Vulnerabilities
July 2026 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 3 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 3,887 vulnerabilities across 16,502 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 83 of 83 · records 16,401 to 16,502 of 16,502
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-14093 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14093 Use after free in Cast
CVE-2026-14151 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14151 Inappropriate implementation in AI
CVE-2026-13828 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13828 Inappropriate implementation in Enterprise
CVE-2026-13897 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13897 Insufficient policy enforcement in Chromecast
CVE-2026-14150 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14150 Insufficient validation of untrusted input in Speech
CVE-2026-13824 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13824 Insufficient validation of untrusted input in Extensions
CVE-2026-13896 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13896 Insufficient policy enforcement in Glic
CVE-2026-13976 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13976 Heap buffer overflow in Storage
CVE-2026-14091 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14091 Use after free in DevTools
CVE-2026-14149 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14149 Use after free in Audio
CVE-2026-13823 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13823 Use after free in Glic
CVE-2026-14038 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14038 Insufficient validation of untrusted input in New Tab Page
CVE-2026-13821 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13821 Use after free in Canvas
CVE-2026-13895 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13895 Inappropriate implementation in Autofill
CVE-2026-13972 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13972 Inappropriate implementation in Paint
CVE-2026-14037 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14037 Insufficient policy enforcement in GPU
CVE-2026-14148 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14148 Type Confusion in CSS
CVE-2026-13820 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13820 Out of bounds read in Skia
CVE-2026-13894 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13894 Insufficient policy enforcement in Network
CVE-2026-13971 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13971 Uninitialized Use in Skia
CVE-2026-14036 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14036 Insufficient policy enforcement in Bluetooth
CVE-2026-14089 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14089 Insufficient validation of untrusted input in PopupBlocker
CVE-2026-14147 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14147 Inappropriate implementation in CSS
CVE-2026-14035 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14035 Insufficient policy enforcement in Bluetooth
CVE-2026-14088 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14088 Uninitialized Use in Canvas
CVE-2026-14146 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14146 Inappropriate implementation in CSS
CVE-2026-13818 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13818 Inappropriate implementation in Passwords
CVE-2026-13893 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13893 Insufficient validation of untrusted input in WebUI
CVE-2026-13970 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13970 Uninitialized Use in Media
CVE-2026-14034 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14034 Inappropriate implementation in WebXR
CVE-2026-14087 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14087 Insufficient validation of untrusted input in WebNN
CVE-2026-14145 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14145 Inappropriate implementation in CSS
CVE-2026-13817 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13817 Insufficient validation of untrusted input in Glic
CVE-2026-13891 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13891 Insufficient validation of untrusted input in Extensions
CVE-2026-13968 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13968 Insufficient validation of untrusted input in DevTools
CVE-2026-14144 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14144 Incorrect security UI in Views
CVE-2026-13815 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13815 Use after free in Blink
CVE-2026-13890 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13890 Out of bounds read in Chromecast
CVE-2026-13967 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13967 Type Confusion in V8
CVE-2026-14033 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14033 Insufficient policy enforcement in Media
CVE-2026-14086 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14086 Insufficient policy enforcement in HID
CVE-2026-13888 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13888 Use after free in Extensions
CVE-2026-13966 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13966 Inappropriate implementation in History
CVE-2026-14032 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14032 Use after free in Bluetooth
CVE-2026-14085 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14085 Side-channel information leakage in CSS
CVE-2026-14143 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14143 Incorrect security UI in Passwords
CVE-2026-13811 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13811 Use after free in IME
CVE-2026-13886 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13886 Policy bypass in Isolated Web Apps
CVE-2026-13965 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13965 Use after free in Oilpan
CVE-2026-14031 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14031 Incorrect security UI in File Input
CVE-2026-14084 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14084 Insufficient validation of untrusted input in Chromoting
CVE-2026-14030 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14030 Incorrect security UI in SplitView
CVE-2026-14083 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14083 Insufficient validation of untrusted input in HTML
CVE-2026-14141 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14141 Incorrect security UI in Document Picture-in-Picture
CVE-2026-13810 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13810 Inappropriate implementation in Input
CVE-2026-13884 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13884 Heap buffer overflow in Chromecast
CVE-2026-13963 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13963 Inappropriate implementation in DevTools
CVE-2026-14140 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14140 Insufficient validation of untrusted input in Input
CVE-2026-13806 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13806 Insufficient validation of untrusted input in Accessibility
CVE-2026-13962 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13962 Insufficient data validation in PDF
CVE-2026-14081 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14081 Insufficient policy enforcement in DevTools
CVE-2026-14139 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14139 Inappropriate implementation in TabStrip
CVE-2026-13804 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13804 Use after free in Chromecast
CVE-2026-13882 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13882 Inappropriate implementation in USB
CVE-2026-13960 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13960 Inappropriate implementation in Passwords
CVE-2026-14026 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14026 Incorrect security UI in SplitView
CVE-2026-13803 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13803 Type Confusion in Chrome Tabs
CVE-2026-13881 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13881 Insufficient data validation in WebAppInstalls
CVE-2026-13959 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13959 Insufficient validation of untrusted input in Blink
CVE-2026-14025 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14025 Use after free in Views
CVE-2026-14080 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher
CVE-2026-14138 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14138 Inappropriate implementation in WebAppInstalls
CVE-2026-13802 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13802 Use after free in Views
CVE-2026-13958 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13958 Uninitialized Use in Codecs
CVE-2026-14024 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14024 Use after free in Ozone
CVE-2026-14079 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14079 Policy bypass in Network
CVE-2026-14135 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14135 Insufficient validation of untrusted input in Network
CVE-2026-13801 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13801 Integer overflow in Chromecast
CVE-2026-13879 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13879 Use after free in Bluetooth
CVE-2026-13957 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13957 Incorrect security UI in Extensions
CVE-2026-14023 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14023 Insufficient validation of untrusted input in SanitizerAPI
CVE-2026-14078 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14078 Policy bypass in WebRTC
CVE-2026-14134 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14134 Inappropriate implementation in Autofill
CVE-2026-13877 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13877 Insufficient validation of untrusted input in ANGLE
CVE-2026-14077 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14077 Incorrect security UI in Select
CVE-2026-14133 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14133 Race in History Embeddings
CVE-2026-13774 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13774 Use after free in Extensions
CVE-2026-13800 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13800 Inappropriate implementation in Updater
CVE-2026-13876 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13876 Inappropriate implementation in Network
CVE-2026-13956 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13956 Incorrect security UI in PageInfo
CVE-2026-14022 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14022 Insufficient validation of untrusted input in Network
CVE-2026-14076 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14076 Policy bypass in Network
CVE-2026-14132 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14132 Inappropriate implementation in WebXR
CVE-2026-13799 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13799 Use after free in QUIC
CVE-2026-13875 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13875 Insufficient validation of untrusted input in GPU
CVE-2026-13954 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13954 Insufficient policy enforcement in XML
CVE-2026-14021 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPI
CVE-2026-14074 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14074 Side-channel information leakage in WebAuthentication
CVE-2026-14153 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14153 Inappropriate implementation in Glic
CVE-2026-14090 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-14090 Out of bounds read in CameraCapture
CVE-2026-54522 ↗azl3 rubygem-msgpack 1.7.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailableMessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure
CVE-2026-54787 ↗azl3 gh 2.62.0-20 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablesigstore-go fails to check signature timestamps against a signing key's validity period
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.