| | CVE-2026-62392 |  Apache | critical | 9.8 | — | | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-62393 | Apache | medium | 4.3 | 0.5%
| | Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper … | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-59835 |  Fortinet | high | 7.7 | 0.4%
| | A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, F… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-15265 |  Tenable | critical | 9.1 | 0.6%
| | A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged atta… | Jul 14, 2026 | Aug 25, 2026 |
| | CVE-2025-43892 | Fortinet | medium | 4.3 | 0.3%
| | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.… | Jul 14, 2026 | Aug 11, 2026 |
| | CVE-2025-53379 | Fortinet | high | 7.5 | 0.4%
| | A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenti… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2025-62675 | Fortinet | low | 3.4 | 0.2%
| | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerabili… | Jul 14, 2026 | Aug 11, 2026 |
| | CVE-2025-62826 | Fortinet | low | 3.1 | 0.3%
| | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerabili… | Jul 14, 2026 | Aug 11, 2026 |
| | CVE-2026-23573 | Fortinet | medium | 6.1 | 0.3%
| | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilit… | Jul 14, 2026 | Aug 11, 2026 |
| | CVE-2026-59836 | Fortinet | high | 7.5 | 0.1%
| | A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, Fort… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-59837 | Fortinet | medium | 6.6 | 0.6%
| | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all… | Jul 14, 2026 | Aug 11, 2026 |
| | CVE-2026-59839 | Fortinet | medium | 5.5 | 0.2%
| | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fo… | Jul 14, 2026 | Aug 11, 2026 |
| | CVE-2026-59840 | Fortinet | medium | 4.3 | 0.2%
| | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.… | Jul 14, 2026 | Aug 11, 2026 |
| | CVE-2026-59841 | Fortinet | high | 7.5 | — | | A improper restriction of communication channel to intended endpoints vulnerability in Fortinet Fort… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-34346 |  Microsoft | medium | 5.5 | 0.2%
| | Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock all… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-42900 | Microsoft | high | 8.1 | 0.4%
| | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo… | Jul 14, 2026 | Jul 23, 2026 |
| | CVE-2026-42975 | Microsoft | high | 8.0 | 0.3%
| | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execu… | Jul 14, 2026 | Jul 23, 2026 |
| | CVE-2026-42990 | Microsoft | critical | 9.8 | 0.7%
| | Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code… | Jul 14, 2026 | Jul 22, 2026 |
| | CVE-2026-48572 | Microsoft | high | 7.0 | 0.2%
| | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-48571 | Microsoft | high | 7.0 | 0.2%
| | Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally. | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-49162 | Microsoft | high | 7.0 | — | | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-49164 | Microsoft | high | 8.1 | — | | Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to ex… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-49165 | Microsoft | high | 7.1 | 0.2%
| | Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclo… | Jul 14, 2026 | Jul 23, 2026 |
| | CVE-2026-49166 | Microsoft | high | 7.8 | — | | Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges loca… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-49167 | Microsoft | medium | 4.7 | — | | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-49169 | Microsoft | high | 8.0 | 0.5%
| | Use after free in DNS Server allows an authorized attacker to execute code over a network. | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-49170 | Microsoft | high | 7.8 | — | | Insufficient granularity of access control in Windows StateRepository API allows an authorized attac… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-49171 | Microsoft | high | 7.5 | — | | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges local… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-49176 | Microsoft | high | 7.8 | — | | Improper privilege management in Windows WalletService allows an authorized attacker to elevate priv… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-49175 | Microsoft | high | 7.8 | 0.2%
| | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locall… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-49172 | Microsoft | critical | 9.8 | 0.7%
| | Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code ov… | Jul 14, 2026 | Jul 23, 2026 |
| | CVE-2026-49173 | Microsoft | high | 7.8 | — | | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-49784 | Microsoft | high | 7.0 | 0.2%
| | Concurrent execution using shared resource with improper synchronization ('race condition') in Micro… | Jul 14, 2026 | Jul 23, 2026 |
| | CVE-2026-54129 | Microsoft | high | 7.0 | — | | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-54989 | Microsoft | high | 7.0 | 0.2%
| | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attack… | Jul 14, 2026 | Jul 23, 2026 |
| | CVE-2026-54987 | Microsoft | high | 7.8 | 0.2%
| | Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil… | Jul 14, 2026 | Jul 23, 2026 |
| | CVE-2026-54990 | Microsoft | critical | 9.8 | — | | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code … | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-50697 | Microsoft | high | 7.8 | 0.3%
| | Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver … | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-54111 | Microsoft | high | 7.0 | — | | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-54991 | Microsoft | high | 7.8 | — | | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-54107 | Microsoft | high | 8.8 | — | | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-54986 | Microsoft | high | 7.8 | — | | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-54993 | Microsoft | high | 7.8 | — | | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to … | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-55001 | Microsoft | high | 7.8 | — | | Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-54112 | Microsoft | high | 7.8 | — | | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-55004 | Microsoft | high | 7.8 | — | | Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-54992 | Microsoft | high | 8.4 | — | | Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker … | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-54109 | Microsoft | high | 7.8 | — | | Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-54982 | Microsoft | high | 8.8 | — | | Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an una… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-54114 | Microsoft | high | 7.8 | — | | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | Jul 14, 2026 | Jul 15, 2026 |