| CVE-2026-50647 | ALTO7.5 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-50510 | ALTO7.8 | Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-50468 | MÉDIO6.5 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. | 14/07/2026 |
| CVE-2026-50438 | ALTO8.8 | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. | 14/07/2026 |
| CVE-2026-50411 | ALTO7.5 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-50408 | MÉDIO5.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 14/07/2026 |
| CVE-2026-50368 | ALTO7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-50355 | ALTO7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-48580 | MÉDIO5.5 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 14/07/2026 |
| CVE-2026-47642 | ALTO7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-47295 | ALTO8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-58647 | MÉDIO5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-58644KEV | CRÍTICO9.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 14/07/2026 |
| CVE-2026-58636 | ALTO7.8 | Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally. | 14/07/2026 |
| CVE-2026-58631 | ALTO7.8 | Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-58618 | ALTO7.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-58595 | ALTO8.1 | Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-58279 | MÉDIO6.5 | Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-57969 | ALTO8.8 | Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-57107 | ALTO7.8 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally. | 14/07/2026 |