Patch Day month

March 2026 vulnerabilities

A defender-focused view of 886 vulnerabilities across 1,627 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.

1,627all patch recordsClear filters 66criticalShow these records 0Microsoft exploitation detectedShow these records 2Microsoft in CISA KEVShow these records 184tracked hereShow these records

Red Hat 960 Microsoft 462 Android 136 Cisco 69

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

#patch-filter-form, #patch-filter-loading { display: none !important; } Complete-month filters require JavaScript. The responsive records and ordinary page links below remain complete and usable.

An EPSS percentage is the global 30-day exploitation probability in the wild, not specific to you.

Page 1 of 9 · records 1–200 of 1,627

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle

CVE-2026-3909 ↗2026-03-16Microsoft Edge (Chromium-based)N/AOut-of-band2%CISA KEVVulnCheckENISA1 mentionsChromium: CVE-2026-3909 Out of bounds write in Skia

CVE-2026-3910 ↗2026-03-13Microsoft Edge (Chromium-based)N/AOut-of-band2%CISA KEVVulnCheckENISA1 mentionsChromium: CVE-2026-3910 Inappropriate implementation in V8

CVE-2026-23658 ↗2026-03-19Azure DevOps: msazureCriticalOut-of-band1%Azure DevOps: msazure Elevation of Privilege Vulnerability

CVE-2026-23659 ↗2026-03-19Azure Data FactoryCriticalOut-of-band1%Azure Data Factory Information Disclosure Vulnerability

CVE-2026-24299 ↗2026-03-19Microsoft 365 CopilotCriticalOut-of-band1%M365 Copilot Information Disclosure Vulnerability

CVE-2026-26120 ↗2026-03-19Microsoft BingCriticalOut-of-band1%Microsoft Bing Tampering Vulnerability

CVE-2026-26136 ↗2026-03-19Microsoft CopilotCriticalOut-of-band1%Microsoft Copilot Information Disclosure Vulnerability

CVE-2026-26137 ↗2026-03-19Microsoft Exchange OnlineCriticalOut-of-band1%Microsoft Exchange Elevation of Privilege Vulnerability

CVE-2026-26138 ↗2026-03-19Microsoft PurviewCriticalOut-of-band1%Microsoft Purview Elevation of Privilege Vulnerability

CVE-2026-26139 ↗2026-03-19Microsoft PurviewCriticalOut-of-band1%Microsoft Purview Elevation of Privilege Vulnerability

CVE-2026-32169 ↗2026-03-19Azure Cloud ShellCriticalOut-of-band1%Azure Cloud Shell Elevation of Privilege Vulnerability

CVE-2026-32191 ↗2026-03-19Microsoft Bing ImagesCriticalOut-of-band1%Microsoft Bing Images Remote Code Execution Vulnerability

CVE-2026-32194 ↗2026-03-19Microsoft Bing ImagesCriticalOut-of-band1%1 mentionsMicrosoft Bing Images Remote Code Execution Vulnerability

CVE-2026-26110 ↗2026-03-10Microsoft Office 2019 for 32-bit editionsCritical0%KB50028381 mentionsMicrosoft Office Remote Code Execution Vulnerability

CVE-2026-26113 ↗2026-03-10Microsoft SharePoint Enterprise Server 2016Critical1%KB5002843 KB5002845

and 4 more

KB5002847 KB5002848 KB5002850 KB5002851

1 mentionsMicrosoft Office Remote Code Execution Vulnerability

CVE-2026-26144 ↗2026-03-10Microsoft 365 Apps for Enterprise for 64-bit SystemsCritical1%1 mentionsMicrosoft Excel Information Disclosure Vulnerability

CVE-2026-21536 ↗2026-03-05Microsoft Devices Pricing ProgramCriticalOut-of-band2%Microsoft Devices Pricing Program Remote Code Execution Vulnerability

CVE-2026-23651 ↗2026-03-05Microsoft ACI Confidential ContainersCriticalOut-of-band1%Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

CVE-2026-26122 ↗2026-03-05Microsoft ACI Confidential ContainersCriticalOut-of-band1%Microsoft ACI Confidential Containers Information Disclosure Vulnerability

CVE-2026-26124 ↗2026-03-05Microsoft ACI Confidential ContainersCriticalOut-of-band0%Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

CVE-2026-26125 ↗2026-03-05Payment Orchestrator ServiceCriticalOut-of-band1%Payment Orchestrator Service Elevation of Privilege Vulnerability

CVE-2026-4739 ↗2026-04-02cbl2 cmake 3.21.4-23 on CBL Mariner 2.0CriticalOut-of-band—Integer overflow vulnerabilities in InsightSoftwareConsortium/ITK

CVE-2026-4176 ↗2026-04-01cbl2 binutils 2.37-20 on CBL Mariner 2.0CriticalOut-of-band—Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib

CVE-2026-33937 ↗2026-03-31cbl2 reaper 3.1.1-22 on CBL Mariner 2.0CriticalOut-of-band—Handlebars.js has JavaScript Injection via AST Type Confusion

CVE-2026-4746 ↗2026-03-27cbl2 binutils 2.37-20 on CBL Mariner 2.0CriticalOut-of-band—Heap Buffer Over-Write Vulenrabilty in timeplus-io/proton

CVE-2026-23395 ↗2026-03-26azl3 kernel 6.6.126.1-1 on Azure Linux 3.0CriticalOut-of-band—Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ

CVE-2025-69720 ↗2026-03-25azl3 ncurses 6.4-2 on Azure Linux 3.0CriticalOut-of-band—The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

CVE-2026-3381 ↗2026-03-07cbl2 boost 1.76.0-4 on CBL Mariner 2.0CriticalOut-of-band—Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

CVE-2026-21710 ↗2026-04-01cbl2 nodejs18 18.20.3-12ImportantOut-of-band26%A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`. When this occurs, `dest["__proto__"]` resolves to `Object.prototype` rather than `undefined`, causing `.push()` to be called on a non-array. This exception is thrown synchronously inside a property getter and cannot be intercepted by `error` event listeners, meaning it cannot be handled without wrapping every `req.headersDistinct` access in a `try/catch`. * This vulnerability affects all Node.js HTTP servers on **20.x, 22.x, 24.x, and v25.x**

CVE-2026-26133 ↗2026-03-12Microsoft OneNote for iOSImportantOut-of-band0%M365 Copilot Information Disclosure Vulnerability

CVE-2026-20967 ↗2026-03-10System Center Operations Manager 2019Important1%System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability

CVE-2026-21262 ↗2026-03-10Microsoft SQL Server 2017 for x64-based Systems (GDR)Important2%VulnCheckKB5077464 KB5077465

and 8 more

KB5077466 KB5077468 KB5077469 KB5077470 KB5077471 KB5077472 KB5077473 KB5077474

1 mentionsSQL Server Elevation of Privilege Vulnerability

CVE-2026-23654 ↗2026-03-10GitHub Repo: Zero Shot scFoundationImportant1%GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability

CVE-2026-23656 ↗2026-03-10Windows App Client for Windows DesktopImportant0%Windows App Installer Spoofing Vulnerability

CVE-2026-23660 ↗2026-03-10Windows Admin Center in Azure PortalImportant0%Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

CVE-2026-23661 ↗2026-03-10Azure IoT ExplorerImportant1%Azure IoT Explorer Information Disclosure Vulnerability

CVE-2026-23662 ↗2026-03-10Azure IoT ExplorerImportant1%Azure IoT Explorer Information Disclosure Vulnerability

CVE-2026-23664 ↗2026-03-10Azure IoT ExplorerImportant1%Azure IoT Explorer Information Disclosure Vulnerability

CVE-2026-23667 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5078752 KB5078883

and 4 more

KB5078885 KB5079420 KB5079466 KB5079473

Broadcast DVR Elevation of Privilege Vulnerability

CVE-2026-23668 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant4%More likelyKB5078734 KB5078737

and 7 more

KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2026-23669 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant1%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

RPC Runtime Library Remote Code Execution Vulnerability

CVE-2026-23671 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 10 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability

CVE-2026-23672 ↗2026-03-10Windows Server 2022 (Server Core installation)Important0%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVE-2026-23673 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVE-2026-23674 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant1%KB5078734 KB5078736

and 13 more

KB5078737 KB5078738 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

MapUrlToZone Security Feature Bypass Vulnerability

CVE-2026-24282 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078752 KB5078883

and 5 more

KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Push message Routing Service Elevation of Privilege Vulnerability

CVE-2026-24283 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 4 more

KB5078740 KB5079420 KB5079466 KB5079473

Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability

CVE-2026-24285 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5078734 KB5078736

and 11 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079473

Win32k Elevation of Privilege Vulnerability

CVE-2026-24287 ↗2026-03-10Windows Server 2022Important0%KB5078734 KB5078736

and 9 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078883 KB5078885 KB5079420 KB5079466 KB5079473

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-24288 ↗2026-03-10Windows 10 Version 21H2 for 32-bit SystemsImportant0%KB5078885Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVE-2026-24289 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant4%More likelyKB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-24290 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 9 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078883 KB5078885 KB5079420 KB5079466 KB5079473

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-24291 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant3%More likelyKB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

CVE-2026-24292 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5078734 KB5078736

and 9 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078883 KB5078885 KB5079420 KB5079466 KB5079473

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2026-24293 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant1%KB5078734 KB5078736

and 8 more

KB5078737 KB5078740 KB5078766 KB5078883 KB5078885 KB5079420 KB5079466 KB5079473

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-24294 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant5%More likelyKB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows SMB Server Elevation of Privilege Vulnerability

CVE-2026-24295 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 10 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-24296 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 11 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Device Association Service Elevation of Privilege Vulnerability

CVE-2026-24297 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5078752 KB5078774

and 3 more

KB5078775 KB5078885 KB5078938

Windows Kerberos Security Feature Bypass Vulnerability

CVE-2026-25165 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Performance Counters for Windows Elevation of Privilege Vulnerability

CVE-2026-25166 ↗2026-03-10Windows ADK for Windows 11, version 24H2Important2%Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability

CVE-2026-25167 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078736 KB5078740

and 3 more

KB5079420 KB5079466 KB5079473

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2026-25168 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Graphics Component Denial of Service Vulnerability

CVE-2026-25169 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Graphics Component Denial of Service Vulnerability

CVE-2026-25170 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 7 more

KB5078737 KB5078740 KB5078766 KB5078883 KB5079420 KB5079466 KB5079473

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-25171 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Authentication Elevation of Privilege Vulnerability

CVE-2026-25172 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant1%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079466 KB5079473 KB5084597

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2026-25173 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant1%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079466 KB5079473 KB5084597

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2026-25174 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability

CVE-2026-25175 ↗2026-03-10Windows Server 2022 (Server Core installation)Important0%KB5078734 KB5078737

and 7 more

KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938

Windows NTFS Elevation of Privilege Vulnerability

CVE-2026-25176 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-25177 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant1%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2026-25178 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-25179 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-25180 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant1%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Graphics Component Information Disclosure Vulnerability

CVE-2026-25181 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant1%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

GDI+ Information Disclosure Vulnerability

CVE-2026-25185 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant1%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Shell Link Processing Spoofing Vulnerability

CVE-2026-25186 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant1%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability

CVE-2026-25187 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant3%More likelyVulnCheckKB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

1 mentionsWinlogon Elevation of Privilege Vulnerability

CVE-2026-25188 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant1%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-25189 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5078737 KB5078752

and 2 more

KB5078766 KB5078885

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-25190 ↗2026-03-10Windows 11 Version 26H1 for ARM64-based SystemsImportant0%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows GDI Remote Code Execution Vulnerability

CVE-2026-26030 ↗2026-03-10Microsoft Semantic Kernel Python SDKImportant4%GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable

CVE-2026-26105 ↗2026-03-10Microsoft SharePoint Enterprise Server 2016Important1%KB5002843 KB5002845

and 1 more

KB5002850

Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-26106 ↗2026-03-10Microsoft SharePoint Enterprise Server 2016Important1%KB5002843 KB5002845

and 1 more

KB5002850

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-26107 ↗2026-03-10Office Online ServerImportant0%KB5002846 KB5002849Microsoft Excel Remote Code Execution Vulnerability

CVE-2026-26108 ↗2026-03-10Office Online ServerImportant0%KB5002718 KB5002846

and 1 more

KB5002849

Microsoft Excel Remote Code Execution Vulnerability

CVE-2026-26109 ↗2026-03-10Office Online ServerImportant0%KB5002846 KB5002849Microsoft Excel Remote Code Execution Vulnerability

CVE-2026-26111 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant1%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079466 KB5079473 KB5084597

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2026-26112 ↗2026-03-10Office Online ServerImportant0%KB5002846 KB5002849Microsoft Excel Remote Code Execution Vulnerability

CVE-2026-26114 ↗2026-03-10Microsoft SharePoint Enterprise Server 2016Important3%KB5002845 KB5002850Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-26115 ↗2026-03-10Microsoft SQL Server 2025 for x64-based Systems (GDR)Important1%KB5077464 KB5077465

and 8 more

KB5077466 KB5077468 KB5077469 KB5077470 KB5077471 KB5077472 KB5077473 KB5077474

SQL Server Elevation of Privilege Vulnerability

CVE-2026-26116 ↗2026-03-10Microsoft SQL Server 2025 for x64-based Systems (GDR)Important1%KB5077466 KB5077468SQL Server Elevation of Privilege Vulnerability

CVE-2026-26117 ↗2026-03-10Arc Enabled Servers - Azure Connected Machine AgentImportant0%Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

CVE-2026-26118 ↗2026-03-10Azure MCP Server Tools 2.0.0 (NuGet)Important1%Azure MCP Server Tools Elevation of Privilege Vulnerability

CVE-2026-26121 ↗2026-03-10Azure IoT ExplorerImportant1%Azure IOT Explorer Spoofing Vulnerability

CVE-2026-26123 ↗2026-03-10Microsoft Authenticator for AndroidImportant1%Microsoft Authenticator Information Disclosure Vulnerability

CVE-2026-26127 ↗2026-03-10Microsoft.Bcl.Memory 10.0Important2%VulnCheckKB5081276 KB50812781 mentions.NET Denial of Service Vulnerability

CVE-2026-26128 ↗2026-03-10Windows 10 Version 1809 for 32-bit SystemsImportant1%KB5078734 KB5078736

and 12 more

KB5078737 KB5078740 KB5078752 KB5078766 KB5078774 KB5078775 KB5078883 KB5078885 KB5078938 KB5079420 KB5079466 KB5079473

Windows SMB Server Elevation of Privilege Vulnerability

CVE-2026-26130 ↗2026-03-10ASP.NET Core 8.0Important3%KB5081276 KB5081277

and 1 more

KB5081278

ASP.NET Core Denial of Service Vulnerability

CVE-2026-26131 ↗2026-03-10.NET 10.0 installed on LinuxImportant0%KB5081276.NET Elevation of Privilege Vulnerability

CVE-2026-26132 ↗2026-03-10Windows Server 2022Important2%More likelyKB5078734 KB5078736

and 8 more

KB5078737 KB5078740 KB5078766 KB5078883 KB5078885 KB5079420 KB5079466 KB5079473

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-26134 ↗2026-03-10Microsoft Office for AndroidImportant0%Microsoft Office Elevation of Privilege Vulnerability

CVE-2026-26141 ↗2026-03-10Azure Automation Hybrid Worker Windows ExtensionImportant0%Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability

CVE-2026-26148 ↗2026-03-10Microsoft Azure AD SSH Login extension for LinuxImportant0%Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability

CVE-2026-32597 ↗2026-07-24azl3 python-jwt 2.8.0-2 on Azure Linux 3.0ImportantOut-of-band—PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

CVE-2026-31788 ↗2026-04-26cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0ImportantOut-of-band—xen/privcmd: restrict usage in unprivileged domU

CVE-2025-70873 ↗2026-04-18azl3 sqlite 3.44.0-2 on Azure Linux 3.0ImportantOut-of-band—An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

CVE-2026-32287 ↗2026-04-02cbl2 telegraf 1.29.4-22 on CBL Mariner 2.0ImportantOut-of-band—Infinite loop in github.com/antchfx/xpath

CVE-2026-29785 ↗2026-04-02cbl2 telegraf 1.29.4-22 on CBL Mariner 2.0ImportantOut-of-band—NATS Server panic via malicious compression on leafnode port

CVE-2026-33216 ↗2026-04-02cbl2 telegraf 1.29.4-22 on CBL Mariner 2.0ImportantOut-of-band—NATS has MQTT plaintext password disclosure

CVE-2026-4732 ↗2026-04-02azl3 libsndfile 1.2.2-4 on Azure Linux 3.0ImportantOut-of-band—Out-of-bounds Read Overflow in tildearrow/furnace

CVE-2026-5121 ↗2026-04-02cbl2 libarchive 3.6.1-9 on CBL Mariner 2.0ImportantOut-of-band—Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

CVE-2026-5201 ↗2026-04-02cbl2 gdk-pixbuf2 2.40.0-8 on CBL Mariner 2.0ImportantOut-of-band—Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

CVE-2026-33554 ↗2026-04-02cbl2 freeipmi 1.6.6-3 on CBL Mariner 2.0ImportantOut-of-band—ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermic

CVE-2026-4046 ↗2026-04-02cbl2 glibc 2.35-10 on CBL Mariner 2.0ImportantOut-of-band—iconv crash due to assertion failure with untrusted input

CVE-2026-34714 ↗2026-04-01cbl2 vim 9.2.0240-1 on CBL Mariner 2.0ImportantOut-of-band—Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.

CVE-2026-33940 ↗2026-03-31cbl2 reaper 3.1.1-22 on CBL Mariner 2.0ImportantOut-of-band—Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial

CVE-2026-33939 ↗2026-03-31cbl2 reaper 3.1.1-22 on CBL Mariner 2.0ImportantOut-of-band—Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation

CVE-2026-33941 ↗2026-03-31cbl2 reaper 3.1.1-22 on CBL Mariner 2.0ImportantOut-of-band—Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options

CVE-2026-33938 ↗2026-03-31cbl2 reaper 3.1.1-22 on CBL Mariner 2.0ImportantOut-of-band—Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

CVE-2026-33891 ↗2026-03-31cbl2 reaper 3.1.1-22 on CBL Mariner 2.0ImportantOut-of-band—Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input

CVE-2026-33896 ↗2026-03-31azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-band—Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

CVE-2026-33895 ↗2026-03-31azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-band—Forge has signature forgery in Ed25519 due to missing S > L check

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory

CiscoCVE-2026-20131trackedCVSS 10.0Cisco Secure Firewall Management Center (FMC) Appliances7.0Patch ↗Advisory ↗

Red HatCVE-2026-1615CVSS 9.8Red Hat Ansible Automation Platform 2.5registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8@sha256:0682e9e4bc9ad2b2b564fa2fa8b022e46729b27e26ec7b14ed2f1fae3e52a0d1_s390xPatch ↗Advisory ↗

Red HatCVE-2026-1615CVSS 9.8Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:293b2d26b9a82fa6a55dafb4c594287838cae765c358f3bdfea5b89d83f0391e_s390xPatch ↗Advisory ↗

Red HatCVE-2026-28498CVSS 9.1Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:111c3fa869282760a7408db240e5fbddd74816fa5ffc12578c267427eae8eb96_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-28802CVSS 9.1Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:111c3fa869282760a7408db240e5fbddd74816fa5ffc12578c267427eae8eb96_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-24046CVSS 9.1Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:2e8ed97c6e6d232f66bb81dc074b8bb2712dc54004cc565fcb1d2b43a9bb2046_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27606CVSS 9.1Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:2e8ed97c6e6d232f66bb81dc074b8bb2712dc54004cc565fcb1d2b43a9bb2046_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:72d72d0e8b67012bfaaeae0e1fbbcf8e35c74d4d6252051eabef3e9dd979d48e_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33211CVSS 9.6Red Hat OpenShift Pipelines 1.21registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:0eeefa13b3b9d1a03e25ec2e3e413bcd3d6d321a6acca853d6201f8943a62894_s390xPatch ↗Advisory ↗

Red HatCVE-2026-33211CVSS 9.6Red Hat OpenShift Pipelines 1.21registry.redhat.io/openshift-pipelines/pipelines-operator-bundle@sha256:6585794d76cffb3f87fc7eacb905f0dd5f02476f717c911f2c0faf7c4081a080_amd64Patch ↗Advisory ↗

Red HatCVE-2026-22797CVSS 9.9Red Hat OpenShift Container Platform 4.18registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:5790d9114681ad940a65723e23bed39b2f5eac1dbde017f368861222058064e8_arm64Patch ↗Advisory ↗

Red HatCVE-2026-27606CVSS 9.1Red Hat Trusted Artifact Signer 1.3registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:d23bf73126fb5c18ff24369bb05c7adb03e9f3fefdbb49795b8aeb3d7c223cdb_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27606CVSS 9.1Red Hat Quay 3.1registry.redhat.io/quay/quay-rhel8@sha256:6e13793ca8f309ec0b69ae609b840ff0f41989d88cd4bba127e1b0040631367e_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-27962CVSS 9.1Red Hat Quay 3.1registry.redhat.io/quay/quay-rhel8@sha256:6e13793ca8f309ec0b69ae609b840ff0f41989d88cd4bba127e1b0040631367e_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-28802CVSS 9.1Red Hat Quay 3.1registry.redhat.io/quay/quay-rhel8@sha256:6e13793ca8f309ec0b69ae609b840ff0f41989d88cd4bba127e1b0040631367e_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-27606CVSS 9.1Red Hat OpenShift Service Mesh 2.6registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:5a8a46e92a178be088251e0dcb67612d16bafeee910af6bd55de82a4727daa02_amd64Patch ↗Advisory ↗

Red HatCVE-2026-28802CVSS 9.1Red Hat Quay 3.9registry.redhat.io/quay/quay-rhel8@sha256:3e5ce0a56241c9804249dfb302cde02d2ffe30ba8fcd8aef8f1bce916d2324ad_ppc64lePatch ↗Advisory ↗

Red HatCVE-2025-15467CVSS 9.8Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:200c27e9b396276bd505c6b41127ac5eb1d94d620172cb818ae733f2a21ac524_amd64Patch ↗Advisory ↗

Red HatCVE-2026-22797CVSS 9.9Red Hat OpenShift Container Platform 4.19registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:64f69dda395c7912c23def5367853f2f34ad32581a76785202d864ae99c56219_arm64Patch ↗Advisory ↗

Red HatCVE-2026-28802CVSS 9.1Red Hat Quay 3.12registry.redhat.io/quay/quay-rhel8@sha256:2f62df99c2b7697461a2865380344c90a6fb8aec7b279f8f2f6e0684b662d19f_amd64Patch ↗Advisory ↗

Red HatCVE-2026-22797CVSS 9.9Red Hat OpenShift Container Platform 4.20registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:7e57a906f55fdc4522dd130c76942999c5c28f469579dcdda2e78949a860b8f8_arm64Patch ↗Advisory ↗

AndroidCVE-2024-43859Critical (Android rating):linux_kernel:—Patch ↗Advisory ↗

Red HatCVE-2025-15467CVSS 9.8Red Hat OpenShift Container Platform 4.13rhcos-x86_64-413.92.202602240113-0Patch ↗Advisory ↗

AndroidCVE-2026-0027Critical (Android rating):linux_kernel:—Patch ↗Advisory ↗

AndroidCVE-2026-0028Critical (Android rating):linux_kernel:—Patch ↗Advisory ↗

AndroidCVE-2026-0030Critical (Android rating):linux_kernel:—Patch ↗Advisory ↗

AndroidCVE-2026-0031Critical (Android rating):linux_kernel:—Patch ↗Advisory ↗

AndroidCVE-2026-0037Critical (Android rating):linux_kernel:—Patch ↗Advisory ↗

AndroidCVE-2026-0038Critical (Android rating):linux_kernel:—Patch ↗Advisory ↗

AndroidCVE-2026-0114Critical (Android rating)——no patch linkAdvisory ↗

AndroidCVE-2026-0120Critical (Android rating)——no patch linkAdvisory ↗

AndroidCVE-2026-0122Critical (Android rating)——no patch linkAdvisory ↗

AndroidCVE-2026-0124Critical (Android rating)——no patch linkAdvisory ↗

CiscoCVE-2026-20079CVSS 10.0Cisco Secure Firewall Management Center (FMC) Appliances7.0Patch ↗Advisory ↗

Red HatCVE-2026-22778CVSS 9.8Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9@sha256:30dd95f0c900b81b80e435796d82dd556814dd6d46c6b43b7dd879bcfdb8420e_amd64Patch ↗Advisory ↗

Red HatCVE-2026-22778CVSS 9.8Red Hat OpenShift AI 2.25registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:10ea60405654199ff5d09b50fc8b83f6d9bb9dda8057e18441dead800b8fa974_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-22797CVSS 9.9Red Hat OpenShift Container Platform 4.21registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:1d1766c76d70f3378b45f9065e5576251f3fee3d56ee379a9c55af86e1e70c44_arm64Patch ↗Advisory ↗

AndroidCVE-2025-48631Critical (Android rating)platform/frameworks/base—Patch ↗Advisory ↗

AndroidCVE-2026-0006Critical (Android rating)platform/external/libopenapv—Patch ↗Advisory ↗

AndroidCVE-2026-0047Critical (Android rating)platform/frameworks/base—Patch ↗Advisory ↗

Red HatCVE-2026-1207trackedCVSS 8.3Red Hat Satellite 6.17 for RHEL 9foreman-0:3.14.0.14-1.el9sat.srcPatch ↗Advisory ↗

Red HatCVE-2026-1207trackedCVSS 8.3Red Hat Satellite 6.16 for RHEL 8python-django-0:4.2.28-0.1.el8pc.srcPatch ↗Advisory ↗

Red HatCVE-2026-1207trackedCVSS 8.3Red Hat Ansible Automation Platform 2.6 for RHEL 9python3.12-django-0:4.2.28-1.el9ap.noarchPatch ↗Advisory ↗

Red HatCVE-2026-1207trackedCVSS 8.3Red Hat Ansible Automation Platform 2.5 for RHEL 8python3.12-django-0:4.2.28-1.el8ap.noarchPatch ↗Advisory ↗

Red HatCVE-2026-1207trackedCVSS 8.3Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:0b6086acb5dc2c46ba74583bbe1b39f22317a386fa4b89b6f592dfe6e9e10511_arm64Patch ↗Advisory ↗

Red HatCVE-2026-1207trackedCVSS 8.3Red Hat Ansible Automation Platform 2.5registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8@sha256:069c671a4745f1059e48d1813e593fc33665d9c4c1e0b14c12a0ca3bc8d32080_s390xPatch ↗Advisory ↗

AndroidCVE-2026-21385trackedHigh (Android rating):linux_kernel:Qualcomm—Patch ↗Advisory ↗

Red HatCVE-2025-62593trackedCVSS 8.8Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9@sha256:30dd95f0c900b81b80e435796d82dd556814dd6d46c6b43b7dd879bcfdb8420e_amd64Patch ↗Advisory ↗

Red HatCVE-2025-13465CVSS 8.2Red Hat Satellite 6.18registry.redhat.io/satellite/iop-remediations-rhel9@sha256:9e1aa62d0019dc33a52584e614a93edbc6111605ef0ed3cae0b9f900dbb9097e_amd64Patch ↗Advisory ↗

Red HatCVE-2025-47907CVSS 7.0Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:4736201438be34ef50de48b9a3d66db5afc5e5831f43c03b0997868601f6a9df_ppc64lePatch ↗Advisory ↗

Red HatCVE-2025-58183CVSS 7.5Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:4736201438be34ef50de48b9a3d66db5afc5e5831f43c03b0997868601f6a9df_ppc64lePatch ↗Advisory ↗

Red HatCVE-2025-59343CVSS 7.5Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:035d205705b2efd62713bea9d05cffdc5db7a437f050c4a3e3f12746b05c29d4_arm64Patch ↗Advisory ↗

Red HatCVE-2025-61726CVSS 7.5Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:4736201438be34ef50de48b9a3d66db5afc5e5831f43c03b0997868601f6a9df_ppc64lePatch ↗Advisory ↗

Red HatCVE-2025-61726CVSS 7.5OpenShift API for Data Protection 1.4registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:713a90e0460a0739f6a173413b7b4a4f007b9dc385a13d473eb90f42fc8488dc_amd64Patch ↗Advisory ↗

Red HatCVE-2025-61726CVSS 7.5Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-gateway-proxy-0:2.6.14-1.el9.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61726CVSS 7.5Red Hat Ansible Automation Platform 2.5 for RHEL 8automation-gateway-proxy-0:2.5.10-4.el8ap.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61728CVSS 7.5Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:4736201438be34ef50de48b9a3d66db5afc5e5831f43c03b0997868601f6a9df_ppc64lePatch ↗Advisory ↗

Red HatCVE-2025-61728CVSS 7.5OpenShift API for Data Protection 1.4registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:23a27c4df14f18ee490a8d3cff7e0f15fe8dba28888ec53999dfa1c2d8df8a17_ppc64lePatch ↗Advisory ↗

Red HatCVE-2025-61729CVSS 7.5Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:4736201438be34ef50de48b9a3d66db5afc5e5831f43c03b0997868601f6a9df_ppc64lePatch ↗Advisory ↗

Red HatCVE-2025-66418CVSS 7.5Red Hat Satellite 6.18registry.redhat.io/satellite/iop-insights-engine-rhel9@sha256:79b070bb3101ac3fd8c9b7d0ba9425dccf9f9e76cb9430373d0c963edc0a52bb_amd64Patch ↗Advisory ↗

Red HatCVE-2025-66471CVSS 7.5Red Hat Satellite 6.18registry.redhat.io/satellite/iop-insights-engine-rhel9@sha256:79b070bb3101ac3fd8c9b7d0ba9425dccf9f9e76cb9430373d0c963edc0a52bb_amd64Patch ↗Advisory ↗

Red HatCVE-2025-68121CVSS 7.4Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:4736201438be34ef50de48b9a3d66db5afc5e5831f43c03b0997868601f6a9df_ppc64lePatch ↗Advisory ↗

Red HatCVE-2025-68121CVSS 7.4Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-gateway-proxy-0:2.6.14-1.el9.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-68121CVSS 7.4Red Hat Ansible Automation Platform 2.5 for RHEL 8automation-gateway-proxy-0:2.5.10-4.el8ap.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-69223CVSS 7.5Red Hat Ansible Automation Platform 2.5registry.redhat.io/ansible-automation-platform-25/lightspeed-chatbot-rhel8@sha256:2f9ec28f18893b516b9dadcce88a8efaa908e916305f7b802f250c2283c37cb5_ppc64lePatch ↗Advisory ↗

Red HatCVE-2025-69223CVSS 7.5Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:111c3fa869282760a7408db240e5fbddd74816fa5ffc12578c267427eae8eb96_ppc64lePatch ↗Advisory ↗

Red HatCVE-2025-69873CVSS 7.5Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-platform-ui-0:2.6.7-1.el9ap.noarchPatch ↗Advisory ↗

Red HatCVE-2025-69873CVSS 7.5Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:01fd1e73fd125672778315487a4aa0ae13b7aac2b386d70facd7439d23ee0219_amd64Patch ↗Advisory ↗

Red HatCVE-2026-21441CVSS 7.5Red Hat Satellite 6.18registry.redhat.io/satellite/iop-advisor-frontend-rhel9@sha256:b16098ff4d22e3fc7cad21e8fe6988c8f38ef080e04df342deb1e2896b538f5d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-21441CVSS 7.5Red Hat Satellite 6.18registry.redhat.io/satellite/iop-insights-engine-rhel9@sha256:79b070bb3101ac3fd8c9b7d0ba9425dccf9f9e76cb9430373d0c963edc0a52bb_amd64Patch ↗Advisory ↗

Red HatCVE-2026-25639CVSS 7.5Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-platform-ui-0:2.6.7-1.el9ap.noarchPatch ↗Advisory ↗

Red HatCVE-2026-25639CVSS 7.5Red Hat Ansible Automation Platform 2.5registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8@sha256:0682e9e4bc9ad2b2b564fa2fa8b022e46729b27e26ec7b14ed2f1fae3e52a0d1_s390xPatch ↗Advisory ↗

Red HatCVE-2026-25639CVSS 7.5Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:01fd1e73fd125672778315487a4aa0ae13b7aac2b386d70facd7439d23ee0219_amd64Patch ↗Advisory ↗

Red HatCVE-2026-25990CVSS 7.3Red Hat Ansible Automation Platform 2.6 for RHEL 9python3.12-pillow-0:12.1.1-1.el9ap.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-25990CVSS 7.3Red Hat Ansible Automation Platform 2.5 for RHEL 8python3.12-pillow-0:12.1.1-1.el8ap.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-25990CVSS 7.3Red Hat Ansible Automation Platform 2.5registry.redhat.io/ansible-automation-platform-25/lightspeed-chatbot-rhel8@sha256:2f9ec28f18893b516b9dadcce88a8efaa908e916305f7b802f250c2283c37cb5_ppc64lePatch ↗Advisory ↗