2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
252 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-88097 Microsoft Edge Chromium | HIGH8.1 | Microsoft Edge Chromium | CWE-416 Use After Free | 0.3% | Sep 18, 2026 |
| CVE-2026-62874 Microsoft Azure Billing | CRITICAL10.0 | Microsoft Azure Billing | CWE-345 | 0.3% | Sep 18, 2026 |
| CVE-2026-85889 Microsoft Azure Ai Foundry | CRITICAL10.0 | Microsoft Azure Ai Foundry | CWE-306 Missing Authentication | 0.7% | Sep 17, 2026 |
| CVE-2026-85885 Microsoft 365 Copilot | CRITICAL9.9 | Microsoft 365 Copilot | CWE-77 Command Injection | 0.7% | Sep 17, 2026 |
| CVE-2026-83944 Microsoft Azure Logic Apps | CRITICAL10.0 | Microsoft Azure Logic Apps | CWE-284 Improper Access Control | 0.4% | Sep 17, 2026 |
| CVE-2026-78501 Microsoft 365 Copilot Chat | HIGH8.6 | Microsoft 365 Copilot Chat | CWE-77 Command Injection | 0.5% | Sep 17, 2026 |
| CVE-2026-77903 Microsoft Dataverse | CRITICAL9.0 | Microsoft Dataverse | CWE-290 | 0.4% | Sep 17, 2026 |
| CVE-2026-70200 Microsoft Azure Logic Apps | CRITICAL10.0 | Microsoft Azure Logic Apps | CWE-22 Path Traversal | 0.6% | Sep 17, 2026 |
| CVE-2026-70009 Microsoft Azure Arc | CRITICAL9.3 | Microsoft Azure Arc | CWE-22 Path Traversal | 0.5% | Sep 17, 2026 |
| CVE-2026-69399 Microsoft Azure Arc | CRITICAL10.0 | Microsoft Azure Arc | CWE-441 | 0.5% | Sep 17, 2026 |
| CVE-2026-68791 Microsoft Azure Machine Learning | HIGH8.6 | Microsoft Azure Machine Learning | CWE-863 Incorrect Authorization | 0.5% | Sep 17, 2026 |
| CVE-2026-70341 Microsoft Edge | HIGH8.5 | Microsoft Edge | CWE-416 Use After Free | 0.5% | Sep 11, 2026 |
| CVE-2026-83941 Microsoft Entra Id | CRITICAL9.9 | Microsoft Entra Id | CWE-862 Missing Authorization | 0.8% | Sep 8, 2026 |
| CVE-2026-81355 Microsoft Windows 10 1607 | HIGH7.5 | Microsoft Windows 10 1607 | CWE-122 Heap Buffer Overflow | 0.2% | Sep 8, 2026 |
| CVE-2026-81352 Microsoft Web Media Extensions | HIGH8.8 | Microsoft Web Media Extensions | CWE-122 Heap Buffer Overflow | 0.5% | Sep 8, 2026 |
| CVE-2026-78510 Microsoft 365 Apps | HIGH8.4 | Microsoft 365 Apps | CWE-122 Heap Buffer Overflow | 0.3% | Sep 8, 2026 |
| CVE-2026-78446 Microsoft Windows 10 1607 | HIGH7.5 | Microsoft Windows 10 1607 | CWE-416 Use After Free | 0.5% | Sep 8, 2026 |
| CVE-2026-77503 Microsoft Windows 10 1607 | HIGH8.4 | Microsoft Windows 10 1607 | CWE-125 Out of Bounds Read | 0.3% | Sep 8, 2026 |
| CVE-2026-72950 Microsoft Windows 10 1607 | HIGH8.8 | Microsoft Windows 10 1607 | CWE-122 Heap Buffer Overflow | 0.9% | Sep 8, 2026 |
| CVE-2026-70570 Microsoft Windows 10 1607 | HIGH7.5 | Microsoft Windows 10 1607 | CWE-416 Use After Free | 0.7% | Sep 8, 2026 |
| CVE-2026-69854 Microsoft Spring Cloud | CRITICAL9.0 | Microsoft Spring Cloud | CWE-287 Improper Authentication | 0.7% | Sep 8, 2026 |
| CVE-2026-69805 Microsoft.Diagnostics.Runtime | HIGH7.5 | Microsoft.Diagnostics.Runtime | CWE-73 | 0.5% | Sep 8, 2026 |
| CVE-2026-69797 Microsoft 365 Apps | HIGH8.8 | Microsoft 365 Apps | CWE-416 Use After Free | 0.8% | Sep 8, 2026 |
| CVE-2026-69775 Microsoft Windows 11 23h2 | HIGH7.1 | Microsoft Windows 11 23h2 | CWE-416 Use After Free | 0.6% | Sep 8, 2026 |
| CVE-2026-69762 Microsoft Windows 10 1809 | HIGH8.0 | Microsoft Windows 10 1809 | CWE-121 Stack Buffer Overflow | 0.8% | Sep 8, 2026 |
| CVE-2026-69761 Microsoft Windows 10 1607 | HIGH7.1 | Microsoft Windows 10 1607 | CWE-416 Use After Free | 0.6% | Sep 8, 2026 |
| CVE-2026-69757 Microsoft Windows 10 1809 | HIGH7.1 | Microsoft Windows 10 1809 | CWE-416 Use After Free | 0.6% | Sep 8, 2026 |
| CVE-2026-69717 Microsoft Windows 10 1607 | HIGH8.0 | Microsoft Windows 10 1607 | CWE-125 Out of Bounds Read | 0.8% | Sep 8, 2026 |
| CVE-2026-69714 Microsoft Windows 10 1607 | HIGH8.0 | Microsoft Windows 10 1607 | CWE-121 Stack Buffer Overflow | 0.8% | Sep 8, 2026 |
| CVE-2026-69706 Microsoft Windows 10 1607 | HIGH7.1 | Microsoft Windows 10 1607 | CWE-416 Use After Free | 0.6% | Sep 8, 2026 |
| CVE-2026-69689 Microsoft Windows 10 1809 | HIGH8.0 | Microsoft Windows 10 1809 | CWE-121 Stack Buffer Overflow | 0.8% | Sep 8, 2026 |
| CVE-2026-69688 Microsoft Windows 10 1607 | HIGH7.1 | Microsoft Windows 10 1607 | CWE-122 Heap Buffer Overflow | 0.6% | Sep 8, 2026 |
| CVE-2026-69681 Microsoft Windows 10 1607 | HIGH8.0 | Microsoft Windows 10 1607 | CWE-122 Heap Buffer Overflow | 0.8% | Sep 8, 2026 |
| CVE-2026-69625 Microsoft Windows 10 1809 | HIGH8.0 | Microsoft Windows 10 1809 | CWE-122 Heap Buffer Overflow | 0.8% | Sep 8, 2026 |
| CVE-2026-69619 Microsoft Windows 10 1607 | HIGH8.0 | Microsoft Windows 10 1607 | CWE-125 Out of Bounds Read | 0.8% | Sep 8, 2026 |
| CVE-2026-69602 Microsoft Windows 10 1809 | HIGH7.1 | Microsoft Windows 10 1809 | CWE-416 Use After Free | 0.6% | Sep 8, 2026 |
| CVE-2026-69597 Microsoft Windows 11 23h2 | HIGH7.1 | Microsoft Windows 11 23h2 | CWE-416 Use After Free | 0.6% | Sep 8, 2026 |
| CVE-2026-69553 Microsoft Windows 10 1809 | HIGH7.1 | Microsoft Windows 10 1809 | CWE-862 Missing Authorization | 0.5% | Sep 8, 2026 |
| CVE-2026-69512 Microsoft Windows 10 1607 | HIGH8.0 | Microsoft Windows 10 1607 | CWE-122 Heap Buffer Overflow | 0.6% | Sep 8, 2026 |
| CVE-2026-67643 Microsoft Sql Server 2022 | CRITICAL9.8 | Microsoft Sql Server 2022 | CWE-122 Heap Buffer Overflow | 1.0% | Sep 8, 2026 |
| CVE-2026-67636 Microsoft Sql Server 2019 | CRITICAL9.0 | Microsoft Sql Server 2019 | CWE-125 Out of Bounds Read | 0.7% | Sep 8, 2026 |
| CVE-2026-67631 Microsoft Sql Server 2017 | CRITICAL9.8 | Microsoft Sql Server 2017 | CWE-122 Heap Buffer Overflow | 1.0% | Sep 8, 2026 |
| CVE-2026-67378 Microsoft Sql Server 2019 | CRITICAL9.0 | Microsoft Sql Server 2019 | CWE-822 | 0.7% | Sep 8, 2026 |
| CVE-2026-80098 Microsoft Copilot Studio | CRITICAL9.3 | Microsoft Copilot Studio | CWE-347 | 0.5% | Sep 3, 2026 |
| CVE-2026-70178 Microsoft Fabric | HIGH8.5 | Microsoft Fabric | CWE-862 Missing Authorization | 0.6% | Sep 3, 2026 |
| CVE-2026-69857 Microsoft Azure Cosmos Db | HIGH8.5 | Microsoft Azure Cosmos Db | CWE-639 Insecure Direct Object Reference | 0.6% | Sep 3, 2026 |
| CVE-2026-65818 Microsoft Power Platform | HIGH8.5 | Microsoft Power Platform | CWE-918 Server Side Request Forgery | 0.6% | Sep 3, 2026 |
| CVE-2026-62916 Microsoft Entra Id | CRITICAL9.1 | Microsoft Entra Id | CWE-288 Authentication Bypass via Alternate Path | 0.9% | Sep 3, 2026 |
| CVE-2026-69419 Microsoft Azure Data Manager For Energy | HIGH8.5 | Microsoft Azure Data Manager For Energy | CWE-190 Integer Overflow | 0.7% | Aug 20, 2026 |
| CVE-2026-66800 Microsoft Azure Data Factory | HIGH8.6 | Microsoft Azure Data Factory | CWE-918 Server Side Request Forgery | 1.0% | Aug 20, 2026 |
Page 1 of 6
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications