CVEs published in July 2026
1,434 tracked CVEs from 24 vendors had their first vendor advisory published in July 2026: 137 critical, 986 high, 13 in CISA KEV. Newest first.
1,901 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-50369High
Windows Remote Desktop Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50368High
Windows Active Directory Federation Services Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50367High
Windows Sensor Data Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50366Medium
Windows Active Directory Domain Services Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50365High
Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50363High
Windows Push Notifications Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50362High
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50361High
Microsoft Brokering File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50360High
Windows SMB Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50359High
Microsoft XML Core Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50358High
Windows Media Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50357High
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50355High
Windows Active Directory Federation Services Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50353High
DirectX Graphics Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50352Medium
Windows Cryptographic Services Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50348High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50347High
Windows Data.dll Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50346High
Netlogon RPC Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50345High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50344High
Windows OLE Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50343High
Microsoft Install Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50341Medium
Windows NTFS Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50340High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50339Medium
Windows Push Notification Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50337High
Windows Notification Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50335High
Windows Operating Systems Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50334Medium
Windows Push Notification Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50332High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50331High
Windows Application Model Core API Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50330High
Windows Remote Desktop Client Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50329High
Microsoft DWM Core Library Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50328High
Windows Server Update Service (WSUS) Tampering Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50327High
Windows Media Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50326High
Windows Unified Consent System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50324Medium
Windows Active Directory Federation Services Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50322High
Windows Runtime Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50321High
Windows USB Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50317High
Windows Operating Systems Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50315High
Windows Image Acquisition Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50313High
Windows NTFS Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50312Medium
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50310Medium
Windows Human Interface Device Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50309High
Windows NTFS Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50307High
Windows TCP/IP Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50306High
Windows TCP/IP Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50305High
Microsoft Brokering File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50304High
Windows Active Directory Federation Services Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-50302Medium
Windows Cryptographic Services Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49177Medium
Windows TCP/IP Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-47304High
.NET Security Feature Bypass Vulnerability
MS Server, Red Hat · 2 advisories - Added
CVE-2026-47302High
.NET: Denial of Service vulnerability due to uncontrolled resource allocation
MS Server, Red Hat · 2 advisories - Added
CVE-2026-47295High
Microsoft SQL Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-23573Medium
SSL-VPN Reflected XSS
Fortinet · 1 advisory - Added
Header injection in captive portal authentication form
Fortinet · 1 advisory - Added
Header injection in Web Filter warning page
Fortinet · 1 advisory - Added
CVE-2025-53379High
Out of bounds read in GUI
Fortinet · 1 advisory - Added
CVE-2025-43892Medium
Fortinet · 1 advisory - Added
CVE-2026-59245High
Apache Airflow FAB provider: FAB auth manager: a DAG named "DAGs" hijacks the global all-DAGs permission (access_control privilege escalation via resource_name collision)
Apache · 1 advisory - Added
CVE-2026-58065High
Apache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verification
Apache · 1 advisory - Added
CVE-2026-41041Critical
URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino
Apache · 1 advisory - Added
CVE-2026-49876Medium
Apache Gravitino: Authenticated SSRF in Gravitino JobManager
Apache · 1 advisory - Added
CVE-2026-49844Medium
Malformed JSON output due to improper encoding of floating-point values
Apache, NetApp, Red Hat · 4 advisories - Added
CVE-2026-40454High
Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client
Apache · 1 advisory - Added
CVE-2026-40452High
Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB
Apache · 1 advisory - Added
CVE-2026-40009Medium
Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB
Apache · 1 advisory - Added
CVE-2026-40008Critical
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache IoTDB
Apache · 1 advisory - Added
CVE-2026-40007High
Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB
Apache · 1 advisory - Added
CVE-2026-40006High
Apache IoTDB: Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, Missing…
Apache · 1 advisory - Added
CVE-2026-40005Critical
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB
Apache · 1 advisory - Added
CVE-2026-28564Critical
Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in Apache IoTDB
Apache · 1 advisory - Added
CVE-2026-58082Critical
NetApp · 1 advisory - Added
CVE-2026-58081Critical
Heap-based buffer overflow in encoding modules
NetApp, Red Hat · 2 advisories - Added
CVE-2026-49428High
NetApp · 1 advisory - Added
CVE-2026-49427High
NetApp · 1 advisory - Added
CVE-2026-49426Medium
FreeBSD Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-49425Medium
FreeBSD Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-49424Medium
FreeBSD Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-49423High
FreeBSD Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-49422High
FreeBSD Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-49421Medium
FreeBSD Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-49420Critical
FreeBSD Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-49419High
FreeBSD Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-49418High
FreeBSD Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-49415High
FreeBSD Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-46605High
NetApp · 1 advisory - Added
CVE-2026-46242High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-43499High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-42588High
NetApp · 1 advisory - Added
CVE-2026-42253High
NetApp · 1 advisory - Added
CVE-2026-57054Medium
Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass web filtering and access downstream resources that should be unreachable
Juniper · 1 advisory - Added
CVE-2026-57032Medium
Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on EX Series devices allows an authenticated attacker with low privileges to cause a Denial-of-Service (DoS)
Juniper · 1 advisory - Added
CVE-2026-57031Medium
Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series allows adjacent subscribers to bypass configured firewall filters
Juniper · 1 advisory - Added
CVE-2026-57030Medium
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS)
Juniper · 1 advisory - Added
CVE-2026-57029Medium
Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Denial-of-Service (DoS)
Juniper · 1 advisory - Added
CVE-2026-57028High
Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause license exhaustion
Juniper · 1 advisory - Added
CVE-2026-57027Medium
Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series devices allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS).When sFlow is configured in a Virtual Chassis (VC) scenario with EX4100 Series or EX4400 Series devices, multicast traffic which is received on one VC member and sent out on another member leads to a memory leak and ultimately an FPC crash and restart
Juniper · 1 advisory - Added
CVE-2026-57026High
Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).If the SIP ALG is enabled on an affected device, the processing of a malformed SIP invite packet will cause a flow processing daemon (flowd) crash and restart
Juniper · 1 advisory - Added
CVE-2026-57025Medium
Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privilged attacker to cause a Denial-of-Service (DoS)
Juniper · 1 advisory - Added
CVE-2026-57024Medium
Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS)
Juniper · 1 advisory - Added
CVE-2026-57023High
Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial of Service (DoS)
Juniper · 1 advisory