.2Edge - Chromium
CVE-2026-59995sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.Medium4.2
CVE-2026-59996scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.Medium4.2
CVE-2026-59997internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.Medium4.2
CVE-2026-56850A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.Medium4.1
CVE-2026-64424netpoll: fix a use-after-free on shutdown pathMedium4.1
CVE-2026-13221Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunkMedium4
CVE-2026-15028Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended headerLow3.9
CVE-2026-26080HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.Low3.7
CVE-2026-41637Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queriesLow3.7
CVE-2026-42955Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue recordsLow3.7
CVE-2026-44687Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAINLow3.7
CVE-2026-46582A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply pathLow3.7
CVE-2026-54478DNS Cookie bypass when combined with proxy-protocol useLow3.7
CVE-2026-60000sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.Low3.7
CVE-2026-62994CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` pluginLow3.7
CVE-2026-12547Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switchLow3.4
CVE-2026-41579runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violationsLow3.3
CVE-2026-56847A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.Low3.3
CVE-2026-58039A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.Low3.3
CVE-2026-64532fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}Low3.3
CVE-2026-54787sigstore-go fails to check signature timestamps against a signing key's validity periodLow3.1
CVE-2026-55708Privacy/configuration issue when adding local data in views through 'unbound-control'Low3.1
CVE-2026-16517Libarchive: libarchive: signed integer overflow in archive_write_zip_headerLow2.9
CVE-2026-38752A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.Low2.9
CVE-2026-64549Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()Low2.1
CVE-2026-64512ACPI: CPPC: Suppress UBSAN warning caused by field misuseLow1.9
CVE-2026-64546drm/edid: fix OOB read in drm_parse_tiled_block()Low1.9
CVE-2026-13028Chromium: CVE-2026-13028 Use after free in WebGLN/AEdge - Chromium
CVE-2026-13030Chromium: CVE-2026-13030 Uninitialized Use in GPUN/AEdge - Chromium
CVE-2026-13032Chromium: CVE-2026-13032 Use after free in WebGLN/AEdge - Chromium
CVE-2026-13037Chromium: CVE-2026-13037 Use after free in WebViewN/AEdge - Chromium
CVE-2026-13282Chromium: CVE-2026-13282 Use after free in AdFilterN/AEdge - Chromium
CVE-2026-13283Chromium: CVE-2026-13282: Use after free in PaymentsN/AEdge - Chromium
CVE-2026-13346pip absolute path traversal during download from malicious package indexesN/A
CVE-2026-13774Chromium: CVE-2026-13774 Use after free in ExtensionsN/AEdge - Chromium
CVE-2026-13775Chromium: CVE-2026-13775 Use after free in GPUN/AEdge - Chromium
CVE-2026-13776Chromium: CVE-2026-13776 Type Confusion in DawnN/AEdge - Chromium
CVE-2026-13777Chromium: CVE-2026-13777 Insufficient validation of untrusted input in iOSWebN/AEdge - Chromium
CVE-2026-13778Chromium: CVE-2026-13778 Use after free in WebUSBN/AEdge - Chromium
CVE-2026-13779Chromium: CVE-2026-13779 Use after free in ChromotingN/AEdge - Chromium
CVE-2026-13780Chromium: CVE-2026-13780 Insufficient validation of untrusted input in ANGLEN/AEdge - Chromium
CVE-2026-13781Chromium: CVE-2026-13781 Insufficient validation of untrusted input in SkiaN/AEdge - Chromium
CVE-2026-13782Chromium: CVE-2026-13782 Use after free in BrowserN/AEdge - Chromium
CVE-2026-13783Chromium: CVE-2026-13783 Use after free in ViewsN/AEdge - Chromium
CVE-2026-13784Chromium: CVE-2026-13784 Use after free in ViewsN/AEdge - Chromium
CVE-2026-13785Chromium: CVE-2026-13785 Use after free in BluetoothN/AEdge - Chromium
CVE-2026-13786Chromium: CVE-2026-13786 Use after free in OzoneN/AEdge - Chromium
CVE-2026-13787Chromium: CVE-2026-13787 Use after free in ChromotingN/AEdge - Chromium
CVE-2026-13788Chromium: CVE-2026-13788 Use after free in FullscreenN/AEdge - Chromium
CVE-2026-13790Chromium: CVE-2026-13790 Side-channel information leakage in ScrollN/AEdge - Chromium
CVE-2026-13791Chromium: CVE-2026-13791 Insufficient validation of untrusted input in DownloadsN/AEdge - Chromium
CVE-2026-13792Chromium: CVE-2026-13792 Use after free in TouchbarN/AEdge - Chromium
CVE-2026-13793Chromium: CVE-2026-13793 Insufficient policy enforcement in SVGN/AEdge - Chromium
CVE-2026-13794Chromium: CVE-2026-13794 Insufficient validation of untrusted input in WebAppInstallsN/AEdge - Chromium
CVE-2026-13795Chromium: CVE-2026-13795 Insufficient policy enforcement in Chrome for iOSN/AEdge - Chromium
CVE-2026-13796Chromium: CVE-2026-13796 Integer overflow in ChromecastN/AEdge - Chromium
CVE-2026-13797Chromium: CVE-2026-13797 Insufficient validation of untrusted input in ChromecastN/AEdge - Chromium
CVE-2026-13798Chromium: CVE-2026-13798 Heap buffer overflow in ChromecastN/AEdge - Chromium
CVE-2026-13799Chromium: CVE-2026-13799 Use after free in QUICN/AEdge - Chromium
CVE-2026-13800Chromium: CVE-2026-13800 Inappropriate implementation in UpdaterN/AEdge - Chromium
CVE-2026-13801Chromium: CVE-2026-13801 Integer overflow in ChromecastN/AEdge - Chromium
CVE-2026-13802Chromium: CVE-2026-13802 Use after free in ViewsN/AEdge - Chromium
CVE-2026-13803Chromium: CVE-2026-13803 Type Confusion in Chrome TabsN/AEdge - Chromium
CVE-2026-13804Chromium: CVE-2026-13804 Use after free in ChromecastN/AEdge - Chromium
CVE-2026-13805Chromium: CVE-2026-13805 Use after free in GFXN/AEdge - Chromium
CVE-2026-13806Chromium: CVE-2026-13806 Insufficient validation of untrusted input in AccessibilityN/AEdge - Chromium
CVE-2026-13807Chromium: CVE-2026-13807 Use after free in ImportN/AEdge - Chromium
CVE-2026-13808Chromium: CVE-2026-13808 Insufficient data validation in Chrome for iOSN/AEdge - Chromium
CVE-2026-13809Chromium: CVE-2026-13809 Side-channel information leakage in Safe BrowsingN/AEdge - Chromium
CVE-2026-13810Chromium: CVE-2026-13810 Inappropriate implementation in InputN/AEdge - Chromium
CVE-2026-13811Chromium: CVE-2026-13811 Use after free in IMEN/AEdge - Chromium
CVE-2026-13812Chromium: CVE-2026-13812 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-13813Chromium: CVE-2026-13813 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-13814Chromium: CVE-2026-13814 Use after free in ViewsN/AEdge - Chromium
CVE-2026-13815Chromium: CVE-2026-13815 Use after free in BlinkN/AEdge - Chromium
CVE-2026-13816Chromium: CVE-2026-13816 Insufficient validation of untrusted input in File InputN/AEdge - Chromium
CVE-2026-13817Chromium: CVE-2026-13817 Insufficient validation of untrusted input in GlicN/AEdge - Chromium
CVE-2026-13818Chromium: CVE-2026-13818 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-13819Chromium: CVE-2026-13819 Out of bounds read in ANGLEN/AEdge - Chromium
CVE-2026-13820Chromium: CVE-2026-13820 Out of bounds read in SkiaN/AEdge - Chromium
CVE-2026-13821Chromium: CVE-2026-13821 Use after free in CanvasN/AEdge - Chromium
CVE-2026-13822Chromium: CVE-2026-13822 Inappropriate implementation in ExtensionsN/AEdge - Chromium
CVE-2026-13823Chromium: CVE-2026-13823 Use after free in GlicN/AEdge - Chromium
CVE-2026-13824Chromium: CVE-2026-13824 Insufficient validation of untrusted input in ExtensionsN/AEdge - Chromium
CVE-2026-13825Chromium: CVE-2026-13825 Uninitialized Use in DawnN/AEdge - Chromium
CVE-2026-13826Chromium: CVE-2026-13826 Inappropriate implementation in AutofillN/AEdge - Chromium
CVE-2026-13827Chromium: CVE-2026-13827 Use after free in UpdaterN/AEdge - Chromium
CVE-2026-13828Chromium: CVE-2026-13828 Inappropriate implementation in EnterpriseN/AEdge - Chromium
CVE-2026-13829Chromium: CVE-2026-13829 Insufficient validation of untrusted input in SettingsN/AEdge - Chromium
CVE-2026-13830Chromium: CVE-2026-13830 Use after free in ChromotingN/AEdge - Chromium
CVE-2026-13831Chromium: CVE-2026-13831 Use after free in GPUN/AEdge - Chromium
CVE-2026-13832Chromium: CVE-2026-13832 Use after free in HeadlessN/AEdge - Chromium
CVE-2026-13833Chromium: CVE-2026-13833 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-13834Chromium: CVE-2026-13834 Insufficient validation of untrusted input in ANGLEN/AEdge - Chromium
CVE-2026-13835Chromium: CVE-2026-13835 Inappropriate implementation in XMLN/AEdge - Chromium
CVE-2026-13836Chromium: CVE-2026-13836 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-13837Chromium: CVE-2026-13837 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-13838Chromium: CVE-2026-13838 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-13839Chromium: CVE-2026-13839 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-13840Chromium: CVE-2026-13840 Insufficient policy enforcement in CanvasN/AEdge - Chromium
CVE-2026-13841Chromium: CVE-2026-13841 Integer overflow in SkiaN/AEdge - Chromium
CVE-2026-13842Chromium: CVE-2026-13842 Incorrect security UI in Chrome for iOSN/AEdge - Chromium
CVE-2026-13843Chromium: CVE-2026-13843 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-13844Chromium: CVE-2026-13844 Use after free in UpdaterN/AEdge - Chromium
CVE-2026-13845Chromium: CVE-2026-13845 Use after free in DOMN/AEdge - Chromium
CVE-2026-13846Chromium: CVE-2026-13846 Use after free in USBN/AEdge - Chromium
CVE-2026-13847Chromium: CVE-2026-13847 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-13848Chromium: CVE-2026-13848 Use after free in FormsN/AEdge - Chromium
CVE-2026-13849Chromium: CVE-2026-13849 Insufficient validation of untrusted input in ChromotingN/AEdge - Chromium
CVE-2026-13850Chromium: CVE-2026-13850 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-13851Chromium: CVE-2026-13851 Insufficient validation of untrusted input in WebAppInstallsN/AEdge - Chromium
CVE-2026-13852Chromium: CVE-2026-13852 Insufficient validation of untrusted input in WebAppInstallsN/AEdge - Chromium
CVE-2026-13853Chromium: CVE-2026-13853 Use after free in JourneysN/AEdge - Chromium
CVE-2026-13854Chromium: CVE-2026-13854 Use after free in OzoneN/AEdge - Chromium
CVE-2026-13855Chromium: CVE-2026-13855 Use after free in OzoneN/AEdge - Chromium
CVE-2026-13856Chromium: CVE-2026-13856 Insufficient validation of untrusted input in SpeechN/AEdge - Chromium
CVE-2026-13857Chromium: CVE-2026-13857 Inappropriate implementation in GeometryN/AEdge - Chromium
CVE-2026-13858Chromium: CVE-2026-13858 Out of bounds read in FFmpegN/AEdge - Chromium
CVE-2026-13859Chromium: CVE-2026-13859 Inappropriate implementation in ANGLEN/AEdge - Chromium
CVE-2026-13860Chromium: CVE-2026-13860 Incorrect security UI in AutofillN/AEdge - Chromium
CVE-2026-13861Chromium: CVE-2026-13861 Use after free in CoreN/AEdge - Chromium
CVE-2026-13862CVE-2026-13862N/AEdge - Chromium
CVE-2026-13863Chromium: CVE-2026-13863 Insufficient validation of untrusted input in CustomTabsN/AEdge - Chromium
CVE-2026-13864Chromium: CVE-2026-13864 Insufficient policy enforcement in WebHIDN/AEdge - Chromium
CVE-2026-13865Chromium: CVE-2026-13865 Insufficient validation of untrusted input in EnterpriseN/AEdge - Chromium
CVE-2026-13866Chromium: CVE-2026-13866 Insufficient validation of untrusted input in InputN/AEdge - Chromium
CVE-2026-13867Chromium: CVE-2026-13867 Inappropriate implementation in GeolocationN/AEdge - Chromium
CVE-2026-13868Chromium: CVE-2026-13868 Inappropriate implementation in NetworkN/AEdge - Chromium
CVE-2026-13869Chromium: CVE-2026-13869 Use after free in DeviceN/AEdge - Chromium
CVE-2026-13870Chromium: CVE-2026-13870 Use after free in WebViewN/AEdge - Chromium
CVE-2026-13871Chromium: CVE-2026-13871 Insufficient data validation in GuestViewN/AEdge - Chromium
CVE-2026-13872Chromium: CVE-2026-13872 Insufficient validation of untrusted input in WebAppInstallsN/AEdge - Chromium
CVE-2026-13873Chromium: CVE-2026-13873 Out of bounds memory access in LayoutN/AEdge - Chromium
CVE-2026-13874Chromium: CVE-2026-13874 Inappropriate implementation in DataTransferN/AEdge - Chromium
CVE-2026-13875Chromium: CVE-2026-13875 Insufficient validation of untrusted input in GPUN/AEdge - Chromium
CVE-2026-13876Chromium: CVE-2026-13876 Inappropriate implementation in NetworkN/AEdge - Chromium
CVE-2026-13877Chromium: CVE-2026-13877 Insufficient validation of untrusted input in ANGLEN/AEdge - Chromium
CVE-2026-13878Chromium: CVE-2026-13878 Use after free in BluetoothN/AEdge - Chromium
CVE-2026-13879Chromium: CVE-2026-13879 Use after free in BluetoothN/AEdge - Chromium
CVE-2026-13880Chromium: CVE-2026-13880 Use after free in USBN/AEdge - Chromium
CVE-2026-13881Chromium: CVE-2026-13881 Insufficient data validation in WebAppInstallsN/AEdge - Chromium
CVE-2026-13882Chromium: CVE-2026-13882 Inappropriate implementation in USBN/AEdge - Chromium
CVE-2026-13883Chromium: CVE-2026-13883 Type Confusion in ANGLEN/AEdge - Chromium
CVE-2026-13884Chromium: CVE-2026-13884 Heap buffer overflow in ChromecastN/AEdge - Chromium
CVE-2026-13885Chromium: CVE-2026-13885 Use after free in SkiaN/AEdge - Chromium
CVE-2026-13886Chromium: CVE-2026-13886 Policy bypass in Isolated Web AppsN/AEdge - Chromium
CVE-2026-13887Chromium: CVE-2026-13887 Insufficient policy enforcement in NFCN/AEdge - Chromium
CVE-2026-13888Chromium: CVE-2026-13888 Use after free in ExtensionsN/AEdge - Chromium
CVE-2026-13889Chromium: CVE-2026-13889 Insufficient validation of untrusted input in WebAuthenticationN/AEdge - Chromium
CVE-2026-13890Chromium: CVE-2026-13890 Out of bounds read in ChromecastN/AEdge - Chromium
CVE-2026-13891Chromium: CVE-2026-13891 Insufficient validation of untrusted input in ExtensionsN/AEdge - Chromium
CVE-2026-13892Chromium: CVE-2026-13892 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-13893Chromium: CVE-2026-13893 Insufficient validation of untrusted input in WebUIN/AEdge - Chromium
CVE-2026-13894Chromium: CVE-2026-13894 Insufficient policy enforcement in NetworkN/AEdge - Chromium
CVE-2026-13895Chromium: CVE-2026-13895 Inappropriate implementation in AutofillN/AEdge - Chromium
CVE-2026-13896Chromium: CVE-2026-13896 Insufficient policy enforcement in GlicN/AEdge - Chromium
CVE-2026-13897Chromium: CVE-2026-13897 Insufficient policy enforcement in ChromecastN/AEdge - Chromium
CVE-2026-13898Chromium: CVE-2026-13898 Use after free in Cast ReceiverN/AEdge - Chromium
CVE-2026-13899Chromium: CVE-2026-13899 Use after free in HTMLN/AEdge - Chromium
CVE-2026-13900Chromium: CVE-2026-13900 Insufficient validation of untrusted input in ChromecastN/AEdge - Chromium
CVE-2026-13901Chromium: CVE-2026-13901 Insufficient validation of untrusted input in SerialN/AEdge - Chromium
CVE-2026-13902Chromium: CVE-2026-13902 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-13903Chromium: CVE-2026-13903 Insufficient policy enforcement in BluetoothN/AEdge - Chromium
CVE-2026-13904Chromium: CVE-2026-13904 Incorrect security UI in Safe BrowsingN/AEdge - Chromium
CVE-2026-13905Chromium: CVE-2026-13905 Incorrect security UI in Chrome for iOSN/AEdge - Chromium
CVE-2026-13906Chromium: CVE-2026-13906 Out of bounds read in CodecsN/AEdge - Chromium
CVE-2026-13907Chromium: CVE-2026-13907 Inappropriate implementation in iOSWebN/AEdge - Chromium
CVE-2026-13908Chromium: CVE-2026-13908 Insufficient validation of untrusted input in OmniboxN/AEdge - Chromium
CVE-2026-13909Chromium: CVE-2026-13909 Insufficient policy enforcement in DevToolsN/AEdge - Chromium
CVE-2026-13910Chromium: CVE-2026-13910 Insufficient policy enforcement in WebXRN/AEdge - Chromium
CVE-2026-13911Chromium: CVE-2026-13911 Insufficient data validation in SpellcheckN/AEdge - Chromium
CVE-2026-13912Chromium: CVE-2026-13912 Incorrect security UI in Safe BrowsingN/AEdge - Chromium
CVE-2026-13913Chromium: CVE-2026-13913 Insufficient policy enforcement in AutofillN/AEdge - Chromium
CVE-2026-13914Chromium: CVE-2026-13914 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-13915Chromium: CVE-2026-13915 Use after free in Chrome for iOSN/AEdge - Chromium
CVE-2026-13916Chromium: CVE-2026-13916 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-13917Chromium: CVE-2026-13917 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-13918Chromium: CVE-2026-13918 Use after free in Chrome for iOSN/AEdge - Chromium
CVE-2026-13919Chromium: CVE-2026-13919 Insufficient data validation in ExtensionsN/AEdge - Chromium
CVE-2026-13920Chromium: CVE-2026-13920 Insufficient validation of untrusted input in MediaN/AEdge - Chromium
CVE-2026-13921Chromium: CVE-2026-13921 Insufficient validation of untrusted input in DeviceBoundSessionCredentialsN/AEdge - Chromium
CVE-2026-13922Chromium: CVE-2026-13922 Side-channel information leakage in PaintN/AEdge - Chromium
CVE-2026-13923Chromium: CVE-2026-13923 Uninitialized Use in GPUN/AEdge - Chromium
CVE-2026-13924Chromium: CVE-2026-13924 Insufficient validation of untrusted input in WebViewN/AEdge - Chromium
CVE-2026-13925Chromium: CVE-2026-13925 Inappropriate implementation in DownloadsN/AEdge - Chromium
CVE-2026-13926Chromium: CVE-2026-13926 Insufficient validation of untrusted input in NetworkN/AEdge - Chromium
CVE-2026-13927Chromium: CVE-2026-13927 Insufficient validation of untrusted input in UIN/AEdge - Chromium
CVE-2026-13928Chromium: CVE-2026-13928 Insufficient validation of untrusted input in EnterpriseN/AEdge - Chromium
CVE-2026-13929Chromium: CVE-2026-13929 Insufficient validation of untrusted input in DevToolsN/AEdge - Chromium
CVE-2026-13930Chromium: CVE-2026-13930 Insufficient policy enforcement in ActorN/AEdge - Chromium
CVE-2026-13931Chromium: CVE-2026-13931 Inappropriate implementation in MediaN/AEdge - Chromium
CVE-2026-13932Chromium: CVE-2026-13932 Inappropriate implementation in SharingN/AEdge - Chromium
CVE-2026-13933Chromium: CVE-2026-13933 Insufficient policy enforcement in PasswordsN/AEdge - Chromium
CVE-2026-13934Chromium: CVE-2026-13934 Insufficient validation of untrusted input in DawnN/AEdge - Chromium
CVE-2026-13935Chromium: CVE-2026-13935 Side-channel information leakage in ComputePressureN/AEdge - Chromium
CVE-2026-13936Chromium: CVE-2026-13936 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-13937Chromium: CVE-2026-13937 Insufficient policy enforcement in PasswordsN/AEdge - Chromium
CVE-2026-13938Chromium: CVE-2026-13938 Integer overflow in FontsN/AEdge - Chromium
CVE-2026-13939Chromium: CVE-2026-13939 Insufficient validation of untrusted input in WebShareN/AEdge - Chromium
CVE-2026-13940Chromium: CVE-2026-13940 Uninitialized Use in CastN/AEdge - Chromium
CVE-2026-13941Chromium: CVE-2026-13941 Inappropriate implementation in SiteSettingsN/AEdge - Chromium
CVE-2026-13942Chromium: CVE-2026-13942 Insufficient validation of untrusted input in Video CaptureN/AEdge - Chromium
CVE-2026-13943Chromium: CVE-2026-13943 Uninitialized Use in CSSN/AEdge - Chromium
CVE-2026-13944Chromium: CVE-2026-13944 Inappropriate implementation in DataTransferN/AEdge - Chromium
CVE-2026-13945Chromium: CVE-2026-13945 Insufficient policy enforcement in ExtensionsN/AEdge - Chromium
CVE-2026-13946Chromium: CVE-2026-13946 Inappropriate implementation in ScriptInjectionsN/AEdge - Chromium
CVE-2026-13947Chromium: CVE-2026-13947 Uninitialized Use in XRN/AEdge - Chromium
CVE-2026-13948Chromium: CVE-2026-13948 Insufficient policy enforcement in ExtensionsN/AEdge - Chromium
CVE-2026-13949Chromium: CVE-2026-13949 Insufficient policy enforcement in PaymentsN/AEdge - Chromium
CVE-2026-13950Chromium: CVE-2026-13950 Uninitialized Use in GPUN/AEdge - Chromium
CVE-2026-13951Chromium: CVE-2026-13951 Policy bypass in USBN/AEdge - Chromium
CVE-2026-13952Chromium: CVE-2026-13952 Inappropriate implementation in PerformanceAPIsN/AEdge - Chromium
CVE-2026-13953Chromium: CVE-2026-13953 Inappropriate implementation in SplitViewN/AEdge - Chromium
CVE-2026-13954Chromium: CVE-2026-13954 Insufficient policy enforcement in XMLN/AEdge - Chromium
CVE-2026-13955Chromium: CVE-2026-13955 Insufficient validation of untrusted input in CustomTabsN/AEdge - Chromium
CVE-2026-13956Chromium: CVE-2026-13956 Incorrect security UI in PageInfoN/AEdge - Chromium
CVE-2026-13957Chromium: CVE-2026-13957 Incorrect security UI in ExtensionsN/AEdge - Chromium
CVE-2026-13958Chromium: CVE-2026-13958 Uninitialized Use in CodecsN/AEdge - Chromium
CVE-2026-13959Chromium: CVE-2026-13959 Insufficient validation of untrusted input in BlinkN/AEdge - Chromium
CVE-2026-13960Chromium: CVE-2026-13960 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-13961Chromium: CVE-2026-13961 Insufficient validation of untrusted input in DevToolsN/AEdge - Chromium
CVE-2026-13962Chromium: CVE-2026-13962 Insufficient data validation in PDFN/AEdge - Chromium
CVE-2026-13963Chromium: CVE-2026-13963 Inappropriate implementation in DevToolsN/AEdge - Chromium
CVE-2026-13964Chromium: CVE-2026-13964 Insufficient policy enforcement in WebViewN/AEdge - Chromium
CVE-2026-13965Chromium: CVE-2026-13965 Use after free in OilpanN/AEdge - Chromium
CVE-2026-13966Chromium: CVE-2026-13966 Inappropriate implementation in HistoryN/AEdge - Chromium
CVE-2026-13967Chromium: CVE-2026-13967 Type Confusion in V8N/AEdge - Chromium
CVE-2026-13968Chromium: CVE-2026-13968 Insufficient validation of untrusted input in DevToolsN/AEdge - Chromium
CVE-2026-13969Chromium: CVE-2026-13969 Uninitialized Use in UIN/AEdge - Chromium
CVE-2026-13970Chromium: CVE-2026-13970 Uninitialized Use in MediaN/AEdge - Chromium
CVE-2026-13971Chromium: CVE-2026-13971 Uninitialized Use in SkiaN/AEdge - Chromium
CVE-2026-13972Chromium: CVE-2026-13972 Inappropriate implementation in PaintN/AEdge - Chromium
CVE-2026-13973Chromium: CVE-2026-13973 Inappropriate implementation in UIN/AEdge - Chromium
CVE-2026-13974Chromium: CVE-2026-13974 Integer overflow in Safe BrowsingN/AEdge - Chromium
CVE-2026-13975Chromium: CVE-2026-13975 Out of bounds read in ANGLEN/AEdge - Chromium
CVE-2026-13976Chromium: CVE-2026-13976 Heap buffer overflow in StorageN/AEdge - Chromium
CVE-2026-13977Chromium: CVE-2026-13977 Inappropriate implementation in HTMLParserN/AEdge - Chromium
CVE-2026-13978Chromium: CVE-2026-13978 Insufficient policy enforcement in PageInfoN/AEdge - Chromium
CVE-2026-13979Chromium: CVE-2026-13979 Inappropriate implementation in PaintN/AEdge - Chromium
CVE-2026-13980Chromium: CVE-2026-13980 Incorrect security UI in Chrome for iOSN/AEdge - Chromium
CVE-2026-13981Chromium: CVE-2026-13981 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-13982Chromium: CVE-2026-13982 Incorrect security UI in PasswordsN/AEdge - Chromium
CVE-2026-13983Chromium: CVE-2026-13983 Incorrect security UI in Chrome for iOSN/AEdge - Chromium
CVE-2026-13984Chromium: CVE-2026-13984 Incorrect security UI in TabStripN/AEdge - Chromium
CVE-2026-13985Chromium: CVE-2026-13985 Inappropriate implementation in MediaCaptureN/AEdge - Chromium
CVE-2026-13986Chromium: CVE-2026-13986 Inappropriate implementation in Media UIN/AEdge - Chromium
CVE-2026-13987Chromium: CVE-2026-13987 Incorrect security UI in MobileN/AEdge - Chromium
CVE-2026-13988Chromium: CVE-2026-13988 Inappropriate implementation in PaintN/AEdge - Chromium
CVE-2026-13989Chromium: CVE-2026-13989 Insufficient policy enforcement in PageInfoN/AEdge - Chromium
CVE-2026-13990Chromium: CVE-2026-13990 Insufficient validation of untrusted input in DataTransferN/AEdge - Chromium
CVE-2026-13991Chromium: CVE-2026-13991 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-13992Chromium: CVE-2026-13992 Inappropriate implementation in UIN/AEdge - Chromium
CVE-2026-13993Chromium: CVE-2026-13993 Incorrect security UI in WebAppInstallsN/AEdge - Chromium
CVE-2026-13994Chromium: CVE-2026-13994 Inappropriate implementation in Credential ManagementN/AEdge - Chromium
CVE-2026-13995Chromium: CVE-2026-13995 Insufficient validation of untrusted input in AutofillN/AEdge - Chromium
CVE-2026-13996Chromium: CVE-2026-13996 Incorrect security UI in PermissionsN/AEdge - Chromium
CVE-2026-13997Chromium: CVE-2026-13997 Incorrect security UI in ExtensionsN/AEdge - Chromium
CVE-2026-13998Chromium: CVE-2026-13998 Incorrect security UI in File InputN/AEdge - Chromium
CVE-2026-13999Chromium: CVE-2026-13999 Inappropriate implementation in ExtensionsN/AEdge - Chromium
CVE-2026-14000Chromium: CVE-2026-14000 Inappropriate implementation in XMLN/AEdge - Chromium
CVE-2026-14001Chromium: CVE-2026-14001 Inappropriate implementation in NetworkN/AEdge - Chromium
CVE-2026-14002Chromium: CVE-2026-14002 Inappropriate implementation in GeolocationN/AEdge - Chromium
CVE-2026-14003Chromium: CVE-2026-14003 Insufficient policy enforcement in ExtensionsN/AEdge - Chromium
CVE-2026-14004Chromium: CVE-2026-14004 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-14005Chromium: CVE-2026-14005 Use after free in OmniboxN/AEdge - Chromium
CVE-2026-14006Chromium: CVE-2026-14006 Use after free in NavigationN/AEdge - Chromium
CVE-2026-14007Chromium: CVE-2026-14007 Insufficient policy enforcement in PermissionsPolicyN/AEdge - Chromium
CVE-2026-14008Chromium: CVE-2026-14008 Uninitialized Use in WebXRN/AEdge - Chromium
CVE-2026-14009Chromium: CVE-2026-14009 Insufficient data validation in PasswordsN/AEdge - Chromium
CVE-2026-14010Chromium: CVE-2026-14010 Uninitialized Use in CodecsN/AEdge - Chromium
CVE-2026-14011Chromium: CVE-2026-14011 Out of bounds read in SurfaceCaptureN/AEdge - Chromium
CVE-2026-14012Chromium: CVE-2026-14012 Side-channel information leakage in CSSN/AEdge - Chromium
CVE-2026-14013Chromium: CVE-2026-14013 Inappropriate implementation in SVGN/AEdge - Chromium
CVE-2026-14014Chromium: CVE-2026-14014 Inappropriate implementation in PaintN/AEdge - Chromium
CVE-2026-14015Chromium: CVE-2026-14015 Inappropriate implementation in WebRTCN/AEdge - Chromium
CVE-2026-14016Chromium: CVE-2026-14016 Insufficient policy enforcement in SVGN/AEdge - Chromium
CVE-2026-14017Chromium: CVE-2026-14017 Inappropriate implementation in NavigationN/AEdge - Chromium
CVE-2026-14018Chromium: CVE-2026-14018 Use after free in UpdaterN/AEdge - Chromium
CVE-2026-14019Chromium: CVE-2026-14019 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-14020Chromium: CVE-2026-14020 Insufficient validation of untrusted input in WebXRN/AEdge - Chromium
CVE-2026-14021Chromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPIN/AEdge - Chromium
CVE-2026-14022Chromium: CVE-2026-14022 Insufficient validation of untrusted input in NetworkN/AEdge - Chromium
CVE-2026-14023Chromium: CVE-2026-14023 Insufficient validation of untrusted input in SanitizerAPIN/AEdge - Chromium
CVE-2026-14024Chromium: CVE-2026-14024 Use after free in OzoneN/AEdge - Chromium
CVE-2026-14025Chromium: CVE-2026-14025 Use after free in ViewsN/AEdge - Chromium
CVE-2026-14026Chromium: CVE-2026-14026 Incorrect security UI in SplitViewN/AEdge - Chromium
CVE-2026-14027Chromium: CVE-2026-14027 Use after free in SignInN/AEdge - Chromium
CVE-2026-14028Chromium: CVE-2026-14028 Incorrect security UI in Chrome for iOSN/AEdge - Chromium
CVE-2026-14030Chromium: CVE-2026-14030 Incorrect security UI in SplitViewN/AEdge - Chromium
CVE-2026-14031Chromium: CVE-2026-14031 Incorrect security UI in File InputN/AEdge - Chromium
CVE-2026-14032Chromium: CVE-2026-14032 Use after free in BluetoothN/AEdge - Chromium
CVE-2026-14033Chromium: CVE-2026-14033 Insufficient policy enforcement in MediaN/AEdge - Chromium
CVE-2026-14034Chromium: CVE-2026-14034 Inappropriate implementation in WebXRN/AEdge - Chromium
CVE-2026-14035Chromium: CVE-2026-14035 Insufficient policy enforcement in BluetoothN/AEdge - Chromium
CVE-2026-14036Chromium: CVE-2026-14036 Insufficient policy enforcement in BluetoothN/AEdge - Chromium
CVE-2026-14037Chromium: CVE-2026-14037 Insufficient policy enforcement in GPUN/AEdge - Chromium
CVE-2026-14038Chromium: CVE-2026-14038 Insufficient validation of untrusted input in New Tab PageN/AEdge - Chromium
CVE-2026-14039Chromium: CVE-2026-14039 Insufficient policy enforcement in GetUserMediaN/AEdge - Chromium
CVE-2026-14040Chromium: CVE-2026-14040 Use after free in BrowserTagN/AEdge - Chromium
CVE-2026-14041Chromium: CVE-2026-14041 Insufficient policy enforcement in SerialN/AEdge - Chromium
CVE-2026-14042Chromium: CVE-2026-14042 Inappropriate implementation in Isolated Web AppsN/AEdge - Chromium
CVE-2026-14043Chromium: CVE-2026-14043 Use after free in GetUserMediaN/AEdge - Chromium
CVE-2026-14044Chromium: CVE-2026-14044 Use after free in ANGLEN/AEdge - Chromium
CVE-2026-14045Chromium: CVE-2026-14045 Insufficient validation of untrusted input in NetworkN/AEdge - Chromium
CVE-2026-14046Chromium: CVE-2026-14046 Inappropriate implementation in CustomTabsN/AEdge - Chromium
CVE-2026-14047Chromium: CVE-2026-14047 Insufficient policy enforcement in ExtensionsN/AEdge - Chromium
CVE-2026-14048Chromium: CVE-2026-14048 Use after free in ChromecastN/AEdge - Chromium
CVE-2026-14049Chromium: CVE-2026-14049 Inappropriate implementation in GPUN/AEdge - Chromium
CVE-2026-14050Chromium: CVE-2026-14050 Insufficient policy enforcement in PasswordsN/AEdge - Chromium
CVE-2026-14051Chromium: CVE-2026-14051 Uninitialized Use in GamepadAPIN/AEdge - Chromium
CVE-2026-14052Chromium: CVE-2026-14052 Insufficient policy enforcement in FileSystemN/AEdge - Chromium
CVE-2026-14053Chromium: CVE-2026-14053 Insufficient policy enforcement in ExtensionsN/AEdge - Chromium
CVE-2026-14054Chromium: CVE-2026-14054 Insufficient policy enforcement in NetworkN/AEdge - Chromium
CVE-2026-14055Chromium: CVE-2026-14055 Insufficient validation of untrusted input in Device TrustN/AEdge - Chromium
CVE-2026-14056Chromium: CVE-2026-14056 Insufficient validation of untrusted input in MediaN/AEdge - Chromium
CVE-2026-14057Chromium: CVE-2026-14057 Insufficient policy enforcement in FedCMN/AEdge - Chromium
CVE-2026-14058Chromium: CVE-2026-14058 Policy bypass in ParserN/AEdge - Chromium
CVE-2026-14059Chromium: CVE-2026-14059 Insufficient policy enforcement in Related-Website-SetsN/AEdge - Chromium
CVE-2026-14060Chromium: CVE-2026-14060 Insufficient validation of untrusted input in ChromotingN/AEdge - Chromium
CVE-2026-14061Chromium: CVE-2026-14061 Inappropriate implementation in DawnN/AEdge - Chromium
CVE-2026-14062Chromium: CVE-2026-14062 Inappropriate implementation in ViewsN/AEdge - Chromium
CVE-2026-14063Chromium: CVE-2026-14063 Out of bounds memory access in ChromecastN/AEdge - Chromium
CVE-2026-14064Chromium: CVE-2026-14064 Use after free in PageInfoN/AEdge - Chromium
CVE-2026-14065Chromium: CVE-2026-14065 Insufficient validation of untrusted input in PageInfoN/AEdge - Chromium
CVE-2026-14066Chromium: CVE-2026-14066 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-14067Chromium: CVE-2026-14067 Use after free in Chrome for iOSN/AEdge - Chromium
CVE-2026-14068Chromium: CVE-2026-14068 Inappropriate implementation in OmniboxN/AEdge - Chromium
CVE-2026-14069Chromium: CVE-2026-14069 Integer overflow in WebNNN/AEdge - Chromium
CVE-2026-14070Chromium: CVE-2026-14070 Uninitialized Use in WebNNN/AEdge - Chromium
CVE-2026-14071Chromium: CVE-2026-14071 Side-channel information leakage in WebAudioN/AEdge - Chromium
CVE-2026-14072Chromium: CVE-2026-14072 Incorrect security UI in SplitViewN/AEdge - Chromium
CVE-2026-14073Chromium: CVE-2026-14073 Insufficient policy enforcement in WebXRN/AEdge - Chromium
CVE-2026-14074Chromium: CVE-2026-14074 Side-channel information leakage in WebAuthenticationN/AEdge - Chromium
CVE-2026-14075Chromium: CVE-2026-14075 Policy bypass in Chrome for iOSN/AEdge - Chromium
CVE-2026-14076Chromium: CVE-2026-14076 Policy bypass in NetworkN/AEdge - Chromium
CVE-2026-14077Chromium: CVE-2026-14077 Incorrect security UI in SelectN/AEdge - Chromium
CVE-2026-14078Chromium: CVE-2026-14078 Policy bypass in WebRTCN/AEdge - Chromium
CVE-2026-14079Chromium: CVE-2026-14079 Policy bypass in NetworkN/AEdge - Chromium
CVE-2026-14080Chromium: CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcherN/AEdge - Chromium
CVE-2026-14081Chromium: CVE-2026-14081 Insufficient policy enforcement in DevToolsN/AEdge - Chromium
CVE-2026-14082Chromium: CVE-2026-14082 Race in StorageN/AEdge - Chromium
CVE-2026-14083Chromium: CVE-2026-14083 Insufficient validation of untrusted input in HTMLN/AEdge - Chromium
CVE-2026-14084Chromium: CVE-2026-14084 Insufficient validation of untrusted input in ChromotingN/AEdge - Chromium
CVE-2026-14085Chromium: CVE-2026-14085 Side-channel information leakage in CSSN/AEdge - Chromium
CVE-2026-14086Chromium: CVE-2026-14086 Insufficient policy enforcement in HIDN/AEdge - Chromium
CVE-2026-14087Chromium: CVE-2026-14087 Insufficient validation of untrusted input in WebNNN/AEdge - Chromium
CVE-2026-14088Chromium: CVE-2026-14088 Uninitialized Use in CanvasN/AEdge - Chromium
CVE-2026-14089Chromium: CVE-2026-14089 Insufficient validation of untrusted input in PopupBlockerN/AEdge - Chromium
CVE-2026-14090Chromium: CVE-2026-14090 Out of bounds read in CameraCaptureN/AEdge - Chromium
CVE-2026-14091Chromium: CVE-2026-14091 Use after free in DevToolsN/AEdge - Chromium
CVE-2026-14092Chromium: CVE-2026-14092 Insufficient policy enforcement in PrivacyN/AEdge - Chromium
CVE-2026-14093Chromium: CVE-2026-14093 Use after free in CastN/AEdge - Chromium
CVE-2026-14094Chromium: CVE-2026-14094 Use after free in InstallerN/AEdge - Chromium
CVE-2026-14095Chromium: CVE-2026-14095 Insufficient validation of untrusted input in BrowserN/AEdge - Chromium
CVE-2026-14096Chromium: CVE-2026-14096 Object lifecycle issue in InputN/AEdge - Chromium
CVE-2026-14097Chromium: CVE-2026-14097 Inappropriate implementation in WebAppInstallsN/AEdge - Chromium
CVE-2026-14098Chromium: CVE-2026-14098 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-14099Chromium: CVE-2026-14099 Use after free in Chrome for iOSN/AEdge - Chromium
CVE-2026-14100Chromium: CVE-2026-14100 Insufficient data validation in NetworkCacheN/AEdge - Chromium
CVE-2026-14101Chromium: CVE-2026-14101 Insufficient policy enforcement in SandboxN/AEdge - Chromium
CVE-2026-14102Chromium: CVE-2026-14102 Use after free in PasswordsN/AEdge - Chromium
CVE-2026-14103Chromium: CVE-2026-14103 Use after free in SSLN/AEdge - Chromium
CVE-2026-14104Chromium: CVE-2026-14104 Insufficient validation of untrusted input in WebAppInstallsN/AEdge - Chromium
CVE-2026-14105Chromium: CVE-2026-14105 Insufficient policy enforcement in SpeechN/AEdge - Chromium
CVE-2026-14106Chromium: CVE-2026-14106 Insufficient validation of untrusted input in TextN/AEdge - Chromium
CVE-2026-14107Chromium: CVE-2026-14107 Use after free in SchedulingN/AEdge - Chromium
CVE-2026-14108Chromium: CVE-2026-14108 Use after free in PDFiumN/AEdge - Chromium
CVE-2026-14109Chromium: CVE-2026-14109 Insufficient policy enforcement in MojoN/AEdge - Chromium
CVE-2026-14110Chromium: CVE-2026-14110 Inappropriate implementation in DarkModeN/AEdge - Chromium
CVE-2026-14111Chromium: CVE-2026-14111 Use after free in WebProtectN/AEdge - Chromium
CVE-2026-14112Chromium: CVE-2026-14112 Inappropriate implementation in EnterpriseN/AEdge - Chromium
CVE-2026-14113Chromium: CVE-2026-14113 Use after free in UpdaterN/AEdge - Chromium
CVE-2026-14114Chromium: CVE-2026-14114 Inappropriate implementation in WebAppInstallsN/AEdge - Chromium
CVE-2026-14115Chromium: CVE-2026-14115 Insufficient validation of untrusted input in CastN/AEdge - Chromium
CVE-2026-14116Chromium: CVE-2026-14116 Insufficient validation of untrusted input in DevToolsN/AEdge - Chromium
CVE-2026-14117Chromium: CVE-2026-14117 Insufficient validation of untrusted input in DevToolsN/AEdge - Chromium
CVE-2026-14118Chromium: CVE-2026-14118 Insufficient data validation in DevToolsN/AEdge - Chromium
CVE-2026-14119Chromium: CVE-2026-14119 Type Confusion in BluetoothN/AEdge - Chromium
CVE-2026-14120Chromium: CVE-2026-14120 Inappropriate implementation in DevToolsN/AEdge - Chromium
CVE-2026-14121Chromium: CVE-2026-14121 Use after free in ChromotingN/AEdge - Chromium
CVE-2026-14122Chromium: CVE-2026-14122 Insufficient validation of untrusted input in WebAppInstallsN/AEdge - Chromium
CVE-2026-14123Chromium: CVE-2026-14123 Incorrect security UI in Chrome for iOSN/AEdge - Chromium
CVE-2026-14124Chromium: CVE-2026-14124 Inappropriate implementation in CredentialProviderN/AEdge - Chromium
CVE-2026-14125Chromium: CVE-2026-14125 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-14126Chromium: CVE-2026-14126 Incorrect security UI in UIN/AEdge - Chromium
CVE-2026-14127Chromium: CVE-2026-14127 Inappropriate implementation in PrintingN/AEdge - Chromium
CVE-2026-14128Chromium: CVE-2026-14128 Insufficient data validation in Chrome for iOSN/AEdge - Chromium
CVE-2026-14129Chromium: CVE-2026-14129 Incorrect security UI in PreviewTabN/AEdge - Chromium
CVE-2026-14130Chromium: CVE-2026-14130 Incorrect security UI in OmniboxN/AEdge - Chromium
CVE-2026-14131Chromium: CVE-2026-14131 Insufficient validation of untrusted input in WebAppInstallsN/AEdge - Chromium
CVE-2026-14132Chromium: CVE-2026-14132 Inappropriate implementation in WebXRN/AEdge - Chromium
CVE-2026-14133Chromium: CVE-2026-14133 Race in History EmbeddingsN/AEdge - Chromium
CVE-2026-14134Chromium: CVE-2026-14134 Inappropriate implementation in AutofillN/AEdge - Chromium
CVE-2026-14135Chromium: CVE-2026-14135 Insufficient validation of untrusted input in NetworkN/AEdge - Chromium
CVE-2026-14136Chromium: CVE-2026-14136 Incorrect security UI in Chrome for iOSN/AEdge - Chromium
CVE-2026-14137Chromium: CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-14138Chromium: CVE-2026-14138 Inappropriate implementation in WebAppInstallsN/AEdge - Chromium
CVE-2026-14139Chromium: CVE-2026-14139 Inappropriate implementation in TabStripN/AEdge - Chromium
CVE-2026-14140Chromium: CVE-2026-14140 Insufficient validation of untrusted input in InputN/AEdge - Chromium
CVE-2026-14141Chromium: CVE-2026-14141 Incorrect security UI in Document Picture-in-PictureN/AEdge - Chromium
CVE-2026-14142Chromium: CVE-2026-14142 Inappropriate implementation in ExtensionsN/AEdge - Chromium
CVE-2026-14143Chromium: CVE-2026-14143 Incorrect security UI in PasswordsN/AEdge - Chromium
CVE-2026-14144Chromium: CVE-2026-14144 Incorrect security UI in ViewsN/AEdge - Chromium
CVE-2026-14145Chromium: CVE-2026-14145 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-14146Chromium: CVE-2026-14146 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-14147Chromium: CVE-2026-14147 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-14148Chromium: CVE-2026-14148 Type Confusion in CSSN/AEdge - Chromium
CVE-2026-14149Chromium: CVE-2026-14149 Use after free in AudioN/AEdge - Chromium
CVE-2026-14150Chromium: CVE-2026-14150 Insufficient validation of untrusted input in SpeechN/AEdge - Chromium
CVE-2026-14151Chromium: CVE-2026-14151 Inappropriate implementation in AIN/AEdge - Chromium
CVE-2026-14152Chromium: CVE-2026-14152 Out of bounds write in ANGLEN/AEdge - Chromium
CVE-2026-14153Chromium: CVE-2026-14153 Inappropriate implementation in GlicN/AEdge - Chromium
CVE-2026-14154Chromium: CVE-2026-14154 Inappropriate implementation in DevToolsN/AEdge - Chromium
CVE-2026-14155Chromium: CVE-2026-14155 Insufficient policy enforcement in StorageAccessAPIN/AEdge - Chromium
CVE-2026-14156Chromium: CVE-2026-14156 Policy bypass in StorageAccessAPIN/AEdge - Chromium
CVE-2026-14382Chromium: CVE-2026-14382 Insufficient validation of untrusted input in ANGLEN/AEdge - Chromium
CVE-2026-14385Chromium: CVE-2026-14385 Heap buffer overflow in ANGLEN/AEdge - Chromium
CVE-2026-14386Chromium: CVE-2026-14386 Out of bounds read in ANGLEN/AEdge - Chromium
CVE-2026-14388Chromium: CVE-2026-14388 Out of bounds read in ANGLEN/AEdge - Chromium
CVE-2026-14390Chromium: CVE-2026-14390 Use after free in ANGLEN/AEdge - Chromium
CVE-2026-14391Chromium: CVE-2026-14391 Integer overflow in ANGLEN/AEdge - Chromium
CVE-2026-14392Chromium: CVE-2026-14392 Out of bounds write in TintN/AEdge - Chromium
CVE-2026-14393Chromium: CVE-2026-14393 Use after free in V8N/AEdge - Chromium
CVE-2026-14394Chromium: CVE-2026-14394 Use after free in V8N/AEdge - Chromium
CVE-2026-14395Chromium: CVE-2026-14395 Out of bounds write in V8N/AEdge - Chromium
CVE-2026-14396Chromium: CVE-2026-14396 Out of bounds read in ANGLEN/AEdge - Chromium
CVE-2026-14397Chromium: CVE-2026-14397 Out of bounds write in ANGLEN/AEdge - Chromium
CVE-2026-14398Chromium: CVE-2026-14398 Use after free in ANGLEN/AEdge - Chromium
CVE-2026-14399Chromium: CVE-2026-14399 Uninitialized Use in DawnN/AEdge - Chromium
CVE-2026-14400Chromium: CVE-2026-14400 Out of bounds write in ANGLEN/AEdge - Chromium
CVE-2026-14401Chromium: CVE-2026-14401 Insufficient validation of untrusted input in ANGLEN/AEdge - Chromium
CVE-2026-14402Chromium: CVE-2026-14402 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-14403Chromium: CVE-2026-14403 Use after free in V8N/AEdge - Chromium
CVE-2026-14404Chromium: CVE-2026-14404 Inappropriate implementation in PDFiumN/AEdge - Chromium
CVE-2026-14405Chromium: CVE-2026-14405 Uninitialized Use in V8N/AEdge - Chromium
CVE-2026-14406Chromium: CVE-2026-14406 Out of bounds read in V8N/AEdge - Chromium
CVE-2026-14407Chromium: CVE-2026-14407 Inappropriate implementation in V8N/AEdge - Chromium
CVE-2026-14408Chromium: CVE-2026-14408 Uninitialized Use in DawnN/AEdge - Chromium
CVE-2026-14409Chromium: CVE-2026-14409 Inappropriate implementation in V8N/AEdge - Chromium
CVE-2026-14410Chromium: CVE-2026-14410 Inappropriate implementation in SkiaN/AEdge - Chromium
CVE-2026-14411Chromium: CVE-2026-14411 Insufficient validation of untrusted input in ANGLEN/AEdge - Chromium
CVE-2026-14412Chromium: CVE-2026-14412 Insufficient validation of untrusted input in ANGLEN/AEdge - Chromium
CVE-2026-14413Chromium: CVE-2026-14413 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-14414Chromium: CVE-2026-14414 Insufficient validation of untrusted input in SkiaN/AEdge - Chromium
CVE-2026-14415Chromium: CVE-2026-14415 Inappropriate implementation in V8N/AEdge - Chromium
CVE-2026-14416Chromium: CVE-2026-14416 Out of bounds read in DawnN/AEdge - Chromium
CVE-2026-14417Chromium: CVE-2026-14417 Use after free in DawnN/AEdge - Chromium
CVE-2026-14418Chromium: CVE-2026-14418 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-14419Chromium: CVE-2026-14419 Use after free in SkiaN/AEdge - Chromium
CVE-2026-14420Chromium: CVE-2026-14420 Out of bounds read and write in DawnN/AEdge - Chromium
CVE-2026-14421Chromium: CVE-2026-14421 Uninitialized Use in DawnN/AEdge - Chromium
CVE-2026-14422Chromium: CVE-2026-14422 Out of bounds read and write in TintN/AEdge - Chromium
CVE-2026-14423Chromium: CVE-2026-14423 Type Confusion in TintN/AEdge - Chromium
CVE-2026-14424Chromium: CVE-2026-14424 Use after free in DawnN/AEdge - Chromium
CVE-2026-14425Chromium: CVE-2026-14425 Use after free in ANGLEN/AEdge - Chromium
CVE-2026-14426Chromium: CVE-2026-14426 Use after free in V8N/AEdge - Chromium
CVE-2026-14427Chromium: CVE-2026-14427 Heap buffer overflow in SkiaN/AEdge - Chromium
CVE-2026-14428Chromium: CVE-2026-14428 Insufficient validation of untrusted input in DawnN/AEdge - Chromium
CVE-2026-14429Chromium: CVE-2026-14429 Insufficient validation of untrusted input in SkiaN/AEdge - Chromium
CVE-2026-14430Chromium: CVE-2026-14430 Integer overflow in V8N/AEdge - Chromium
CVE-2026-14431Chromium: CVE-2026-14431 Type Confusion in V8N/AEdge - Chromium
CVE-2026-14432Chromium: CVE-2026-14432 Use after free in V8N/AEdge - Chromium
CVE-2026-14461Out-of-bound read in mtrN/A
CVE-2026-15037XML injection vulnerability in QDom comment, CDATA and processing-instruction serializationN/A
CVE-2026-15107Chromium: CVE-2026-15107 Use after free in IndexedDBN/AEdge - Chromium
CVE-2026-15108Chromium: CVE-2026-15108 Integer overflow in Extensions APIN/AEdge - Chromium
CVE-2026-15109Chromium: CVE-2026-15109 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-15110Chromium: CVE-2026-15110 Use after free in ExtensionsN/AEdge - Chromium
CVE-2026-15111Chromium: CVE-2026-15111 Use after free in ViewsN/AEdge - Chromium
CVE-2026-15112Chromium: CVE-2026-15112 Use after free in OzoneN/AEdge - Chromium
CVE-2026-15113Chromium: CVE-2026-15113 Use after free in AutofillN/AEdge - Chromium
CVE-2026-15114Chromium: CVE-2026-15114 Out of bounds read and write in CodecsN/AEdge - Chromium
CVE-2026-15115Chromium: CVE-2026-15115 Insufficient validation of untrusted input in WebAppInstallsN/AEdge - Chromium
CVE-2026-15116Chromium: CVE-2026-15116 Use after free in ActorN/AEdge - Chromium
CVE-2026-15117Chromium: CVE-2026-15117 Use after free in PaymentsN/AEdge - Chromium
CVE-2026-15118Chromium: CVE-2026-15118 Use after free in InputN/AEdge - Chromium
CVE-2026-15119Chromium: CVE-2026-15119 Inappropriate implementation in GetUserMediaN/AEdge - Chromium
CVE-2026-15120Chromium: CVE-2026-15120 Use after free in CoreN/AEdge - Chromium
CVE-2026-15121Chromium: CVE-2026-15121 Use after free in WebRTCN/AEdge - Chromium
CVE-2026-15122Chromium: CVE-2026-15122 Insufficient validation of untrusted input in CodecsN/AEdge - Chromium
CVE-2026-15123Chromium: CVE-2026-15123 Insufficient data validation in DOMN/AEdge - Chromium
CVE-2026-15124Chromium: CVE-2026-15124 Insufficient policy enforcement in PasswordsN/AEdge - Chromium
CVE-2026-15125Chromium: CVE-2026-15125 Inappropriate implementation in FormsN/AEdge - Chromium
CVE-2026-15126Chromium: CVE-2026-15126 Use after free in FormsN/AEdge - Chromium
CVE-2026-15127Chromium: CVE-2026-15127 Inappropriate implementation in WebGLN/AEdge - Chromium
CVE-2026-15128Chromium: CVE-2026-15128 Inappropriate implementation in FormsN/AEdge - Chromium
CVE-2026-15129Chromium: CVE-2026-15129 Use after free in ViewsN/AEdge - Chromium
CVE-2026-15130Chromium: CVE-2026-15130 Insufficient policy enforcement in NavigationN/AEdge - Chromium
CVE-2026-15131Chromium: CVE-2026-15131 Insufficient data validation in NavigationN/AEdge - Chromium
CVE-2026-15132Chromium: CVE-2026-15132 Uninitialized Use in V8N/AEdge - Chromium
CVE-2026-15133Chromium: CVE-2026-15133 Use after free in InterestGroupsN/AEdge - Chromium
CVE-2026-15764Chromium: CVE-2026-15764 Use after free in OzoneN/AEdge - Chromium
CVE-2026-15765Chromium: CVE-2026-15765 Use after free in OzoneN/AEdge - Chromium
CVE-2026-15766Chromium: CVE-2026-15766 Uninitialized Use in SkiaN/AEdge - Chromium
CVE-2026-15767Chromium: CVE-2026-15767 Heap buffer overflow in libyuvN/AEdge - Chromium
CVE-2026-15768Chromium: CVE-2026-15768 Insufficient policy enforcement in HTML-in-CanvasN/AEdge - Chromium
CVE-2026-15769Chromium: CVE-2026-15769 Insufficient validation of untrusted input in Linux Toolkit ThemingN/AEdge - Chromium
CVE-2026-15770Chromium: CVE-2026-15770 Uninitialized Use in V8N/AEdge - Chromium
CVE-2026-15771Chromium: CVE-2026-15771 Insufficient validation of untrusted input in MediaN/AEdge - Chromium
CVE-2026-15772Chromium: CVE-2026-15772 Use after free in GPUN/AEdge - Chromium
CVE-2026-15773Chromium: CVE-2026-15773 Use after free in CoreN/AEdge - Chromium
CVE-2026-15774Chromium: CVE-2026-15774 Use after free in SkiaN/AEdge - Chromium
CVE-2026-15775Chromium: CVE-2026-15775 Insufficient policy enforcement in V8N/AEdge - Chromium
CVE-2026-15776Chromium: CVE-2026-15776 Type Confusion in V8N/AEdge - Chromium
CVE-2026-15777Chromium: CVE-2026-15777 Use after free in UIN/AEdge - Chromium
CVE-2026-15778Chromium: CVE-2026-15778 Insufficient validation of untrusted input in NavigationN/AEdge - Chromium
CVE-2026-15788WCOW cache mount source selector resolves NTFS junctions outside of cache rootN/A
CVE-2026-15899Chromium: CVE-2026-15899 Use after free in CameraCaptureN/AEdge - Chromium
CVE-2026-15900Chromium: CVE-2026-15900 Use after free in GPUN/AEdge - Chromium
CVE-2026-15901Chromium: CVE-2026-15901 Use after free in NetworkN/AEdge - Chromium
CVE-2026-15902Chromium: CVE-2026-15902 Use after free in CastN/AEdge - Chromium
CVE-2026-15903Chromium: CVE-2026-15903 Out of bounds read and write in V8N/AEdge - Chromium
CVE-2026-15904Chromium: CVE-2026-15904 Use after free in OzoneN/AEdge - Chromium
CVE-2026-15905Chromium: CVE-2026-15905 Use after free in AuraN/AEdge - Chromium
CVE-2026-16413Chromium: CVE-2026-16413 Out of bounds write in ANGLEN/AEdge - Chromium
CVE-2026-16414Chromium: CVE-2026-16414 Insufficient validation of untrusted input in ChromecastN/AEdge - Chromium
CVE-2026-16415Chromium: CVE-2026-16415 Insufficient validation of untrusted input in ExtensionsN/AEdge - Chromium
CVE-2026-16416Chromium: CVE-2026-16416 Integer overflow in ChromecastN/AEdge - Chromium
CVE-2026-16417Chromium: CVE-2026-16417 Uninitialized Use in SkiaN/AEdge - Chromium
CVE-2026-16418Chromium: CVE-2026-16418 Stack buffer overflow in V8N/AEdge - Chromium
CVE-2026-16419Chromium: CVE-2026-16419 Out of bounds read and write in ANGLEN/AEdge - Chromium
CVE-2026-16420Chromium: CVE-2026-16420 Type Confusion in WebAudioN/AEdge - Chromium
CVE-2026-16421Chromium: CVE-2026-16421 Inappropriate implementation in WebAudioN/AEdge - Chromium
CVE-2026-16422Chromium: CVE-2026-16422 Insufficient validation of untrusted input in CertificateN/AEdge - Chromium
CVE-2026-16423Chromium: CVE-2026-16423 Use after free in UIN/AEdge - Chromium
CVE-2026-16424Chromium: CVE-2026-16424 Use after free in GPUN/AEdge - Chromium
CVE-2026-16554Integer Overflow Leading to Heap Buffer Overflow in cJSONN/A
CVE-2026-16804Chromium: CVE-2026-16804 Use after free in InputN/AEdge - Chromium
CVE-2026-16805Chromium: CVE-2026-16805 Use after free in BlinkN/AEdge - Chromium
CVE-2026-16806Chromium: CVE-2026-16806 Use after free in WebMCPN/AEdge - Chromium
CVE-2026-16807Chromium: CVE-2026-16807 Out of bounds write in CodecsN/AEdge - Chromium
CVE-2026-17650Chromium: CVE-2026-17650 Use after free in CompositingN/AEdge - Chromium
CVE-2026-17651Chromium: CVE-2026-17651 Insufficient validation of untrusted input in DawnN/AEdge - Chromium
CVE-2026-17652Chromium: CVE-2026-17652 Use after free in ViewsN/AEdge - Chromium
CVE-2026-17653Chromium: CVE-2026-17653 Use after free in SkiaN/AEdge - Chromium
CVE-2026-17654Chromium: CVE-2026-17654 Race in UpdaterN/AEdge - Chromium
CVE-2026-17655Chromium: CVE-2026-17655 Insufficient validation of untrusted input in ANGLEN/AEdge - Chromium
CVE-2026-17656Chromium: CVE-2026-17656 Use after free in OzoneN/AEdge - Chromium
CVE-2026-17657Chromium: CVE-2026-17657 Use after free in NavigationN/AEdge - Chromium
CVE-2026-17658Chromium: CVE-2026-17658 Use after free in V8N/AEdge - Chromium
CVE-2026-17659Chromium: CVE-2026-17659 Inappropriate implementation in SiteIsolationN/AEdge - Chromium
CVE-2026-17660Chromium: CVE-2026-17660 Insufficient validation of untrusted input in NetworkN/AEdge - Chromium
CVE-2026-17661Chromium: CVE-2026-17661 Use after free in LoaderN/AEdge - Chromium
CVE-2026-17662Chromium: CVE-2026-17662 Insufficient policy enforcement in PrefetchN/AEdge - Chromium
CVE-2026-17663Chromium: CVE-2026-17663 Insufficient validation of untrusted input in GPUN/AEdge - Chromium
CVE-2026-17664Chromium: CVE-2026-17664 Insufficient validation of untrusted input in LoaderN/AEdge - Chromium
CVE-2026-17665Chromium: CVE-2026-17665 Use after free in V8N/AEdge - Chromium
CVE-2026-17666Chromium: CVE-2026-17666 Cryptographic Flaw in EnterpriseN/AEdge - Chromium
CVE-2026-17667Chromium: CVE-2026-17667 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-17668Chromium: CVE-2026-17668 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-17669Chromium: CVE-2026-17669 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17670Chromium: CVE-2026-17670 Use after free in ViewsN/AEdge - Chromium
CVE-2026-17671Chromium: CVE-2026-17671 Insufficient validation of untrusted input in ANGLEN/AEdge - Chromium
CVE-2026-17672Chromium: CVE-2026-17672 Insufficient validation of untrusted input in ChromecastN/AEdge - Chromium
CVE-2026-17673Chromium: CVE-2026-17673 Integer overflow in QUICN/AEdge - Chromium
CVE-2026-17674Chromium: CVE-2026-17674 Inappropriate implementation in HTMLN/AEdge - Chromium
CVE-2026-17675Chromium: CVE-2026-17675 Out of bounds write in ANGLEN/AEdge - Chromium
CVE-2026-17676Chromium: CVE-2026-17676 Inappropriate implementation in ANGLEN/AEdge - Chromium
CVE-2026-17677Chromium: CVE-2026-17677 Inappropriate implementation in ANGLEN/AEdge - Chromium
CVE-2026-17678Chromium: CVE-2026-17678 Out of bounds read in ANGLEN/AEdge - Chromium
CVE-2026-17679Chromium: CVE-2026-17679 Insufficient validation of untrusted input in Print PreviewN/AEdge - Chromium
CVE-2026-17680Chromium: CVE-2026-17680 Heap buffer overflow in ColorN/AEdge - Chromium
CVE-2026-17681Chromium: CVE-2026-17681 Insufficient validation of untrusted input in Web AuthenticationN/AEdge - Chromium
CVE-2026-17682Chromium: CVE-2026-17682 Integer overflow in ANGLEN/AEdge - Chromium
CVE-2026-17683Chromium: CVE-2026-17683 Inappropriate implementation in ANGLEN/AEdge - Chromium
CVE-2026-17684Chromium: CVE-2026-17684 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-17685Chromium: CVE-2026-17685 Use after free in AutofillN/AEdge - Chromium
CVE-2026-17686Chromium: CVE-2026-17686 Insufficient validation of untrusted input in PasswordsN/AEdge - Chromium
CVE-2026-17687Chromium: CVE-2026-17687 Type Confusion in ANGLEN/AEdge - Chromium
CVE-2026-17688Chromium: CVE-2026-17688 Use after free in InputN/AEdge - Chromium
CVE-2026-17689Chromium: CVE-2026-17689 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-17690Chromium: CVE-2026-17690 Insufficient validation of untrusted input in PDFN/AEdge - Chromium
CVE-2026-17691Chromium: CVE-2026-17691 Out of bounds write in ANGLEN/AEdge - Chromium
CVE-2026-17692Chromium: CVE-2026-17692 Use after free in DataTransferN/AEdge - Chromium
CVE-2026-17693Chromium: CVE-2026-17693 Inappropriate implementation in FileSystemN/AEdge - Chromium
CVE-2026-17694Chromium: CVE-2026-17694 Use after free in DOMN/AEdge - Chromium
CVE-2026-17695Chromium: CVE-2026-17695 Inappropriate implementation in ANGLEN/AEdge - Chromium
CVE-2026-17696Chromium: CVE-2026-17696 Side-channel information leakage in MediaN/AEdge - Chromium
CVE-2026-17697Chromium: CVE-2026-17697 Type Confusion in ANGLEN/AEdge - Chromium
CVE-2026-17698Chromium: CVE-2026-17698 Insufficient validation of untrusted input in UIN/AEdge - Chromium
CVE-2026-17699Chromium: CVE-2026-17699 Use after free in ViewsN/AEdge - Chromium
CVE-2026-17700Chromium: CVE-2026-17700 Insufficient validation of untrusted input in ActorN/AEdge - Chromium
CVE-2026-17701Chromium: CVE-2026-17701 Out of bounds read in ANGLEN/AEdge - Chromium
CVE-2026-17702Chromium: CVE-2026-17702 Inappropriate implementation in SkiaN/AEdge - Chromium
CVE-2026-17703Chromium: CVE-2026-17703 Policy bypass in Chrome for iOSN/AEdge - Chromium
CVE-2026-17704Chromium: CVE-2026-17704 Use after free in ANGLEN/AEdge - Chromium
CVE-2026-17705Chromium: CVE-2026-17705 Integer overflow in libxmlN/AEdge - Chromium
CVE-2026-17706Chromium: CVE-2026-17706 Insufficient validation of untrusted input in MediaN/AEdge - Chromium
CVE-2026-17707Chromium: CVE-2026-17707 Uninitialized Use in MediaN/AEdge - Chromium
CVE-2026-17708Chromium: CVE-2026-17708 Use after free in AudioN/AEdge - Chromium
CVE-2026-17709Chromium: CVE-2026-17709 Race in DownloadsN/AEdge - Chromium
CVE-2026-17710Chromium: CVE-2026-17710 Inappropriate implementation in MHTMLN/AEdge - Chromium
CVE-2026-17711Chromium: CVE-2026-17711 Race in DownloadsN/AEdge - Chromium
CVE-2026-17712Chromium: CVE-2026-17712 Race in SkiaN/AEdge - Chromium
CVE-2026-17713Chromium: CVE-2026-17713 Insufficient validation of untrusted input in AccessibilityN/AEdge - Chromium
CVE-2026-17714Chromium: CVE-2026-17714 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-17715Chromium: CVE-2026-17715 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-17716Chromium: CVE-2026-17716 Use after free in UpdaterN/AEdge - Chromium
CVE-2026-17717Chromium: CVE-2026-17717 Integer overflow in ANGLEN/AEdge - Chromium
CVE-2026-17718Chromium: CVE-2026-17718 Use after free in ANGLEN/AEdge - Chromium
CVE-2026-17719Chromium: CVE-2026-17719 Use after free in InputN/AEdge - Chromium
CVE-2026-17720Chromium: CVE-2026-17720 Insufficient policy enforcement in PasswordsN/AEdge - Chromium
CVE-2026-17721Chromium: CVE-2026-17721 Out of bounds write in ANGLEN/AEdge - Chromium
CVE-2026-17722Chromium: CVE-2026-17722 Object lifecycle issue in WebViewN/AEdge - Chromium
CVE-2026-17723Chromium: CVE-2026-17723 Use after free in MediaN/AEdge - Chromium
CVE-2026-17724Chromium: CVE-2026-17724 Race in Chrome for iOSN/AEdge - Chromium
CVE-2026-17725Chromium: CVE-2026-17725 Type Confusion in V8N/AEdge - Chromium
CVE-2026-17726Chromium: CVE-2026-17726 Integer overflow in WebGLN/AEdge - Chromium
CVE-2026-17727Chromium: CVE-2026-17727 Out of bounds write in WebGLN/AEdge - Chromium
CVE-2026-17728Chromium: CVE-2026-17728 Inappropriate implementation in ExtensionsN/AEdge - Chromium
CVE-2026-17729Chromium: CVE-2026-17729 Use after free in V8N/AEdge - Chromium
CVE-2026-17730Chromium: CVE-2026-17730 Side-channel information leakage in AutofillN/AEdge - Chromium
CVE-2026-17731Chromium: CVE-2026-17731 Inappropriate implementation in AutofillN/AEdge - Chromium
CVE-2026-17732Chromium: CVE-2026-17732 Inappropriate implementation in SVGN/AEdge - Chromium
CVE-2026-17733Chromium: CVE-2026-17733 Inappropriate implementation in QUICN/AEdge - Chromium
CVE-2026-17734Chromium: CVE-2026-17734 Inappropriate implementation in AutofillN/AEdge - Chromium
CVE-2026-17735Chromium: CVE-2026-17735 Insufficient validation of untrusted input in BFCacheN/AEdge - Chromium
CVE-2026-17736Chromium: CVE-2026-17736 Insufficient validation of untrusted input in WebViewN/AEdge - Chromium
CVE-2026-17737Chromium: CVE-2026-17737 Use after free in BluetoothN/AEdge - Chromium
CVE-2026-17738Chromium: CVE-2026-17738 Insufficient validation of untrusted input in PaymentsN/AEdge - Chromium
CVE-2026-17739Chromium: CVE-2026-17739 Insufficient policy enforcement in ExtensionsN/AEdge - Chromium
CVE-2026-17740Chromium: CVE-2026-17740 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-17741Chromium: CVE-2026-17741 Insufficient validation of untrusted input in WebViewN/AEdge - Chromium
CVE-2026-17742Chromium: CVE-2026-17742 Insufficient policy enforcement in PaymentsN/AEdge - Chromium
CVE-2026-17743Chromium: CVE-2026-17743 Insufficient policy enforcement in ControlledFrameN/AEdge - Chromium
CVE-2026-17744Chromium: CVE-2026-17744 Inappropriate implementation in File InputN/AEdge - Chromium
CVE-2026-17745Chromium: CVE-2026-17745 Out of bounds read in SkiaN/AEdge - Chromium
CVE-2026-17746Chromium: CVE-2026-17746 Use after free in GPUN/AEdge - Chromium
CVE-2026-17747Chromium: CVE-2026-17747 Insufficient validation of untrusted input in PaymentsN/AEdge - Chromium
CVE-2026-17748Chromium: CVE-2026-17748 Inappropriate implementation in ExtensionsN/AEdge - Chromium
CVE-2026-17749Chromium: CVE-2026-17749 Insufficient validation of untrusted input in ExtensionsN/AEdge - Chromium
CVE-2026-17750Chromium: CVE-2026-17750 Use after free in ANGLEN/AEdge - Chromium
CVE-2026-17751Chromium: CVE-2026-17751 Inappropriate implementation in AdFilterN/AEdge - Chromium
CVE-2026-17752Chromium: CVE-2026-17752 Use after free in ViewsN/AEdge - Chromium
CVE-2026-17753Chromium: CVE-2026-17753 Inappropriate implementation in AutofillN/AEdge - Chromium
CVE-2026-17754Chromium: CVE-2026-17754 Inappropriate implementation in BlinkN/AEdge - Chromium
CVE-2026-17755Chromium: CVE-2026-17755 Incorrect security UI in ExtensionsN/AEdge - Chromium
CVE-2026-17756Chromium: CVE-2026-17756 Insufficient policy enforcement in PresentationN/AEdge - Chromium
CVE-2026-17757Chromium: CVE-2026-17757 Uninitialized Use in SkiaN/AEdge - Chromium
CVE-2026-17758Chromium: CVE-2026-17758 Heap buffer overflow in DawnN/AEdge - Chromium
CVE-2026-17759Chromium: CVE-2026-17759 Uninitialized Use in CodecsN/AEdge - Chromium
CVE-2026-17760Chromium: CVE-2026-17760 Side-channel information leakage in NoStatePrefetchN/AEdge - Chromium
CVE-2026-17761Chromium: CVE-2026-17761 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-17762Chromium: CVE-2026-17762 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17763Chromium: CVE-2026-17763 Inappropriate implementation in GPUN/AEdge - Chromium
CVE-2026-17764Chromium: CVE-2026-17764 Inappropriate implementation in FedCMN/AEdge - Chromium
CVE-2026-17765Chromium: CVE-2026-17765 Inappropriate implementation in WebProtectN/AEdge - Chromium
CVE-2026-17766Chromium: CVE-2026-17766 Insufficient validation of untrusted input in ClipboardN/AEdge - Chromium
CVE-2026-17767Chromium: CVE-2026-17767 Insufficient validation of untrusted input in WebViewN/AEdge - Chromium
CVE-2026-17768Chromium: CVE-2026-17768 Insufficient validation of untrusted input in WebSocketsN/AEdge - Chromium
CVE-2026-17769Chromium: CVE-2026-17769 Insufficient validation of untrusted input in CastN/AEdge - Chromium
CVE-2026-17770Chromium: CVE-2026-17770 Out of bounds read in MediaN/AEdge - Chromium
CVE-2026-17771Chromium: CVE-2026-17771 Uninitialized Use in SkiaN/AEdge - Chromium
CVE-2026-17772Chromium: CVE-2026-17772 Out of bounds read in WebGLN/AEdge - Chromium
CVE-2026-17773Chromium: CVE-2026-17773 Insufficient validation of untrusted input in CastN/AEdge - Chromium
CVE-2026-17774Chromium: CVE-2026-17774 Insufficient validation of untrusted input in VariationsN/AEdge - Chromium
CVE-2026-17775Chromium: CVE-2026-17775 Inappropriate implementation in PresentationAPIN/AEdge - Chromium
CVE-2026-17776Chromium: CVE-2026-17776 Policy bypass in ReceiverN/AEdge - Chromium
CVE-2026-17777Chromium: CVE-2026-17777 Inappropriate implementation in AutofillN/AEdge - Chromium
CVE-2026-17778Chromium: CVE-2026-17778 Use after free in ExtensionsN/AEdge - Chromium
CVE-2026-17779Chromium: CVE-2026-17779 Inappropriate implementation in Site IsolationN/AEdge - Chromium
CVE-2026-17780Chromium: CVE-2026-17780 Inappropriate implementation in Isolated Web AppsN/AEdge - Chromium
CVE-2026-17781Chromium: CVE-2026-17781 Inappropriate implementation in ExtensionsN/AEdge - Chromium
CVE-2026-17782Chromium: CVE-2026-17782 Incorrect security UI in Chrome for iOSN/AEdge - Chromium
CVE-2026-17783Chromium: CVE-2026-17783 Inappropriate implementation in LoaderN/AEdge - Chromium
CVE-2026-17784Chromium: CVE-2026-17784 Use after free in AudioN/AEdge - Chromium
CVE-2026-17785Chromium: CVE-2026-17785 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-17786Chromium: CVE-2026-17786 Insufficient validation of untrusted input in DevToolsN/AEdge - Chromium
CVE-2026-17787Chromium: CVE-2026-17787 Inappropriate implementation in DevToolsN/AEdge - Chromium
CVE-2026-17788Chromium: CVE-2026-17788 Inappropriate implementation in BlinkN/AEdge - Chromium
CVE-2026-17789Chromium: CVE-2026-17789 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-17790Chromium: CVE-2026-17790 Uninitialized Use in ANGLEN/AEdge - Chromium
CVE-2026-17791Chromium: CVE-2026-17791 Insufficient validation of untrusted input in PaymentsN/AEdge - Chromium
CVE-2026-17792Chromium: CVE-2026-17792 Inappropriate implementation in Credential ManagementN/AEdge - Chromium
CVE-2026-17793Chromium: CVE-2026-17793 Inappropriate implementation in MessagesN/AEdge - Chromium
CVE-2026-17794Chromium: CVE-2026-17794 Insufficient validation of untrusted input in MobileN/AEdge - Chromium
CVE-2026-17795Chromium: CVE-2026-17795 Insufficient validation of untrusted input in GetUserMediaN/AEdge - Chromium
CVE-2026-17796Chromium: CVE-2026-17796 Side-channel information leakage in WebXRN/AEdge - Chromium
CVE-2026-17797Chromium: CVE-2026-17797 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-17798Chromium: CVE-2026-17798 Inappropriate implementation in CastN/AEdge - Chromium
CVE-2026-17799Chromium: CVE-2026-17799 Insufficient validation of untrusted input in Safe BrowsingN/AEdge - Chromium
CVE-2026-17800Chromium: CVE-2026-17800 Side-channel information leakage in MediaRecordingN/AEdge - Chromium
CVE-2026-17801Chromium: CVE-2026-17801 Out of bounds memory access in ANGLEN/AEdge - Chromium
CVE-2026-17802Chromium: CVE-2026-17802 Side-channel information leakage in GPUN/AEdge - Chromium
CVE-2026-17803Chromium: CVE-2026-17803 Insufficient validation of untrusted input in Save to DriveN/AEdge - Chromium
CVE-2026-17804Chromium: CVE-2026-17804 Use after free in MediaN/AEdge - Chromium
CVE-2026-17805Chromium: CVE-2026-17805 Insufficient policy enforcement in GlicN/AEdge - Chromium
CVE-2026-17806Chromium: CVE-2026-17806 Insufficient validation of untrusted input in ExtensionsN/AEdge - Chromium
CVE-2026-17807Chromium: CVE-2026-17807 Use after free in V8N/AEdge - Chromium
CVE-2026-17808Chromium: CVE-2026-17808 Uninitialized Use in WebGLN/AEdge - Chromium
CVE-2026-17809Chromium: CVE-2026-17809 Insufficient validation of untrusted input in ExtensionsN/AEdge - Chromium
CVE-2026-17810Chromium: CVE-2026-17810 Uninitialized Use in DawnN/AEdge - Chromium
CVE-2026-17811Chromium: CVE-2026-17811 Use after free in ANGLEN/AEdge - Chromium
CVE-2026-17812Chromium: CVE-2026-17812 Inappropriate implementation in DigitalCredentialsN/AEdge - Chromium
CVE-2026-17813Chromium: CVE-2026-17813 Insufficient policy enforcement in Chrome for iOSN/AEdge - Chromium
CVE-2026-17814Chromium: CVE-2026-17814 Insufficient validation of untrusted input in Chrome for iOSN/AEdge - Chromium
CVE-2026-17815Chromium: CVE-2026-17815 Insufficient policy enforcement in GuestViewN/AEdge - Chromium
CVE-2026-17816Chromium: CVE-2026-17816 Inappropriate implementation in SpeechN/AEdge - Chromium
CVE-2026-17817Chromium: CVE-2026-17817 Inappropriate implementation in ReportingAndNELN/AEdge - Chromium
CVE-2026-17818Chromium: CVE-2026-17818 Inappropriate implementation in NetworkN/AEdge - Chromium
CVE-2026-17819Chromium: CVE-2026-17819 Inappropriate implementation in WebAppInstallsN/AEdge - Chromium
CVE-2026-17820Chromium: CVE-2026-17820 Insufficient policy enforcement in AutofillN/AEdge - Chromium
CVE-2026-17821Chromium: CVE-2026-17821 Insufficient policy enforcement in ExtensionsN/AEdge - Chromium
CVE-2026-17822Chromium: CVE-2026-17822 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17823Chromium: CVE-2026-17823 Insufficient policy enforcement in WebXRN/AEdge - Chromium
CVE-2026-17824Chromium: CVE-2026-17824 Insufficient policy enforcement in ServiceWorkerN/AEdge - Chromium
CVE-2026-17825Chromium: CVE-2026-17825 Insufficient policy enforcement in PasswordsN/AEdge - Chromium
CVE-2026-17826Chromium: CVE-2026-17826 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17827Chromium: CVE-2026-17827 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-17828Chromium: CVE-2026-17828 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17829Chromium: CVE-2026-17829 Insufficient policy enforcement in PasswordsN/AEdge - Chromium
CVE-2026-17830Chromium: CVE-2026-17830 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17831Chromium: CVE-2026-17831 Insufficient validation of untrusted input in PasswordsN/AEdge - Chromium
CVE-2026-17832Chromium: CVE-2026-17832 Use after free in ANGLEN/AEdge - Chromium
CVE-2026-17833Chromium: CVE-2026-17833 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-17834Chromium: CVE-2026-17834 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-17835Chromium: CVE-2026-17835 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17836Chromium: CVE-2026-17836 Use after free in V8N/AEdge - Chromium
CVE-2026-17837Chromium: CVE-2026-17837 Insufficient validation of untrusted input in DevToolsN/AEdge - Chromium
CVE-2026-17838Chromium: CVE-2026-17838 Incorrect security UI in Chrome for iOSN/AEdge - Chromium
CVE-2026-17839Chromium: CVE-2026-17839 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17840Chromium: CVE-2026-17840 Incorrect security UI in PasswordsN/AEdge - Chromium
CVE-2026-17841Chromium: CVE-2026-17841 Race in Chrome for iOSN/AEdge - Chromium
CVE-2026-17842Chromium: CVE-2026-17842 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17843Chromium: CVE-2026-17843 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-17844Chromium: CVE-2026-17844 Insufficient validation of untrusted input in CastN/AEdge - Chromium
CVE-2026-17845Chromium: CVE-2026-17845 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-17846Chromium: CVE-2026-17846 Inappropriate implementation in MediaN/AEdge - Chromium
CVE-2026-17847Chromium: CVE-2026-17847 Insufficient validation of untrusted input in ANGLEN/AEdge - Chromium
CVE-2026-17848Chromium: CVE-2026-17848 Insufficient validation of untrusted input in CodecsN/AEdge - Chromium
CVE-2026-17849Chromium: CVE-2026-17849 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17850Chromium: CVE-2026-17850 Inappropriate implementation in PermissionsN/AEdge - Chromium
CVE-2026-17851Chromium: CVE-2026-17851 Side-channel information leakage in AutofillN/AEdge - Chromium
CVE-2026-17852Chromium: CVE-2026-17852 Inappropriate implementation in Media RouterN/AEdge - Chromium
CVE-2026-17853Chromium: CVE-2026-17853 Inappropriate implementation in DevToolsN/AEdge - Chromium
CVE-2026-17854Chromium: CVE-2026-17854 Insufficient policy enforcement in WebMCPN/AEdge - Chromium
CVE-2026-17855Chromium: CVE-2026-17855 Race in DevToolsN/AEdge - Chromium
CVE-2026-17856Chromium: CVE-2026-17856 Inappropriate implementation in NetworkN/AEdge - Chromium
CVE-2026-17857Chromium: CVE-2026-17857 Inappropriate implementation in NetworkN/AEdge - Chromium
CVE-2026-17858Chromium: CVE-2026-17858 Uninitialized Use in WebNNN/AEdge - Chromium
CVE-2026-17859Chromium: CVE-2026-17859 Side-channel information leakage in FaviconsN/AEdge - Chromium
CVE-2026-17860Chromium: CVE-2026-17860 Insufficient validation of untrusted input in MobileN/AEdge - Chromium
CVE-2026-17861Chromium: CVE-2026-17861 Insufficient validation of untrusted input in UpdaterN/AEdge - Chromium
CVE-2026-17862Chromium: CVE-2026-17862 Use after free in TracingN/AEdge - Chromium
CVE-2026-17863Chromium: CVE-2026-17863 Inappropriate implementation in BrowserN/AEdge - Chromium
CVE-2026-17864Chromium: CVE-2026-17864 Inappropriate implementation in UpdaterN/AEdge - Chromium
CVE-2026-17865Chromium: CVE-2026-17865 Inappropriate implementation in CryptoN/AEdge - Chromium
CVE-2026-17866Chromium: CVE-2026-17866 Type Confusion in TabN/AEdge - Chromium
CVE-2026-17867Chromium: CVE-2026-17867 Insufficient validation of untrusted input in DawnN/AEdge - Chromium
CVE-2026-17868Chromium: CVE-2026-17868 Insufficient policy enforcement in USBN/AEdge - Chromium
CVE-2026-17869Chromium: CVE-2026-17869 Out of bounds read in WebXRN/AEdge - Chromium
CVE-2026-17870Chromium: CVE-2026-17870 Insufficient validation of untrusted input in CastN/AEdge - Chromium
CVE-2026-17871Chromium: CVE-2026-17871 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-17872Chromium: CVE-2026-17872 Cryptographic Flaw in WebAppInstallsN/AEdge - Chromium
CVE-2026-17873Chromium: CVE-2026-17873 Insufficient policy enforcement in Chrome for iOSN/AEdge - Chromium
CVE-2026-17874Chromium: CVE-2026-17874 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17875Chromium: CVE-2026-17875 Use after free in PDFiumN/AEdge - Chromium
CVE-2026-17876Chromium: CVE-2026-17876 Inappropriate implementation in PaymentsN/AEdge - Chromium
CVE-2026-17877Chromium: CVE-2026-17877 Inappropriate implementation in ChromotingN/AEdge - Chromium
CVE-2026-17878Chromium: CVE-2026-17878 Inappropriate implementation in CSSN/AEdge - Chromium
CVE-2026-17879Chromium: CVE-2026-17879 Inappropriate implementation in AutofillN/AEdge - Chromium
CVE-2026-17880Chromium: CVE-2026-17880 Inappropriate implementation in AutofillN/AEdge - Chromium
CVE-2026-17881Chromium: CVE-2026-17881 Use after free in WebXRN/AEdge - Chromium
CVE-2026-17882Chromium: CVE-2026-17882 Policy bypass in ExtensionsN/AEdge - Chromium
CVE-2026-17883Chromium: CVE-2026-17883 Inappropriate implementation in HeadlessN/AEdge - Chromium
CVE-2026-17884Chromium: CVE-2026-17884 Object lifecycle issue in WebRTCN/AEdge - Chromium
CVE-2026-17885Chromium: CVE-2026-17885 Inappropriate implementation in PaintN/AEdge - Chromium
CVE-2026-17886Chromium: CVE-2026-17886 Use after free in EnterpriseN/AEdge - Chromium
CVE-2026-17887Chromium: CVE-2026-17887 Use after free in TabStripN/AEdge - Chromium
CVE-2026-17888Chromium: CVE-2026-17888 Insufficient validation of untrusted input in WebUIN/AEdge - Chromium
CVE-2026-17889Chromium: CVE-2026-17889 Uninitialized Use in WebXRN/AEdge - Chromium
CVE-2026-17890Chromium: CVE-2026-17890 Insufficient validation of untrusted input in DevToolsN/AEdge - Chromium
CVE-2026-17891Chromium: CVE-2026-17891 Use after free in ANGLEN/AEdge - Chromium
CVE-2026-17892Chromium: CVE-2026-17892 Inappropriate implementation in WebXRN/AEdge - Chromium
CVE-2026-17893Chromium: CVE-2026-17893 Insufficient validation of untrusted input in UpdaterN/AEdge - Chromium
CVE-2026-17894Chromium: CVE-2026-17894 Use after free in ViewsN/AEdge - Chromium
CVE-2026-17895Chromium: CVE-2026-17895 Inappropriate implementation in DataTransferN/AEdge - Chromium
CVE-2026-17896Chromium: CVE-2026-17896 Use after free in DevToolsN/AEdge - Chromium
CVE-2026-17897Chromium: CVE-2026-17897 Inappropriate implementation in ORBN/AEdge - Chromium
CVE-2026-17898Chromium: CVE-2026-17898 Use after free in DevToolsN/AEdge - Chromium
CVE-2026-17899Chromium: CVE-2026-17899 Insufficient policy enforcement in DevToolsN/AEdge - Chromium
CVE-2026-17900Chromium: CVE-2026-17900 Inappropriate implementation in EnterpriseN/AEdge - Chromium
CVE-2026-17901Chromium: CVE-2026-17901 Inappropriate implementation in SharingN/AEdge - Chromium
CVE-2026-17902Chromium: CVE-2026-17902 Inappropriate implementation in EditingN/AEdge - Chromium
CVE-2026-17903Chromium: CVE-2026-17903 Insufficient policy enforcement in ChromecastN/AEdge - Chromium
CVE-2026-17904Chromium: CVE-2026-17904 Insufficient policy enforcement in NFCN/AEdge - Chromium
CVE-2026-17905Chromium: CVE-2026-17905 Inappropriate implementation in SurfaceCaptureN/AEdge - Chromium
CVE-2026-17906Chromium: CVE-2026-17906 Insufficient validation of untrusted input in BluetoothN/AEdge - Chromium
CVE-2026-17907Chromium: CVE-2026-17907 Side-channel information leakage in NetworkN/AEdge - Chromium
CVE-2026-17908Chromium: CVE-2026-17908 Insufficient validation of untrusted input in PrintingN/AEdge - Chromium
CVE-2026-17909Chromium: CVE-2026-17909 Insufficient validation of untrusted input in Isolated Web AppsN/AEdge - Chromium
CVE-2026-17910Chromium: CVE-2026-17910 Insufficient policy enforcement in NFCN/AEdge - Chromium
CVE-2026-17911Chromium: CVE-2026-17911 Insufficient policy enforcement in SVGN/AEdge - Chromium
CVE-2026-17912Chromium: CVE-2026-17912 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17913Chromium: CVE-2026-17913 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17914Chromium: CVE-2026-17914 Side-channel information leakage in SkiaN/AEdge - Chromium
CVE-2026-17915Chromium: CVE-2026-17915 Inappropriate implementation in WebViewN/AEdge - Chromium
CVE-2026-17916Chromium: CVE-2026-17916 Insufficient policy enforcement in SettingsN/AEdge - Chromium
CVE-2026-17917Chromium: CVE-2026-17917 Policy bypass in Chrome for iOSN/AEdge - Chromium
CVE-2026-17918Chromium: CVE-2026-17918 Use after free in SyncN/AEdge - Chromium
CVE-2026-17919Chromium: CVE-2026-17919 Insufficient policy enforcement in EnterpriseN/AEdge - Chromium
CVE-2026-17920Chromium: CVE-2026-17920 Use after free in V8N/AEdge - Chromium
CVE-2026-17921Chromium: CVE-2026-17921 Insufficient validation of untrusted input in NavigationN/AEdge - Chromium
CVE-2026-17922Chromium: CVE-2026-17922 Inappropriate implementation in EnterpriseN/AEdge - Chromium
CVE-2026-17923Chromium: CVE-2026-17923 Policy bypass in EnterpriseN/AEdge - Chromium
CVE-2026-17924Chromium: CVE-2026-17924 Use after free in DNSN/AEdge - Chromium
CVE-2026-17925Chromium: CVE-2026-17925 Inappropriate implementation in CastN/AEdge - Chromium
CVE-2026-17926Chromium: CVE-2026-17926 Insufficient validation of untrusted input in DevToolsN/AEdge - Chromium
CVE-2026-17927Chromium: CVE-2026-17927 Insufficient policy enforcement in DevToolsN/AEdge - Chromium
CVE-2026-17928Chromium: CVE-2026-17928 Inappropriate implementation in DataTransferN/AEdge - Chromium
CVE-2026-17929Chromium: CVE-2026-17929 Insufficient validation of untrusted input in DevToolsN/AEdge - Chromium
CVE-2026-17930Chromium: CVE-2026-17930 Insufficient validation of untrusted input in ExtensionsN/AEdge - Chromium
CVE-2026-17931Chromium: CVE-2026-17931 Inappropriate implementation in DevToolsN/AEdge - Chromium
CVE-2026-17932Chromium: CVE-2026-17932 Use after free in DataTransferN/AEdge - Chromium
CVE-2026-17933Chromium: CVE-2026-17933 Inappropriate implementation in DOMStorageN/AEdge - Chromium
CVE-2026-17934Chromium: CVE-2026-17934 Insufficient validation of untrusted input in DevToolsN/AEdge - Chromium
CVE-2026-17935Chromium: CVE-2026-17935 Heap buffer overflow in CodecsN/AEdge - Chromium
CVE-2026-17936Chromium: CVE-2026-17936 Inappropriate implementation in DevToolsN/AEdge - Chromium
CVE-2026-17937Chromium: CVE-2026-17937 Inappropriate implementation in DevToolsN/AEdge - Chromium
CVE-2026-17938Chromium: CVE-2026-17938 Inappropriate implementation in FullScreenN/AEdge - Chromium
CVE-2026-17939Chromium: CVE-2026-17939 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-17940Chromium: CVE-2026-17940 Insufficient validation of untrusted input in Picture-in-PictureN/AEdge - Chromium
CVE-2026-17941Chromium: CVE-2026-17941 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17942Chromium: CVE-2026-17942 Side-channel information leakage in SVGN/AEdge - Chromium
CVE-2026-17943Chromium: CVE-2026-17943 Inappropriate implementation in ParserN/AEdge - Chromium
CVE-2026-17944Chromium: CVE-2026-17944 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17945Chromium: CVE-2026-17945 Inappropriate implementation in NavigationN/AEdge - Chromium
CVE-2026-17946Chromium: CVE-2026-17946 Uninitialized Use in DawnN/AEdge - Chromium
CVE-2026-17947Chromium: CVE-2026-17947 Use after free in WebSocketsN/AEdge - Chromium
CVE-2026-17948Chromium: CVE-2026-17948 Type Confusion in V8N/AEdge - Chromium
CVE-2026-17949Chromium: CVE-2026-17949 Uninitialized Use in GPUN/AEdge - Chromium
CVE-2026-17950Chromium: CVE-2026-17950 Policy bypass in SafebrowsingN/AEdge - Chromium
CVE-2026-17951Chromium: CVE-2026-17951 Heap buffer overflow in WebRTCN/AEdge - Chromium
CVE-2026-17952Chromium: CVE-2026-17952 Inappropriate implementation in V8N/AEdge - Chromium
CVE-2026-17953Chromium: CVE-2026-17953 Insufficient policy enforcement in WebViewN/AEdge - Chromium
CVE-2026-17954Chromium: CVE-2026-17954 Policy bypass in MHTMLN/AEdge - Chromium
CVE-2026-17955Chromium: CVE-2026-17955 Insufficient validation of untrusted input in PaymentsN/AEdge - Chromium
CVE-2026-17956Chromium: CVE-2026-17956 Inappropriate implementation in SchedulingN/AEdge - Chromium
CVE-2026-17957Chromium: CVE-2026-17957 Inappropriate implementation in CORSN/AEdge - Chromium
CVE-2026-17958Chromium: CVE-2026-17958 Inappropriate implementation in ViewsN/AEdge - Chromium
CVE-2026-17959Chromium: CVE-2026-17959 Inappropriate implementation in NetworkN/AEdge - Chromium
CVE-2026-17960Chromium: CVE-2026-17960 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17961Chromium: CVE-2026-17961 Inappropriate implementation in SessionN/AEdge - Chromium
CVE-2026-17962Chromium: CVE-2026-17962 Inappropriate implementation in BlinkN/AEdge - Chromium
CVE-2026-17963Chromium: CVE-2026-17963 Inappropriate implementation in SVGN/AEdge - Chromium
CVE-2026-17964Chromium: CVE-2026-17964 Incorrect security UI in UIN/AEdge - Chromium
CVE-2026-17965Chromium: CVE-2026-17965 Incorrect security UI in Chrome for iOSN/AEdge - Chromium
CVE-2026-17966Chromium: CVE-2026-17966 Inappropriate implementation in ViewsN/AEdge - Chromium
CVE-2026-17967Chromium: CVE-2026-17967 Use after free in Chrome for iOSN/AEdge - Chromium
CVE-2026-17968Chromium: CVE-2026-17968 Uninitialized Use in WebXRN/AEdge - Chromium
CVE-2026-17969Chromium: CVE-2026-17969 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-17970Chromium: CVE-2026-17970 Insufficient validation of untrusted input in PasswordsN/AEdge - Chromium
CVE-2026-17971Chromium: CVE-2026-17971 Inappropriate implementation in FrameN/AEdge - Chromium
CVE-2026-17972Chromium: CVE-2026-17972 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-17973Chromium: CVE-2026-17973 Inappropriate implementation in ViewsN/AEdge - Chromium
CVE-2026-17974Chromium: CVE-2026-17974 Insufficient policy enforcement in DevToolsN/AEdge - Chromium
CVE-2026-17975Chromium: CVE-2026-17975 Inappropriate implementation in IMEN/AEdge - Chromium
CVE-2026-17976Chromium: CVE-2026-17976 Policy bypass in ExtensionsN/AEdge - Chromium
CVE-2026-17977Chromium: CVE-2026-17977 Policy bypass in CSSN/AEdge - Chromium
CVE-2026-17978Chromium: CVE-2026-17978 Side-channel information leakage in WebCodecsN/AEdge - Chromium
CVE-2026-17979Chromium: CVE-2026-17979 Race in V8N/AEdge - Chromium
CVE-2026-17980Chromium: CVE-2026-17980 Inappropriate implementation in UIN/AEdge - Chromium
CVE-2026-17981Chromium: CVE-2026-17981 Inappropriate implementation in BlinkN/AEdge - Chromium
CVE-2026-17982Chromium: CVE-2026-17982 Insufficient validation of untrusted input in CastN/AEdge - Chromium
CVE-2026-17983Chromium: CVE-2026-17983 Incorrect security UI in Global Media ControlsN/AEdge - Chromium
CVE-2026-17984Chromium: CVE-2026-17984 Inappropriate implementation in BrowserN/AEdge - Chromium
CVE-2026-17985Chromium: CVE-2026-17985 Insufficient policy enforcement in SpeechN/AEdge - Chromium
CVE-2026-17986Chromium: CVE-2026-17986 Insufficient policy enforcement in BluetoothN/AEdge - Chromium
CVE-2026-17987Chromium: CVE-2026-17987 Insufficient validation of untrusted input in NotificationsN/AEdge - Chromium
CVE-2026-17988Chromium: CVE-2026-17988 Insufficient validation of untrusted input in NavigationN/AEdge - Chromium
CVE-2026-17989Chromium: CVE-2026-17989 Type Confusion in V8N/AEdge - Chromium
CVE-2026-17990Chromium: CVE-2026-17990 Insufficient validation of untrusted input in WebAuthnN/AEdge - Chromium
CVE-2026-17991Chromium: CVE-2026-17991 Insufficient validation of untrusted input in AIN/AEdge - Chromium
CVE-2026-17992Chromium: CVE-2026-17992 Uninitialized Use in SkiaN/AEdge - Chromium
CVE-2026-17993Chromium: CVE-2026-17993 Race in UpdaterN/AEdge - Chromium
CVE-2026-17994Chromium: CVE-2026-17994 Inappropriate implementation in MediaN/AEdge - Chromium
CVE-2026-17995Chromium: CVE-2026-17995 Out of bounds read in DawnN/AEdge - Chromium
CVE-2026-17996Chromium: CVE-2026-17996 Inappropriate implementation in BrowserN/AEdge - Chromium
CVE-2026-17997Chromium: CVE-2026-17997 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-17998Chromium: CVE-2026-17998 Incorrect security UI in ExtensionsN/AEdge - Chromium
CVE-2026-17999Chromium: CVE-2026-17999 Incorrect security UI in PictureInPictureN/AEdge - Chromium
CVE-2026-18000Chromium: CVE-2026-18000 Insufficient policy enforcement in USBN/AEdge - Chromium
CVE-2026-18001Chromium: CVE-2026-18001 Inappropriate implementation in WebGLN/AEdge - Chromium
CVE-2026-18002Chromium: CVE-2026-18002 Insufficient validation of untrusted input in Google LensN/AEdge - Chromium
CVE-2026-18003Chromium: CVE-2026-18003 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-18004Chromium: CVE-2026-18004 Insufficient policy enforcement in SpeechN/AEdge - Chromium
CVE-2026-18005Chromium: CVE-2026-18005 Inappropriate implementation in WebXRN/AEdge - Chromium
CVE-2026-18006Chromium: CVE-2026-18006 Inappropriate implementation in Google LensN/AEdge - Chromium
CVE-2026-18007Chromium: CVE-2026-18007 Inappropriate implementation in InputN/AEdge - Chromium
CVE-2026-18008Chromium: CVE-2026-18008 Inappropriate implementation in SettingsN/AEdge - Chromium
CVE-2026-18009Chromium: CVE-2026-18009 Insufficient validation of untrusted input in PasswordsN/AEdge - Chromium
CVE-2026-18010Chromium: CVE-2026-18010 Inappropriate implementation in PasswordsN/AEdge - Chromium
CVE-2026-18011Chromium: CVE-2026-18011 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-18012Chromium: CVE-2026-18012 Use after free in PDFiumN/AEdge - Chromium
CVE-2026-18013Chromium: CVE-2026-18013 Inappropriate implementation in Chrome for iOSN/AEdge - Chromium
CVE-2026-18014Chromium: CVE-2026-18014 Insufficient validation of untrusted input in DevToolsN/AEdge - Chromium
CVE-2026-18015Chromium: CVE-2026-18015 Inappropriate implementation in TintN/AEdge - Chromium
CVE-2026-18016Chromium: CVE-2026-18016 Insufficient policy enforcement in Chrome for iOSN/AEdge - Chromium
CVE-2026-18017Chromium: CVE-2026-18017 Use after free in DawnN/AEdge - Chromium
CVE-2026-18018Chromium: CVE-2026-18018 Inappropriate implementation in UpdaterN/AEdge - Chromium
CVE-2026-18019Chromium: CVE-2026-18019 Side-channel information leakage in MediaN/AEdge - Chromium
CVE-2026-26197Array full size, element count, and element size are not checked to make sure they match in H5Odtype.cN/A
CVE-2026-26199Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zeroN/A
CVE-2026-40467Use after free in gawkN/A
CVE-2026-40468Heap buffer overflow in gawkN/A
CVE-2026-40553Stack-based buffer overflow in gawkN/A
CVE-2026-42792epmd permanent DoS via EMFILE on accept(2) in ertsN/A
CVE-2026-44943remote limited file-write as root via discovery in open-iscsiN/A
CVE-2026-44944iscsiuio control-socket authentication bypass in open-iscsiN/A
CVE-2026-50243'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAILN/A
CVE-2026-50252Possible cache poisoning attack by mapping source port population per threadN/A
CVE-2026-54886SSH SFTP server denial of service via extended channel data infinite loopN/A
CVE-2026-54908Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange messageN/A
CVE-2026-55737Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoderN/A
CVE-2026-55995Double-free in the iSNS attribute decoder in open-iscsiN/A
CVE-2026-56000xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()N/A
CVE-2026-56160Azure Red Hat OpenShift (ARO) Elevation of Privilege VulnerabilityN/AElevation of Privilege
CVE-2026-56288NULL Pointer Dereference in GNU patchN/A
CVE-2026-56289Loop with Unreachable Exit Condition in GNU patchN/A
CVE-2026-56389Arbitrary Command Execution in GNU BisonN/A
CVE-2026-56390Arbitrary Output Location Change in GNU BisonN/A
CVE-2026-56392Heap-based Buffer Overflow in GNU coreutilsN/A
CVE-2026-58643Windows Admin Center Spoofing VulnerabilityN/ASpoofing
CVE-2026-59248Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoSN/A
CVE-2026-59250Megaco flex scanner buffer overflow via oversized property parm nameN/A
CVE-2026-59251Denial of service via exponential certificate policy tree growth in path validationN/A
CVE-2026-65624Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory ExhaustionN/A
CVE-2026-6879Quadratic Behavior in xml.etree.ElementPath Index PredicatesN/A
CVE-2026-9079stale proxy password leakN/A