| CVE-2026-50663 | CAO8.8 | Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network. | 14/07/2026 |
| CVE-2026-50653 | CAO7.5 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-50652 | CAO7.5 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-50522KEV | NGHIÊM TRỌNG9.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 14/07/2026 |
| CVE-2026-50520 | CAO8.4 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-50506 | CAO7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-50338 | CAO8.2 | Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-47632 | CAO8.8 | Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network. | 14/07/2026 |
| CVE-2026-47296 | CAO7.5 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-47282 | TRUNG BÌNH6.5 | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | 14/07/2026 |
| CVE-2026-45646 | CAO7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-45496 | TRUNG BÌNH5.5 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 14/07/2026 |
| CVE-2026-58596 | CAO8.3 | Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | 12/07/2026 |
| CVE-2026-58281 | CAO8.3 | Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 11/07/2026 |
| CVE-2026-58525 | CAO8.2 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. | 08/07/2026 |
| CVE-2026-58523 | TRUNG BÌNH6.5 | Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network. | 03/07/2026 |
| CVE-2026-58597 | TRUNG BÌNH4.3 | Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 03/07/2026 |
| CVE-2026-58524 | TRUNG BÌNH6.1 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 03/07/2026 |
| CVE-2026-58522 | TRUNG BÌNH5.5 | Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. | 03/07/2026 |
| CVE-2026-58300 | TRUNG BÌNH5.5 | Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. | 03/07/2026 |