CYBERSECURITYTRACKER
TRACKING3,967 stories737 vuln stories
Patch Day month

March 2026 vulnerabilities

A defender-focused view of 1,067 vulnerabilities across 3,312 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.

3,312all patch recordsClear filters78criticalShow these records0Microsoft exploitation detectedShow these records2Microsoft in CISA KEVShow these records200tracked hereShow these records

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An EPSS percentage is the global 30-day exploitation probability in the wild, not specific to you.

Page 17 of 17 · records 3,201–3,312 of 3,312

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-4442 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4442 Heap buffer overflow in CSS
CVE-2026-4680 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4680 Use after free in FedCM
CVE-2026-4677 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4677 Out of bounds read in WebAudio
CVE-2026-4679 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4679 Integer overflow in Fonts
CVE-2026-4675 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4675 Heap buffer overflow in WebGL
CVE-2026-4674 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4674 Out of bounds read in CSS
CVE-2026-4673 ↗Microsoft Edge (Chromium-based)N/AOut-of-band1%Chromium: CVE-2026-4673 Heap buffer overflow in WebAudio
CVE-2026-4678 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4678 Use after free in WebGPU
CVE-2026-4676 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4676 Use after free in Dawn
CVE-2026-4464 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4464 Integer overflow in ANGLE
CVE-2026-4463 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4463 Heap buffer overflow in WebRTC
CVE-2026-4462 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4462 Out of bounds read in Blink
CVE-2026-4461 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4461 Inappropriate implementation in V8
CVE-2026-4460 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4460 Out of bounds read in Skia
CVE-2026-4458 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4458 Use after free in Extensions
CVE-2026-4457 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4457 Type Confusion in V8
CVE-2026-4456 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4456 Use after free in Digital Credentials API
CVE-2026-4454 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4454 Use after free in Network
CVE-2026-4455 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4455 Heap buffer overflow in PDFium
CVE-2026-4452 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4452 Integer overflow in ANGLE
CVE-2026-4451 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4451 Insufficient validation of untrusted input in Navigation
CVE-2026-4450 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4450 Out of bounds write in V8
CVE-2026-4449 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4449 Use after free in Blink
CVE-2026-4448 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4448 Heap buffer overflow in ANGLE
CVE-2026-4447 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4447 Inappropriate implementation in V8
CVE-2026-4446 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4446 Use after free in WebRTC
CVE-2026-4445 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4445 Use after free in WebRTC
CVE-2026-4444 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4444 Stack buffer overflow in WebRTC
CVE-2026-4443 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4443 Heap buffer overflow in WebAudio
CVE-2026-4441 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4441 Use after free in Base
CVE-2026-4440 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4440 Out of bounds read and write in WebGL
CVE-2026-4459 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4459 Out of bounds read and write in WebAudio
CVE-2026-4453 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-4453 Integer overflow in Dawn
CVE-2026-3942 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3942 Incorrect security UI in PictureInPicture
CVE-2026-3941 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3941 Insufficient policy enforcement in DevTools
CVE-2026-3940 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3940 Insufficient policy enforcement in DevTools
CVE-2026-3939 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3939 Use after free in WebView
CVE-2026-3938 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3938 Insufficient policy enforcement in Clipboard
CVE-2026-3937 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3937 Incorrect security UI in Downloads
CVE-2026-3936 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3936 Use after free in WebView
CVE-2026-3935 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3935 Incorrect security UI in WebAppInstalls
CVE-2026-3934 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3934 Insufficient policy enforcement in ChromeDriver
CVE-2026-3932 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3932 Insufficient policy enforcement in PDF
CVE-2026-3931 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3931 Heap buffer overflow in Skia
CVE-2026-3930 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3930 Unsafe navigation in Navigation
CVE-2026-3929 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3929 Side-channel information leakage in ResourceTiming
CVE-2026-3928 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3928 Insufficient policy enforcement in Extensions
CVE-2026-3927 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3927 Incorrect security UI in PictureInPicture
CVE-2026-3926 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3926 Out of bounds read in V8
CVE-2026-3925 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3925 Incorrect security UI in LookalikeChecks
CVE-2026-3924 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3924 Use after free in WindowDialog
CVE-2026-3923 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3923 Use after free in WebMIDI
CVE-2026-3922 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3922 Use after free in MediaStream
CVE-2026-3921 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3921 Use after free in TextEncoding
CVE-2026-3920 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3920 Out of bounds memory access in WebML
CVE-2026-3919 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3919 Use after free in Extensions
CVE-2026-3918 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3918 Use after free in WebMCP
CVE-2026-3917 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3917 Use after free in Agents
CVE-2026-3916 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3916 Out of bounds read in Web Speech
CVE-2026-3915 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3915 Heap buffer overflow in WebML
CVE-2026-3914 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3914 Integer overflow in WebML
CVE-2026-3913 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3913 Heap buffer overflow in WebML
CVE-2026-3537 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3537 Object lifecycle issue in PowerVR
CVE-2026-3545 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3545 Insufficient data validation in Navigation
CVE-2026-3544 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3544 Heap buffer overflow in WebCodecs
CVE-2026-3543 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3543 Inappropriate implementation in V8
CVE-2026-3542 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3542 Inappropriate implementation in WebAssembly
CVE-2026-3541 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3541 Inappropriate implementation in CSS
CVE-2026-3540 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3540 Inappropriate implementation in WebAudio
CVE-2026-3539 ↗Microsoft Edge (Chromium-based)N/AOut-of-bandChromium: CVE-2026-3539 Object lifecycle issue in DevTools
CVE-2026-3538 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3538 Integer overflow in Skia
CVE-2026-3536 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-3536 Integer overflow in ANGLE

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.8.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.0)thunderbird-0:140.8.0-1.el9_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.8.0-2.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)thunderbird-0:140.8.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.8.0-2.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)thunderbird-0:140.8.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)thunderbird-0:140.8.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)thunderbird-0:140.8.0-2.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.4)thunderbird-0:140.8.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.8.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.0)thunderbird-0:140.8.0-1.el9_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.8.0-2.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)thunderbird-0:140.8.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-53643CVSS 3.7Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:0bbb4673bdbb03bc100b968867e6c063a847e1ae40caaf8c93157875861ab7c1_arm64Patch ↗Advisory ↗
Red HatCVE-2026-1190CVSS 3.1Red Hat build of Keycloak 26.4.10Patch ↗Advisory ↗
Red HatCVE-2026-1190CVSS 3.1Red Hat build of Keycloak 26.4rhbk/keycloak-operator-bundle@sha256:ae13f29ccde0ddf5d96d14567177fcdfa2dd12cb29ca7793b47c857436d2a3e8_amd64Patch ↗Advisory ↗
Red HatCVE-2026-2733CVSS 3.8Red Hat build of Keycloak 26.4.10Patch ↗Advisory ↗
Red HatCVE-2026-2733CVSS 3.8Red Hat build of Keycloak 26.4rhbk/keycloak-operator-bundle@sha256:ae13f29ccde0ddf5d96d14567177fcdfa2dd12cb29ca7793b47c857436d2a3e8_amd64Patch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.8.0-2.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v. 8.2)firefox-0:140.8.0-2.el8_2.srcPatch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.0)firefox-0:140.8.0-2.el9_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.8.0-2.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.8.0-2.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.4)firefox-0:140.8.0-2.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.8.0-2.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.8.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.8.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2790CVSS 3.4Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.8.0-2.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.8.0-2.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v. 8.2)firefox-0:140.8.0-2.el8_2.srcPatch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.0)firefox-0:140.8.0-2.el9_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.8.0-2.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.8.0-2.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.4)firefox-0:140.8.0-2.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.8.0-2.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.8.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.8.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2791CVSS 3.4Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.8.0-2.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-45768CVSS 0.0Red Hat Quay 3.14registry.redhat.io/quay/quay-rhel8@sha256:05cc4b4410de27e32897492effb21362d8c1bc8cc56e9408fc9a19f9f3149899_arm64Patch ↗Advisory ↗
Red HatCVE-2022-32296CVSS 0.0Red Hat AI Inference Server 3.2registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:2fd4f343235f7e896a70169fc4b856343d639c65bec77c1883cbd8210caf3a92_amd64Patch ↗Advisory ↗