CYBERSECURITYTRACKER
TRACKING3,967 stories737 vuln stories
Patch Day month

July 2026 vulnerabilities

A defender-focused view of 3,128 vulnerabilities across 7,246 returned patch records from 3 vendors. Filter the complete month, or browse the static page trail without JavaScript.

7,246all patch recordsClear filters211criticalShow these records3Microsoft exploitation detectedShow these records4Microsoft in CISA KEVShow these records2,200tracked hereShow these records
Red Hat 5,088Microsoft 2,142Cisco 16

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An EPSS percentage is the global 30-day exploitation probability in the wild, not specific to you.

Page 37 of 37 · records 7,201–7,246 of 7,246

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-13963 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13963 Inappropriate implementation in DevTools
CVE-2026-14140 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14140 Insufficient validation of untrusted input in Input
CVE-2026-13806 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13806 Insufficient validation of untrusted input in Accessibility
CVE-2026-13962 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13962 Insufficient data validation in PDF
CVE-2026-14081 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14081 Insufficient policy enforcement in DevTools
CVE-2026-14139 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14139 Inappropriate implementation in TabStrip
CVE-2026-13804 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13804 Use after free in Chromecast
CVE-2026-13882 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13882 Inappropriate implementation in USB
CVE-2026-13960 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13960 Inappropriate implementation in Passwords
CVE-2026-14026 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14026 Incorrect security UI in SplitView
CVE-2026-13803 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13803 Type Confusion in Chrome Tabs
CVE-2026-13881 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13881 Insufficient data validation in WebAppInstalls
CVE-2026-13959 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13959 Insufficient validation of untrusted input in Blink
CVE-2026-14025 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14025 Use after free in Views
CVE-2026-14080 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher
CVE-2026-14138 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14138 Inappropriate implementation in WebAppInstalls
CVE-2026-13802 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13802 Use after free in Views
CVE-2026-13958 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13958 Uninitialized Use in Codecs
CVE-2026-14024 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14024 Use after free in Ozone
CVE-2026-14079 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14079 Policy bypass in Network
CVE-2026-14135 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14135 Insufficient validation of untrusted input in Network
CVE-2026-13801 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13801 Integer overflow in Chromecast
CVE-2026-13879 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13879 Use after free in Bluetooth
CVE-2026-13957 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13957 Incorrect security UI in Extensions
CVE-2026-14023 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14023 Insufficient validation of untrusted input in SanitizerAPI
CVE-2026-14078 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14078 Policy bypass in WebRTC
CVE-2026-14134 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14134 Inappropriate implementation in Autofill
CVE-2026-13877 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13877 Insufficient validation of untrusted input in ANGLE
CVE-2026-14077 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14077 Incorrect security UI in Select
CVE-2026-14133 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14133 Race in History Embeddings
CVE-2026-13774 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13774 Use after free in Extensions
CVE-2026-13800 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13800 Inappropriate implementation in Updater
CVE-2026-13876 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13876 Inappropriate implementation in Network
CVE-2026-13956 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13956 Incorrect security UI in PageInfo
CVE-2026-14022 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14022 Insufficient validation of untrusted input in Network
CVE-2026-14076 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14076 Policy bypass in Network
CVE-2026-14132 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14132 Inappropriate implementation in WebXR
CVE-2026-13799 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13799 Use after free in QUIC
CVE-2026-13875 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13875 Insufficient validation of untrusted input in GPU
CVE-2026-13954 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13954 Insufficient policy enforcement in XML
CVE-2026-14021 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPI
CVE-2026-14074 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14074 Side-channel information leakage in WebAuthentication
CVE-2026-14153 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14153 Inappropriate implementation in Glic
CVE-2026-14090 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14090 Out of bounds read in CameraCapture
CVE-2026-54522 ↗azl3 rubygem-msgpack 1.7.2-1 on Azure Linux 3.0N/AOut-of-band—MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure
CVE-2026-54787 ↗azl3 gh 2.62.0-20 on Azure Linux 3.0N/AOut-of-band—sigstore-go fails to check signature timestamps against a signing key's validity period