# Vulnerabilities published in 2026


- [CVE-2026-58773](https://insights.sbomify.com/CVE-2026-58773/): Memory corruption in Android (medium 6.7)
- [CVE-2026-5877](https://insights.sbomify.com/CVE-2026-5877/): Use after free in Chrome (high 8.8)
- [CVE-2026-58767](https://insights.sbomify.com/CVE-2026-58767/): Privilege escalation in Android (medium 6.7)
- [CVE-2026-58766](https://insights.sbomify.com/CVE-2026-58766/): Privilege escalation in Android (high 7.8)
- [CVE-2026-58765](https://insights.sbomify.com/CVE-2026-58765/): Privilege escalation in Android (medium 6.7)
- [CVE-2026-5876](https://insights.sbomify.com/CVE-2026-5876/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-58755](https://insights.sbomify.com/CVE-2026-58755/): Privilege escalation in Android (medium 6.7)
- [CVE-2026-58751](https://insights.sbomify.com/CVE-2026-58751/): Use after free in Android (medium 6.7)
- [CVE-2026-5875](https://insights.sbomify.com/CVE-2026-5875/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-58747](https://insights.sbomify.com/CVE-2026-58747/): Privilege escalation in Android (medium 6.7)
- [CVE-2026-58744](https://insights.sbomify.com/CVE-2026-58744/): Privilege escalation in Android (high 7.8)
- [CVE-2026-5874](https://insights.sbomify.com/CVE-2026-5874/): Use after free in Chrome (critical 9.6)
- [CVE-2026-58739](https://insights.sbomify.com/CVE-2026-58739/): Privilege escalation in Android (medium 6.7)
- [CVE-2026-58734](https://insights.sbomify.com/CVE-2026-58734/): Race condition in Android (high 7.0)
- [CVE-2026-58731](https://insights.sbomify.com/CVE-2026-58731/): Information disclosure in Android (medium 6.2)
- [CVE-2026-5873](https://insights.sbomify.com/CVE-2026-5873/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-58728](https://insights.sbomify.com/CVE-2026-58728/): Race condition in Android (high 7.0)
- [CVE-2026-58726](https://insights.sbomify.com/CVE-2026-58726/): Missing authorization in Android (medium 6.7)
- [CVE-2026-58724](https://insights.sbomify.com/CVE-2026-58724/): Use after free in Android (high 7.0)
- [CVE-2026-58721](https://insights.sbomify.com/CVE-2026-58721/): Information disclosure in Android (medium 4.4)
- [CVE-2026-5872](https://insights.sbomify.com/CVE-2026-5872/): Use after free in Chrome (high 8.8)
- [CVE-2026-58718](https://insights.sbomify.com/CVE-2026-58718/): Privilege escalation in Android (medium 6.7)
- [CVE-2026-58716](https://insights.sbomify.com/CVE-2026-58716/): Race condition in Android (medium 6.7)
- [CVE-2026-58710](https://insights.sbomify.com/CVE-2026-58710/): Memory corruption in Android (high 8.8)
- [CVE-2026-5871](https://insights.sbomify.com/CVE-2026-5871/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-58704](https://insights.sbomify.com/CVE-2026-58704/): Google Pixel Improper Authorization (high 8.8, exploited in the wild)
- [CVE-2026-58701](https://insights.sbomify.com/CVE-2026-58701/): Race condition in Android (high 7.0)
- [CVE-2026-5870](https://insights.sbomify.com/CVE-2026-5870/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-58699](https://insights.sbomify.com/CVE-2026-58699/): Memory corruption in Android (high 8.4)
- [CVE-2026-58698](https://insights.sbomify.com/CVE-2026-58698/): Privilege escalation in Android (medium 6.7)
- [CVE-2026-58695](https://insights.sbomify.com/CVE-2026-58695/): Memory corruption in Android (high 7.8)
- [CVE-2026-58691](https://insights.sbomify.com/CVE-2026-58691/): Privilege escalation in Android (high 8.4)
- [CVE-2026-5869](https://insights.sbomify.com/CVE-2026-5869/): Memory corruption in Chrome (medium 4.3)
- [CVE-2026-58683](https://insights.sbomify.com/CVE-2026-58683/): Memory corruption in Android (high 8.8)
- [CVE-2026-5868](https://insights.sbomify.com/CVE-2026-5868/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-58679](https://insights.sbomify.com/CVE-2026-58679/): Memory corruption in Android (high 8.4)
- [CVE-2026-58678](https://insights.sbomify.com/CVE-2026-58678/): Security feature bypass in Android (high 7.8)
- [CVE-2026-5867](https://insights.sbomify.com/CVE-2026-5867/): Memory corruption in Chrome (medium 4.3)
- [CVE-2026-58663](https://insights.sbomify.com/CVE-2026-58663/): Apache IoTDB: Auth Bypass in pipeTransfer() interface (not scored)
- [CVE-2026-58662](https://insights.sbomify.com/CVE-2026-58662/): Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass (high 8.7)
- [CVE-2026-58661](https://insights.sbomify.com/CVE-2026-58661/): n8n - Disk Space Exhaustion via Data-Table File Upload Endpoint (medium 5.3)
- [CVE-2026-58660](https://insights.sbomify.com/CVE-2026-58660/): Kanboard BoardAjaxController Missing Ownership Check via Drag-and-Drop (high 7.2)
- [CVE-2026-5866](https://insights.sbomify.com/CVE-2026-5866/): Use after free in Chrome (high 8.8)
- [CVE-2026-58659](https://insights.sbomify.com/CVE-2026-58659/): PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter (high 8.4)
- [CVE-2026-58658](https://insights.sbomify.com/CVE-2026-58658/): GPUStack Unauthenticated Information Disclosure via Worker Endpoints (high 8.8)
- [CVE-2026-58657](https://insights.sbomify.com/CVE-2026-58657/): Grav - Stored CSS Injection via Markdown Image resize() Action (medium 4.8)
- [CVE-2026-58656](https://insights.sbomify.com/CVE-2026-58656/): Grav API Plugin - Cross-Origin Admin Account Takeover via CORS Wildcard and JWT Query Parameter (high 8.7)
- [CVE-2026-58655](https://insights.sbomify.com/CVE-2026-58655/): Grav Flex Objects - Server-Side Template Injection via Dynamic Titles (high 8.7)
- [CVE-2026-58654](https://insights.sbomify.com/CVE-2026-58654/): Grav - Arbitrary File Upload via Avatar Endpoint (medium 5.3)
- [CVE-2026-58653](https://insights.sbomify.com/CVE-2026-58653/): PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update (medium 5.3)
- [CVE-2026-58652](https://insights.sbomify.com/CVE-2026-58652/): luci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter (high 7.7)
- [CVE-2026-58651](https://insights.sbomify.com/CVE-2026-58651/): Microsoft Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-58650](https://insights.sbomify.com/CVE-2026-58650/): Visual Studio Code Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2026-5865](https://insights.sbomify.com/CVE-2026-5865/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-58649](https://insights.sbomify.com/CVE-2026-58649/): .NET Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-58647](https://insights.sbomify.com/CVE-2026-58647/): Microsoft PowerBI Report Server Spoofing Vulnerability (high 8.0)
- [CVE-2026-58644](https://insights.sbomify.com/CVE-2026-58644/): Microsoft SharePoint Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2026-58643](https://insights.sbomify.com/CVE-2026-58643/): Windows Admin Center Spoofing Vulnerability (medium 6.1)
- [CVE-2026-58641](https://insights.sbomify.com/CVE-2026-58641/): .NET Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-58640](https://insights.sbomify.com/CVE-2026-58640/): Windows NTFS Remote Code Execution Vulnerability (high 7.3)
- [CVE-2026-5864](https://insights.sbomify.com/CVE-2026-5864/): Memory corruption in Chrome (medium 4.3)
- [CVE-2026-58639](https://insights.sbomify.com/CVE-2026-58639/): Microsoft SharePoint Server Spoofing Vulnerability (medium 6.5)
- [CVE-2026-58638](https://insights.sbomify.com/CVE-2026-58638/): Windows Boot Loader Security Feature Bypass Vulnerability (medium 6.0)
- [CVE-2026-58637](https://insights.sbomify.com/CVE-2026-58637/): Windows Client-Side Caching Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-58636](https://insights.sbomify.com/CVE-2026-58636/): Microsoft PC Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-58635](https://insights.sbomify.com/CVE-2026-58635/): Windows Narrator Braille Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-58634](https://insights.sbomify.com/CVE-2026-58634/): Desktop Window Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-58633](https://insights.sbomify.com/CVE-2026-58633/): Desktop Window Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-58632](https://insights.sbomify.com/CVE-2026-58632/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-58631](https://insights.sbomify.com/CVE-2026-58631/): Windows Admin Center (WAC) Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-58630](https://insights.sbomify.com/CVE-2026-58630/): Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability (critical 10.0)
- [CVE-2026-5863](https://insights.sbomify.com/CVE-2026-5863/): Code injection in Chrome (high 8.8)
- [CVE-2026-58629](https://insights.sbomify.com/CVE-2026-58629/): DirectX Graphics Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-58628](https://insights.sbomify.com/CVE-2026-58628/): Windows Wireless Network Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-58627](https://insights.sbomify.com/CVE-2026-58627/): Windows DHCP Server Denial of Service Vulnerability (high 7.5)
- [CVE-2026-58626](https://insights.sbomify.com/CVE-2026-58626/): Windows Remote Desktop Services Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-58624](https://insights.sbomify.com/CVE-2026-58624/): Apache MINA SSHD: Remote execution of JGit commands can write files on the server (medium 5.4)
- [CVE-2026-5862](https://insights.sbomify.com/CVE-2026-5862/): Code injection in Chrome (high 8.8)
- [CVE-2026-58619](https://insights.sbomify.com/CVE-2026-58619/): Windows Sensor Data Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-58618](https://insights.sbomify.com/CVE-2026-58618/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-58617](https://insights.sbomify.com/CVE-2026-58617/): M365 Copilot for iOS Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2026-58616](https://insights.sbomify.com/CVE-2026-58616/): Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability (medium 4.4)
- [CVE-2026-58614](https://insights.sbomify.com/CVE-2026-58614/): Windows Kernel Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2026-58613](https://insights.sbomify.com/CVE-2026-58613/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-58612](https://insights.sbomify.com/CVE-2026-58612/): PowerShell Information Disclosure Vulnerability (high 7.4)
- [CVE-2026-58611](https://insights.sbomify.com/CVE-2026-58611/): Xbox Gaming Services Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-58610](https://insights.sbomify.com/CVE-2026-58610/): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-5861](https://insights.sbomify.com/CVE-2026-5861/): Use after free in Chrome (high 8.8)
- [CVE-2026-58609](https://insights.sbomify.com/CVE-2026-58609/): Windows Graphics Component Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-58608](https://insights.sbomify.com/CVE-2026-58608/): Windows Print Spooler Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-58602](https://insights.sbomify.com/CVE-2026-58602/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-58601](https://insights.sbomify.com/CVE-2026-58601/): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (high 7.8)
- [CVE-2026-58600](https://insights.sbomify.com/CVE-2026-58600/): HEVC Video Extensions Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-5860](https://insights.sbomify.com/CVE-2026-5860/): Use after free in Chrome (high 8.8)
- [CVE-2026-58599](https://insights.sbomify.com/CVE-2026-58599/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-58598](https://insights.sbomify.com/CVE-2026-58598/): Windows Backup Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-58597](https://insights.sbomify.com/CVE-2026-58597/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3)
- [CVE-2026-58596](https://insights.sbomify.com/CVE-2026-58596/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2026-58595](https://insights.sbomify.com/CVE-2026-58595/): Microsoft Bing App for IOS Spoofing Vulnerability (high 8.1)
- [CVE-2026-58594](https://insights.sbomify.com/CVE-2026-58594/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/516/