LiveActive security incident?Get immediate response

CVE archive

July 2026

Browse CVE records published in July 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.

Search all CVEs Known exploited

Showing 50 of 9552 matching CVEs · Page 12 of 192.

High · CVSS 7.8

CVE-2026-50301: Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.5

CVE-2026-48580: Microsoft Excel Information Disclosure Vulnerability

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-47642: Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-47290: Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

Critical · CVSS 9.8

CVE-2026-55010: Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.5

CVE-2026-54126: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.4

CVE-2026-54128: Windows DHCP Client Remote Code Execution Vulnerability

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.8

CVE-2026-50692: Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.5

CVE-2026-50690: Windows SMB Information Disclosure Vulnerability

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-54125: Windows Runtime Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50689: Windows Clipboard Server Elevation of Privilege Vulnerability

Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.1

CVE-2026-50686: Windows OLE Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.8

CVE-2026-50687: Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8

CVE-2026-50683: Windows DHCP Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50685: Windows DHCP Server Remote Code Execution Vulnerability

Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.1

CVE-2026-50682: Active Directory Denial of Service Vulnerability

Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.8

CVE-2026-54121: Active Directory Certificate Services Elevation of Privilege Vulnerability

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.5

CVE-2026-50681: Windows Secure Channel Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.2

CVE-2026-50680: Windows Hyper-V Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50688: Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50679: Windows Search Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 4.8

CVE-2026-50684: Active Directory Federation Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-54115: Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50677: Windows Media Elevation of Privilege Vulnerability

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50676: Windows Media Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-50674: Windows USB Print Driver Elevation of Privilege Vulnerability

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50673: Windows Kernel Elevation of Privilege Vulnerability

Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-50672: Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.8

CVE-2026-50670: Windows Win32k Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-50669: Windows Telephony Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.8

CVE-2026-50668: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50667: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.8

CVE-2026-50666: Windows Remote Access Elevation of Privilege Vulnerability

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.1

CVE-2026-50661: Windows BitLocker Security Feature Bypass Vulnerability

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.5

CVE-2026-50659: .NET Spoofing Vulnerability

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-50658: Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

Medium · CVSS 4.7

CVE-2026-50657: Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability

Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50655: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50651: .NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50650: .NET Framework Elevation of Privilege Vulnerability

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50649: .NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50648: .NET Framework Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50647: Active Directory Federation Server Denial of Service Vulnerability

Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50646: .NET Framework Remote Code Execution Vulnerability

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 8.2

CVE-2026-50528: .NET Security Feature Bypass Vulnerability

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50527: .NET Framework Denial of Service Vulnerability

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-50526: .NET Tampering Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.5

CVE-2026-50525: .NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

Critical · CVSS 9.8

CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Published Jul 14, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-50510: GitHub Copilot Remote Code Execution Vulnerability

Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.

Published Jul 14, 2026 · Updated Oct 8, 2026