CVEs published in July 2026
1,434 tracked CVEs from 24 vendors had their first vendor advisory published in July 2026: 137 critical, 986 high, 13 in CISA KEV. Newest first.
1,901 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-55001High
Active Directory Domain Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-54993High
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-54986High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-54107High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-54132Medium
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-54991High
Windows USB Print Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-54111High
Universal Print Management Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-55000Medium
Windows USB Print Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50697High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-54990Critical
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50696High
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-54987High
Windows Overlay Filter Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-54989High
Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-54129High
Windows Hyper-V Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50695High
Windows Active Directory Federation Services Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-54983High
Windows Active Directory Federation Services Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49784High
Microsoft Windows App Store Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49174Medium
DNS Client Tampering Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49172Critical
Windows FTP Service Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49175High
Windows DNS Client Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49176High
Windows WalletService Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49171High
Windows Speech Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49170High
Windows StateRepository API Server file Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49169High
Windows DNS Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49168Medium
Storage Spaces Direct Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49167Medium
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49166High
Windows Print Configuration Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49165High
Microsoft Windows App Store Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49164High
Windows Active Directory Domain Services Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49162High
Microsoft Brokering File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-48571High
Windows App Package Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-48572High
Windows App Package Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42990Critical
SQL Server ODBC driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42975High
Windows Bluetooth Port Driver Remote Code Execution
MS Server · 1 advisory - Added
CVE-2026-42900High
Microsoft Windows App Store Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34346Medium
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34349Medium
Windows Media Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-47296High
Microsoft SQL Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-42982High
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-59888Medium
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records
NetApp, Red Hat · 2 advisories - Added
CVE-2026-54058Critical
Memory disclosure or denial of service via crafted McIdas AREA image
Red Hat, Splunk · 2 advisories - Added
CVE-2026-59197High
Native heap out-of-bounds write
Red Hat, Splunk · 2 advisories - Added
CVE-2026-59200High
Denial of service via crafted PDF stream
Red Hat, Splunk · 2 advisories - Added
CVE-2026-59198High
Information disclosure via TGA RLE encoder out-of-bounds read
Red Hat, Splunk · 2 advisories - Added
CVE-2026-59205High
Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API
Red Hat, Splunk · 2 advisories - Added
CVE-2026-59203High
Denial of Service via crafted EPS file
Red Hat, Splunk · 2 advisories - Added
CVE-2026-59199High
Denial of Service via out-of-bounds write in image processing
Red Hat, Splunk · 2 advisories - Added
CVE-2026-59204High
Denial of Service via crafted JPEG2000 image
Red Hat, Splunk · 2 advisories - Added
CVE-2026-14903High
Path traversal in Ivanti Xtraction before version 2026.2.1
Ivanti · 1 advisory - Added
CVE-2026-14902Medium
open redirect in Ivanti Xtraction before version 2026.2.1
Ivanti · 1 advisory - Added
CVE-2026-49488Medium
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OpenMeetings
Apache · 1 advisory - Added
CVE-2026-62393Medium
Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin
Apache · 1 advisory - Added
CVE-2026-62392Critical
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin
Apache · 1 advisory - Added
CVE-2026-62390Critical
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin
Apache · 1 advisory - Added
CVE-2026-58319Critical
Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication
Apache · 1 advisory - Added
CVE-2026-59084Critical
Insufficient documentation for EncryptInterceptor may lead to insecure configurations
Apache, NetApp, Red Hat · 3 advisories - Added
CVE-2026-59083Critical
Security constraint bypass via improper URL encoding in rewrite valve
Apache, NetApp, Red Hat · 3 advisories - Added
CVE-2026-59841High
Supers override fails to properly override supervisor address
Fortinet · 1 advisory - Added
CVE-2026-59840Medium
Fortinet · 1 advisory - Added
CVE-2026-59839Medium
Path traversal in CLI command allows deletion of root file system
Fortinet · 1 advisory - Added
CVE-2026-59838Medium
Cross-Site Scripting in Domain parameter
Fortinet · 1 advisory - Added
CVE-2026-59837Medium
Stack Buffer Overflow in Log Report
Fortinet · 1 advisory - Added
CVE-2026-59836High
Missed certificate verification in AD Connector communication with FortiClient EMS
Fortinet · 1 advisory - Added
CVE-2026-59835High
Unauthenticated VNC access exposed on all interfaces
Fortinet · 1 advisory - Added
CVE-2026-58638Medium
Windows Boot Loader Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58637High
Windows Client-Side Caching Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58632High
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58629High
DirectX Graphics Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58628High
Windows Wireless Network Manager Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58627High
Windows DHCP Server Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58626High
Windows Remote Desktop Services Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58619High
Windows Sensor Data Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58613High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58594High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58547Medium
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58546Medium
Windows Remote Desktop Client Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58545Medium
Windows Kernel Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58544High
Windows Management Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58543Medium
Universal Print Management Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58542High
Windows Media Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58541High
Microsoft DWM Core Library Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58540High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58539Medium
Windows Remote Desktop Client Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58538High
Windows Bluetooth Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58537High
Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58536High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58535Medium
Windows Remote Desktop Client Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58534High
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58533Medium
Windows Remote Desktop Client Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58532High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58531High
Windows SMB Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58530High
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58528Medium
Windows USB Audio Class Driver Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58527High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-58277High
Microsoft SharePoint Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-57982Medium
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-57096High
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-57095Medium
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-57094High
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-57093High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory