Patch Day month
March 2026 vulnerabilities
A defender-focused view of 1,067 vulnerabilities across 3,312 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An EPSS percentage is the global 30-day exploitation probability in the wild, not specific to you.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 13 of 17 · records 2,401–2,600 of 3,312
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2025-69644 ↗cbl2 binutils 2.37-20ModerateOut-of-band0%An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file.
CVE-2026-23385 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-band—netfilter: nf_tables: clone set on flush only
CVE-2026-4948 ↗cbl2 firewalld 1.0.3-2 on CBL Mariner 2.0ModerateOut-of-band—Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
CVE-2026-23362 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0ModerateOut-of-band—can: bcm: fix locking for bcm_op runtime updates
CVE-2026-23394 ↗azl3 kernel 6.6.134.1-2 on Azure Linux 3.0ModerateOut-of-band—af_unix: Give up GC if MSG_PEEK intervened.
CVE-2026-23360 ↗azl3 kernel 6.6.130.1-3 on Azure Linux 3.0ModerateOut-of-band—nvme: fix admin queue leak on controller reset
CVE-2026-2436 ↗azl3 libsoup 3.4.4-14 on Azure Linux 3.0ModerateOut-of-band—Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake
CVE-2026-4897 ↗cbl2 polkit 0.119-4 on CBL Mariner 2.0ModerateOut-of-band—Polkit: polkit: denial of service via unbounded input processing through standard input
CVE-2026-2100 ↗cbl2 p11-kit 0.24.1-1 on CBL Mariner 2.0ModerateOut-of-band—P11-kit: p11-kit: null dereference via c_derivekey with specific null parameters
CVE-2026-5119 ↗cbl2 libsoup 3.0.4-13 on CBL Mariner 2.0ModerateOut-of-band—Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment
CVE-2026-21711 ↗azl3 nodejs24 24.14.1-2 on Azure Linux 3.0ModerateOut-of-band—A flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server operations without the required permission checks, while all comparable network paths correctly enforce them.
As a result, code running under `--permission` without `--allow-net` can create and expose local IPC endpoints, allowing communication with other processes on the same host outside of the intended network restriction boundary.
This vulnerability affects Node.js **25.x** processes using the Permission Model where `--allow-net` is intentionally omitted to restrict network access. Note that `--allow-net` is currently an experimental feature.
CVE-2026-21713 ↗azl3 nodejs 20.14.0-14 on Azure Linux 3.0ModerateOut-of-band—A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior could be exploited as a timing oracle to infer HMAC values.
Node.js already provides timing-safe comparison primitives used elsewhere in the codebase, indicating this is an oversight rather than an intentional design decision.
This vulnerability affects **20.x, 22.x, 24.x, and 25.x**.
CVE-2026-21714 ↗azl3 nodejs24 24.13.0-3 on Azure Linux 3.0ModerateOut-of-band—A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow control window to exceed the maximum value of 2³¹-1. The server correctly sends a GOAWAY frame, but the Http2Session object is never cleaned up.
This vulnerability affects HTTP2 users on Node.js 20, 22, 24 and 25.
CVE-2026-34043 ↗cbl2 reaper 3.1.1-22 on CBL Mariner 2.0ModerateOut-of-band—Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects
CVE-2026-21717 ↗azl3 nodejs 20.14.0-15 on Azure Linux 3.0ModerateOut-of-band—A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8's internal string table, an attacker can significantly degrade performance of the Node.js process.
The most common trigger is any endpoint that calls `JSON.parse()` on attacker-controlled input, as JSON parsing automatically internalizes short strings into the affected hash table.
This vulnerability affects **20.x, 22.x, 24.x, and 25.x**.
CVE-2026-33916 ↗cbl2 reaper 3.1.1-22 on CBL Mariner 2.0ModerateOut-of-band—Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection
CVE-2026-33542 ↗azl3 telegraf 1.31.0-19 on Azure Linux 3.0ModerateOut-of-band—Incus does not verify combined fingerprint when downloading images from simplestreams servers
CVE-2026-33750 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ModerateOut-of-band—brace-expansion: Zero-step sequence causes process hang and memory exhaustion
CVE-2026-34353 ↗azl3 ocaml 5.1.1-1 on Azure Linux 3.0ModerateOut-of-band—In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.
CVE-2026-21712 ↗azl3 nodejs24 24.13.0-3 on Azure Linux 3.0ModerateOut-of-band—A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.
CVE-2026-0964 ↗azl3 libssh 0.10.6-5 on Azure Linux 3.0ModerateOut-of-band—Libssh: improper sanitation of paths received from scp servers
CVE-2026-0966 ↗azl3 libssh 0.10.6-5 on Azure Linux 3.0ModerateOut-of-band—Libssh: buffer underflow in ssh_get_hexa() on invalid input
CVE-2026-4833 ↗azl3 rubygem-rdiscount 2.2.7.1-1 on Azure Linux 3.0ModerateOut-of-band—Orc discount Markdown markdown.c compile recursion
CVE-2026-33672 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ModerateOut-of-band—Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching
CVE-2026-23399 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—nf_tables: nft_dynset: fix possible stateful expression memleak in error path
CVE-2026-25645 ↗azl3 python-requests 2.31.0-3 on Azure Linux 3.0ModerateOut-of-band—Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
CVE-2026-3591 ↗azl3 bind 9.20.18-1 on Azure Linux 3.0ModerateOut-of-band—A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass
CVE-2026-3119 ↗azl3 bind 9.20.18-1 on Azure Linux 3.0ModerateOut-of-band—Authenticated query containing a TKEY record may cause named to terminate unexpectedly
CVE-2026-33936 ↗azl3 python-ecdsa 0.18.0-2 on Azure Linux 3.0ModerateOut-of-band—python-ecdsa: Denial of Service via improper DER length validation in crafted private keys
CVE-2026-33343 ↗cbl2 etcd 3.5.21-4 on CBL Mariner 2.0ModerateOut-of-band—etcd: Nested etcd transactions bypass RBAC authorization checks
CVE-2026-4647 ↗cbl2 binutils 2.37-20 on CBL Mariner 2.0ModerateOut-of-band—Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library
CVE-2026-23396 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—wifi: mac80211: fix NULL deref in mesh_matches_local()
CVE-2026-23398 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—icmp: fix NULL pointer dereference in icmp_tag_validation()
CVE-2026-28755 ↗azl3 nginx 1.28.2-1 on Azure Linux 3.0ModerateOut-of-band—NGINX ngx_stream_ssl_module vulnerability
CVE-2026-28753 ↗azl3 nginx 1.28.2-1 on Azure Linux 3.0ModerateOut-of-band—NGINX ngx_mail_proxy_module vulnerability
CVE-2026-33515 ↗azl3 squid 6.13-3 on Azure Linux 3.0ModerateOut-of-band—Squid has issues in ICP message handling
CVE-2026-34085 ↗azl3 fontconfig 2.14.2-1 on Azure Linux 3.0ModerateOut-of-band—fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontCapabilities in fcfreetype.c.
CVE-2026-23284 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
CVE-2026-23365 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—net: usb: kalmia: validate USB endpoints
CVE-2026-23379 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—net/sched: ets: fix divide by zero in the offload path
CVE-2026-23279 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
CVE-2026-23324 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
CVE-2026-23389 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—ice: Fix memory leak in ice_set_ringparam()
CVE-2026-23356 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
CVE-2026-23347 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—can: usb: f81604: correctly anchor the urb in the read bulk callback
CVE-2026-23317 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
CVE-2026-23381 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
CVE-2026-23319 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
CVE-2026-23357 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—can: mcp251x: fix deadlock in error path of mcp251x_open
CVE-2026-23291 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—nfc: pn533: properly drop the usb interface reference on disconnect
CVE-2026-23302 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—net: annotate data-races around sk->sk_{data_ready,write_space}
CVE-2026-23371 ↗azl3 kernel 6.6.130.1-3 on Azure Linux 3.0ModerateOut-of-band—sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
CVE-2026-23298 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—can: ucan: Fix infinite loop from zero-length messages
CVE-2026-23290 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—net: usb: pegasus: validate USB endpoints
CVE-2026-23320 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—usb: gadget: f_ncm: align net_device lifecycle with bind/unbind
CVE-2026-23304 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
CVE-2026-23303 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—smb: client: Don't log plaintext credentials in cifs_set_cifscreds
CVE-2026-23334 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—can: usb: f81604: handle short interrupt urb messages properly
CVE-2026-23348 ↗azl3 kernel 6.6.130.1-3 on Azure Linux 3.0ModerateOut-of-band—cxl: Fix race of nvdimm_bus object when creating nvdimm objects
CVE-2026-23346 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—arm64: io: Extract user memory type in ioremap_prot()
CVE-2026-23307 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
CVE-2026-23383 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
CVE-2026-23292 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—scsi: target: Fix recursive locking in __configfs_open_file()
CVE-2026-23390 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
CVE-2026-23368 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
CVE-2026-23286 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
CVE-2026-23285 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—drbd: fix null-pointer dereference on local read error
CVE-2026-23312 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—net: usb: kaweth: validate USB endpoints
CVE-2026-23382 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
CVE-2026-23333 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—netfilter: nft_set_rbtree: validate open interval overlap
CVE-2026-23370 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ModerateOut-of-band—platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
CVE-2026-29111 ↗cbl2 systemd-bootstrap 250.3-13 on CBL Mariner 2.0ModerateOut-of-band—systemd: Local unprivileged user can trigger an assert
CVE-2026-33412 ↗azl3 vim 9.2.0088-1 on Azure Linux 3.0ModerateOut-of-band—Vim affected by Command injection via newline in glob()
CVE-2026-2646 ↗cbl2 mariadb 10.6.25-1 on CBL Mariner 2.0ModerateOut-of-band—Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function
CVE-2026-2645 ↗cbl2 mariadb 10.6.25-1 on CBL Mariner 2.0ModerateOut-of-band—Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2
CVE-2026-3503 ↗cbl2 mariadb 10.6.24-1 on CBL Mariner 2.0ModerateOut-of-band—Fault injection attack with ML-DSA and ML-KEM on ARM
CVE-2026-3849 ↗cbl2 mariadb 10.6.25-1 on CBL Mariner 2.0ModerateOut-of-band—Buffer Overflow in HPKE via Oversized ECH Config
CVE-2026-2369 ↗cbl2 libsoup 3.0.4-12 on CBL Mariner 2.0ModerateOut-of-band—Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources
CVE-2026-3099 ↗azl3 libsoup 3.4.4-12 on Azure Linux 3.0ModerateOut-of-band—Libsoup: libsoup: authentication bypass via digest authentication replay attack
CVE-2026-4426 ↗azl3 libarchive 3.7.7-4 on Azure Linux 3.0ModerateOut-of-band—Libarchive: libarchive: denial of service via malformed iso file processing
CVE-2026-33055 ↗cbl2 kata-containers 3.2.0.azl2-7 on CBL Mariner 2.0ModerateOut-of-band—tar-rs incorrectly ignores PAX size headers if header size is nonzero
CVE-2026-33056 ↗azl3 kata-containers-cc 3.15.0.aks0-7 on Azure Linux 3.0ModerateOut-of-band—tar-rs: unpack_in can chmod arbitrary directories by following symlinks
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
AndroidCVE-2026-0024High (Android rating)platform/packages/providers/MediaProvider—Patch ↗Advisory ↗
AndroidCVE-2026-0035High (Android rating)platform/packages/providers/MediaProvider—Patch ↗Advisory ↗
Red HatCVE-2025-67725trackedCVSS 5.3Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:796df53d5198c082dc00163036eb0771096d4b33a205253489879ae7c2fe9788_arm64Patch ↗Advisory ↗
Red HatCVE-2025-67726trackedCVSS 5.3Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:796df53d5198c082dc00163036eb0771096d4b33a205253489879ae7c2fe9788_arm64Patch ↗Advisory ↗
Red HatCVE-2023-40403CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)libxslt-0:1.1.34-14.el9_7.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-57810CVSS 5.3Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:035d205705b2efd62713bea9d05cffdc5db7a437f050c4a3e3f12746b05c29d4_arm64Patch ↗Advisory ↗
Red HatCVE-2025-58754CVSS 5.3Red Hat multicluster global hub 1.6.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:035d205705b2efd62713bea9d05cffdc5db7a437f050c4a3e3f12746b05c29d4_arm64Patch ↗Advisory ↗
Red HatCVE-2026-0865CVSS 4.5Red Hat Enterprise Linux AppStream EUS (v.9.4)python3.11-0:3.11.7-1.el9_4.11.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-1642CVSS 5.9Red Hat Enterprise Linux AppStream EUS (v.9.4)nginx-1:1.20.1-16.el9_4.4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-1642CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.2)nginx-1:1.20.1-14.el9_2.4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-1642CVSS 5.9Red Hat Enterprise Linux AppStream EUS (v.9.6)nginx-1:1.24.0-4.module+el9.6.0+24139+44cdd49a.1.aarch64::nginx:1.24Patch ↗Advisory ↗
Red HatCVE-2026-27904CVSS 6.5Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-platform-ui-0:2.6.7-1.el9ap.noarchPatch ↗Advisory ↗
Red HatCVE-2012-6329Moderate (Red Hat rating)Red Hat Hardened Imagesperl-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2015-8853Moderate (Red Hat rating)Red Hat Hardened Imagesperl-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2016-2381Moderate (Red Hat rating)Red Hat Hardened Imagesperl-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2025-4949CVSS 4.8Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 Servereap7-eclipse-jgit-0:5.13.5.202508271544-1.r_redhat_00001.1.el7eap.noarchPatch ↗Advisory ↗
Red HatCVE-2025-54386CVSS 6.4Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/traefik-rhel9@sha256:12ae1997a6df944284ecfb3501138c25f1a39eba23b52685b48008174a6a363a_s390xPatch ↗Advisory ↗
Red HatCVE-2026-1002CVSS 5.3Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/server-rhel9@sha256:4550375a1ce30dfa306ac819590e0f95f512a7f9036e756e0ed643297f7555fe_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-1642CVSS 5.9Red Hat Enterprise Linux AppStream EUS (v.9.6)nginx-2:1.20.1-22.el9_6.4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-22045CVSS 5.9Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/traefik-rhel9@sha256:12ae1997a6df944284ecfb3501138c25f1a39eba23b52685b48008174a6a363a_s390xPatch ↗Advisory ↗
Red HatCVE-2026-23893CVSS 6.8Red Hat Enterprise Linux BaseOS EUS (v.9.4)opencryptoki-0:3.22.0-3.el9_4.2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-26996CVSS 6.5Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/code-rhel9@sha256:1033ffe714e728e289eddaa3809e9d21915de193813339fa5c049373e3e78719_amd64Patch ↗Advisory ↗
Red HatCVE-2026-33022CVSS 6.5Red Hat OpenShift Pipelines 1.21registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:3fcac1d8ade2f968d743f6bcc1d505933746e6dd83878ff2f1656cec005a107c_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-33022CVSS 6.5Red Hat OpenShift Pipelines 1.21registry.redhat.io/openshift-pipelines/pipelines-operator-bundle@sha256:6585794d76cffb3f87fc7eacb905f0dd5f02476f717c911f2c0faf7c4081a080_amd64Patch ↗Advisory ↗
Red HatCVE-2026-3889CVSS 5.4Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4701CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4702CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4705CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4706CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4707CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4708CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4709CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4710CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4711CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4712CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4713CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4714CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4715CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4716CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4717CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23893CVSS 6.8Red Hat Enterprise Linux BaseOS EUS (v. 10.0)opencryptoki-0:3.24.0-6.el10_0.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23893CVSS 6.8Red Hat Enterprise Linux BaseOS EUS (v.9.6)opencryptoki-0:3.24.0-5.el9_6.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4324CVSS 5.4Red Hat Satellite 6.18 for RHEL 9rubygem-katello-0:4.18.0.9-1.el9sat.noarchPatch ↗Advisory ↗
Red HatCVE-2026-4324CVSS 5.4Red Hat Satellite 6.17 for RHEL 9foreman-0:3.14.0.14-1.el9sat.srcPatch ↗Advisory ↗
Red HatCVE-2026-4701CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4701CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4701CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4702CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4702CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4702CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4705CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4705CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4705CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4706CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4706CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4706CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4707CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4707CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4707CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4708CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4708CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4708CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4709CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4709CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4709CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4710CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4710CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4710CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4711CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4711CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4711CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4712CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4712CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4712CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4713CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4713CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4713CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4714CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4714CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4714CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4715CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4715CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4715CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4716CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4716CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4716CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4717CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4717CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4717CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-12801CVSS 6.5Red Hat OpenShift Container Platform 4.18rhcos-aarch64-418.94.202603181125-0Patch ↗Advisory ↗
Red HatCVE-2025-38154CVSS 6.7Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)kernel-rt-0:5.14.0-284.161.1.rt14.446.el9_2.srcPatch ↗Advisory ↗
Red HatCVE-2025-38154CVSS 6.7Red Hat Enterprise Linux AppStream E4S (v.9.2)bpftool-debuginfo-0:7.0.0-284.161.1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-6193CVSS 5.9Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel8@sha256:297d22ca72b764328f7d0b85f7f7c013c91ca85d70f08be45a6689c85da6b311_amd64Patch ↗Advisory ↗
Red HatCVE-2025-66031CVSS 5.3Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-dashboard-rhel8@sha256:022c21f044dead0ff28bfc5fb5fb2fd51f3ed8e1a6cfc90bd18222abf0388018_amd64Patch ↗Advisory ↗
Red HatCVE-2025-68131CVSS 5.3Red Hat AI Inference Server 3.2registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:bd371b1b8785b2f5799cbca4a12a1c66a1e8a37017334a79eaa1067b24b6a6ba_amd64Patch ↗Advisory ↗
Red HatCVE-2025-69228CVSS 6.8Red Hat AI Inference Server 3.2registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:bd371b1b8785b2f5799cbca4a12a1c66a1e8a37017334a79eaa1067b24b6a6ba_amd64Patch ↗Advisory ↗
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.