| | CVE-2026-55049 |  Microsoft | high | 7.8 | 0.3%
| | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55048 | Microsoft | high | 7.8 | 0.3%
| | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute … | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-55047 | Microsoft | medium | 5.5 | 0.5%
| | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55046 | Microsoft | medium | 5.5 | 0.5%
| | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55045 | Microsoft | high | 8.4 | 0.3%
| | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55044 | Microsoft | high | 7.8 | 0.3%
| | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55043 | Microsoft | high | 7.8 | 0.3%
| | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55042 | Microsoft | medium | 5.5 | 0.4%
| | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose inform… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55041 | Microsoft | high | 7.8 | 0.3%
| | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55040 | Microsoft | critical | 9.1 | 4.0%
| ⚠ KEV | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a secur… | Jul 14, 2026 | Aug 19, 2026 |
| | CVE-2026-55039 | Microsoft | high | 7.8 | 0.3%
| | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to … | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55038 | Microsoft | high | 7.8 | 0.4%
| | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55037 | Microsoft | high | 7.8 | 0.3%
| | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55036 | Microsoft | high | 7.8 | 0.3%
| | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55035 | Microsoft | medium | 5.5 | 0.5%
| | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55034 | Microsoft | high | 7.3 | 0.6%
| | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-55033 | Microsoft | high | 7.8 | 0.5%
| | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute c… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55032 | Microsoft | high | 7.8 | 0.3%
| | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55031 | Microsoft | high | 7.8 | 0.4%
| | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-55030 | Microsoft | medium | 4.6 | 0.4%
| | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-55029 | Microsoft | high | 7.8 | 0.3%
| | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-55028 | Microsoft | medium | 5.5 | 0.4%
| | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55027 | Microsoft | medium | 5.5 | 0.5%
| | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55026 | Microsoft | medium | 6.2 | 0.4%
| | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose infor… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55025 | Microsoft | high | 7.8 | 0.3%
| | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-55024 | Microsoft | high | 7.8 | 0.4%
| | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-55023 | Microsoft | medium | 5.5 | 0.5%
| | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55022 | Microsoft | high | 7.8 | 0.4%
| | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55021 | Microsoft | high | 7.3 | 0.5%
| | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-55020 | Microsoft | medium | 4.6 | 0.3%
| | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55019 | Microsoft | medium | 4.6 | 0.4%
| | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-55018 | Microsoft | high | 7.8 | 0.3%
| | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55017 | Microsoft | high | 7.8 | 0.3%
| | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-55016 | Microsoft | medium | 4.6 | 0.3%
| | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of… | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-55010 | Microsoft | critical | 9.8 | 0.8%
| | Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to … | Jul 14, 2026 | Jul 22, 2026 |
| | CVE-2026-54131 | Microsoft | high | 7.8 | 0.3%
| | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | Jul 14, 2026 | Jul 15, 2026 |
| | CVE-2026-54124 | Microsoft | high | 7.8 | 0.4%
| | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code l… | Jul 14, 2026 | Jul 22, 2026 |
| | CVE-2026-54116 | Microsoft | medium | 6.5 | 1.0%
| | Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized att… | Jul 14, 2026 | Jul 22, 2026 |
| | CVE-2026-50665 | Microsoft | high | 7.8 | 0.3%
| | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-50658 | Microsoft | high | 7.0 | 0.2%
| | Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacke… | Jul 14, 2026 | Jul 22, 2026 |
| | CVE-2026-50657 | Microsoft | medium | 4.7 | 0.4%
| | Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an au… | Jul 14, 2026 | Jul 22, 2026 |
| | CVE-2026-50647 | Microsoft | high | 7.5 | 1.1%
| | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD F… | Jul 14, 2026 | Jul 24, 2026 |
| | CVE-2026-50510 | Microsoft | high | 7.8 | 0.3%
| | Improper restriction of names for files and other resources in Github Copilot allows an unauthorized… | Jul 14, 2026 | Jul 22, 2026 |
| | CVE-2026-50468 | Microsoft | medium | 6.5 | 0.7%
| | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. | Jul 14, 2026 | Jul 22, 2026 |
| | CVE-2026-50467 | Microsoft | high | 7.8 | 0.3%
| | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-50438 | Microsoft | high | 8.8 | 0.3%
| | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an aut… | Jul 14, 2026 | Jul 21, 2026 |
| | CVE-2026-50411 | Microsoft | high | 7.5 | 0.8%
| | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized a… | Jul 14, 2026 | Jul 24, 2026 |
| | CVE-2026-50408 | Microsoft | medium | 5.5 | 0.3%
| | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information… | Jul 14, 2026 | Jul 16, 2026 |
| | CVE-2026-50387 | Microsoft | high | 7.8 | 1.9%
| | Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges local… | Jul 14, 2026 | Jul 22, 2026 |
| | CVE-2026-50368 | Microsoft | high | 7.5 | 0.8%
| | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker … | Jul 14, 2026 | Jul 24, 2026 |