Patch Day month

July 2026 vulnerabilities

A defender-focused view of 2,958 vulnerabilities across 5,652 returned patch records from 3 vendors. Filter the complete month, or browse the static page trail without JavaScript.

5,652all patch recordsClear filters 200criticalShow these records 3Microsoft exploitation detectedShow these records 4Microsoft in CISA KEVShow these records 2,010tracked hereShow these records

Red Hat 3,494 Microsoft 2,142 Cisco 16

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

#patch-filter-form, #patch-filter-loading { display: none !important; } Complete-month filters require JavaScript. The responsive records and ordinary page links below remain complete and usable.

An EPSS percentage is the global 30-day exploitation probability in the wild, not specific to you.

Page 29 of 29 · records 5,601–5,652 of 5,652

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle

CVE-2026-14084 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14084 Insufficient validation of untrusted input in Chromoting

CVE-2026-14030 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14030 Incorrect security UI in SplitView

CVE-2026-14083 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14083 Insufficient validation of untrusted input in HTML

CVE-2026-14141 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14141 Incorrect security UI in Document Picture-in-Picture

CVE-2026-13810 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13810 Inappropriate implementation in Input

CVE-2026-13884 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13884 Heap buffer overflow in Chromecast

CVE-2026-13963 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13963 Inappropriate implementation in DevTools

CVE-2026-14140 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14140 Insufficient validation of untrusted input in Input

CVE-2026-13806 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13806 Insufficient validation of untrusted input in Accessibility

CVE-2026-13962 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13962 Insufficient data validation in PDF

CVE-2026-14081 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14081 Insufficient policy enforcement in DevTools

CVE-2026-14139 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14139 Inappropriate implementation in TabStrip

CVE-2026-13804 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13804 Use after free in Chromecast

CVE-2026-13882 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13882 Inappropriate implementation in USB

CVE-2026-13960 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13960 Inappropriate implementation in Passwords

CVE-2026-14026 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14026 Incorrect security UI in SplitView

CVE-2026-13803 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13803 Type Confusion in Chrome Tabs

CVE-2026-13881 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13881 Insufficient data validation in WebAppInstalls

CVE-2026-13959 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13959 Insufficient validation of untrusted input in Blink

CVE-2026-14025 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14025 Use after free in Views

CVE-2026-14080 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher

CVE-2026-14138 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14138 Inappropriate implementation in WebAppInstalls

CVE-2026-13802 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13802 Use after free in Views

CVE-2026-13958 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13958 Uninitialized Use in Codecs

CVE-2026-14024 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14024 Use after free in Ozone

CVE-2026-14079 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14079 Policy bypass in Network

CVE-2026-14135 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14135 Insufficient validation of untrusted input in Network

CVE-2026-13801 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13801 Integer overflow in Chromecast

CVE-2026-13879 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13879 Use after free in Bluetooth

CVE-2026-13957 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13957 Incorrect security UI in Extensions

CVE-2026-14023 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14023 Insufficient validation of untrusted input in SanitizerAPI

CVE-2026-14078 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14078 Policy bypass in WebRTC

CVE-2026-14134 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14134 Inappropriate implementation in Autofill

CVE-2026-13877 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13877 Insufficient validation of untrusted input in ANGLE

CVE-2026-14077 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14077 Incorrect security UI in Select

CVE-2026-14133 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14133 Race in History Embeddings

CVE-2026-13774 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13774 Use after free in Extensions

CVE-2026-13800 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13800 Inappropriate implementation in Updater

CVE-2026-13876 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13876 Inappropriate implementation in Network

CVE-2026-13956 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13956 Incorrect security UI in PageInfo

CVE-2026-14022 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14022 Insufficient validation of untrusted input in Network

CVE-2026-14076 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14076 Policy bypass in Network

CVE-2026-14132 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14132 Inappropriate implementation in WebXR

CVE-2026-13799 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13799 Use after free in QUIC

CVE-2026-13875 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13875 Insufficient validation of untrusted input in GPU

CVE-2026-13954 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13954 Insufficient policy enforcement in XML

CVE-2026-14021 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPI

CVE-2026-14074 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14074 Side-channel information leakage in WebAuthentication

CVE-2026-14153 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14153 Inappropriate implementation in Glic

CVE-2026-14090 ↗2026-07-03Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14090 Out of bounds read in CameraCapture

CVE-2026-54522 ↗2026-08-07azl3 rubygem-msgpack 1.7.2-1 on Azure Linux 3.0N/AOut-of-band—MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

CVE-2026-54787 ↗2026-08-07azl3 gh 2.62.0-20 on Azure Linux 3.0N/AOut-of-band—sigstore-go fails to check signature timestamps against a signing key's validity period

Narrow the complete month

Microsoft Security Response Center

Cross-vendor patches

Microsoft Security Response Center