CYBERSECURITYTRACKER
Vulnerabilities

March 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 0 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 1,070 vulnerabilities across 3,315 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.

3,315all patch recordsClear filters79criticalShow these records0Microsoft exploitation detectedShow these records2Microsoft in the Known Exploited Vulnerabilities catalogShow these records2,459tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 2 of 17 · records 201 to 400 of 3,315

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-33671 ↗azl3 nodejs24 24.13.0-3 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablePicomatch has a ReDoS vulnerability via extglob quantifiers
CVE-2025-67030 ↗cbl2 javapackages-bootstrap 1.5.0-7 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableDirectory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
CVE-2026-3104 ↗azl3 bind 9.20.18-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableMemory leak in code preparing DNSSEC proofs of non-existence
CVE-2026-32241 ↗azl3 flannel 0.24.2-26 on Azure Linux 3.0ImportantOut-of-band3%Microsoft rating unavailableFlannel vulnerable to cross-node remote code execution via extension backend BackendData injection
CVE-2026-1519 ↗cbl2 bind 9.16.50-3 on CBL Mariner 2.0ImportantOut-of-band2%Microsoft rating unavailableExcessive NSEC3 iterations cause high CPU load during insecure delegation validation
CVE-2026-33413 ↗cbl2 etcd 3.5.21-4 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableetcd: Authorization bypasses in multiple APIs
CVE-2026-4775 ↗cbl2 libtiff 4.6.0-12 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableLibtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
CVE-2026-23397 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsnfnetlink_osf: validate individual option lengths in fingerprints
CVE-2026-32647 ↗azl3 nginx 1.28.2-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableNGINX ngx_http_mp4_module vulnerability
CVE-2026-27784 ↗azl3 nginx 1.28.2-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableNGINX ngx_http_mp4_module vulnerability
CVE-2026-27654 ↗azl3 nginx 1.28.2-1 on Azure Linux 3.0ImportantOut-of-band26%Microsoft rating unavailableNGINX ngx_http_dav_module vulnerability
CVE-2026-27651 ↗azl3 nginx 1.28.2-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableNGINX ngx_mail_auth_http_module vulnerability
CVE-2026-23393 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablebridge: cfm: Fix race condition in peer_mep deletion
CVE-2026-23327 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablecxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
CVE-2026-23343 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsxdp: produce a warning when calculated tailroom is negative
CVE-2026-23281 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablewifi: libertas: fix use-after-free in lbs_free_adapter()
CVE-2026-23336 ↗cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailablewifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
CVE-2026-23351 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsnetfilter: nft_set_pipapo: split gc into unlink and reclaim phase
CVE-2026-23340 ↗cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsnet: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
CVE-2026-23378 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsnet/sched: act_ife: Fix metalist update behavior
CVE-2026-23364 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableksmbd: Compare MACs in constant time
CVE-2026-23306 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablescsi: pm8001: Fix use-after-free in pm8001_queue_command()
CVE-2026-23388 ↗cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableSquashfs: check metadata block offset is within range
CVE-2026-23318 ↗cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableALSA: usb-audio: Use correct version for UAC3 header validation
CVE-2026-23325 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablewifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()
CVE-2026-23359 ↗cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsbpf: Fix stack-out-of-bounds write in devmap
CVE-2026-23392 ↗cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsnetfilter: nf_tables: release flowtable after rcu grace period on error
CVE-2026-23361 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablePCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
CVE-2026-23391 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsnetfilter: xt_CT: drop pending enqueued packets on template removal
CVE-2026-23315 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablewifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
CVE-2026-23372 ↗azl3 kernel 6.6.126.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablenfc: rawsock: cancel tx_work before socket teardown
CVE-2026-33186 ↗cbl2 grpc 1.42.0-11 on CBL Mariner 2.0ImportantOut-of-band2%Microsoft rating unavailablegRPC-Go has an authorization bypass via missing leading slash in :path
CVE-2026-33228 ↗cbl2 python-tensorboard 2.11.0-3 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableflatted: Prototype Pollution via parse()
CVE-2026-32141 ↗cbl2 python-tensorboard 2.11.0-3 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableflatted: Unbounded recursion DoS in parse() revive phase
CVE-2026-3547 ↗cbl2 mariadb 10.6.24-1 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailablewolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation
CVE-2026-3549 ↗azl3 mariadb 10.11.16-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableECH parsing heap buffer overflow
CVE-2026-3548 ↗cbl2 mariadb 10.6.24-1 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableBuffer overflow in CRL number parsing in wolfSSL
CVE-2026-4424 ↗cbl2 libarchive 3.6.1-8 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableLibarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
CVE-2026-25075 ↗azl3 strongswan 5.9.14-8 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablestrongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-4687trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4688trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4689trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4690trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4691trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4692trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4693trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4694trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4695trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4696trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4697trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4698trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4699trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4700trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4704trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4720trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4721trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2023-52356trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.6)libtiff-0:4.4.0-13.el9_6.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2024-28757trackedCVSS 7.5Red Hat OpenShift Container Platform 4.14rhcos-aarch64-414.92.202603110216-0Patch ↗Advisory ↗
Red HatCVE-2025-47907trackedCVSS 7.0Red Hat OpenShift Container Platform 4.14registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:0d851b87057ce9d97e22a5ce8f1882bf9725559d90ce8abc03cf5c7e87eeffc8_s390xPatch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)osbuild-composer-0:134.1-5.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Enterprise Linux AppStream AUS (v.8.6)osbuild-composer-0:46.3-6.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5Red Hat OpenShift Service Mesh 3.0registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:35b0638bd3e1f638b2493f92eca8125f6e74038bf43565c8c97dea61f016393d_arm64Patch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5Red Hat OpenShift Service Mesh 3.1registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:16c4a873fc43fe6e9bd64eb7bca434fdfeab97f4cf722dbacaa97578ffffe79d_arm64Patch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5Red Hat OpenShift Service Mesh 3.2registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390xPatch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Satellite 6.18 for RHEL 9yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.srcPatch ↗Advisory ↗
Red HatCVE-2025-61729trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)osbuild-composer-0:134.1-5.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-61729trackedCVSS 7.5Red Hat Enterprise Linux AppStream AUS (v.8.6)osbuild-composer-0:46.3-6.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2025-61729trackedCVSS 7.5Red Hat Satellite 6.18 for RHEL 9yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.srcPatch ↗Advisory ↗
Red HatCVE-2025-61731trackedCVSS 8.6Red Hat Enterprise Linux AppStream (v. 10)go-toolset-0:1.25.8-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-61731trackedCVSS 8.6Red Hat Enterprise Linux AppStream (v. 9)go-toolset-0:1.25.8-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-61731trackedCVSS 8.6Red Hat Enterprise Linux AppStream EUS (v. 10.0)go-toolset-0:1.25.8-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-61731trackedCVSS 8.6Red Hat Enterprise Linux AppStream EUS (v.9.6)go-toolset-0:1.25.8-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-61731trackedCVSS 8.6Red Hat OpenShift Service Mesh 3.0registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:35b0638bd3e1f638b2493f92eca8125f6e74038bf43565c8c97dea61f016393d_arm64Patch ↗Advisory ↗
Red HatCVE-2025-61731trackedCVSS 8.6Red Hat OpenShift Service Mesh 3.1registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:16c4a873fc43fe6e9bd64eb7bca434fdfeab97f4cf722dbacaa97578ffffe79d_arm64Patch ↗Advisory ↗
Red HatCVE-2025-61731trackedCVSS 8.6Red Hat OpenShift Service Mesh 3.2registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390xPatch ↗Advisory ↗
Red HatCVE-2025-61732trackedCVSS 7.4Red Hat OpenShift Service Mesh 3.0registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:35b0638bd3e1f638b2493f92eca8125f6e74038bf43565c8c97dea61f016393d_arm64Patch ↗Advisory ↗
Red HatCVE-2025-61732trackedCVSS 7.4Red Hat OpenShift Service Mesh 3.1registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:16c4a873fc43fe6e9bd64eb7bca434fdfeab97f4cf722dbacaa97578ffffe79d_arm64Patch ↗Advisory ↗
Red HatCVE-2025-61732trackedCVSS 7.4Red Hat OpenShift Service Mesh 3.2registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:1ad57736249ed843127edf74f765e810ee91f3e9196c0402ecf6199c0b0eeaab_s390xPatch ↗Advisory ↗
Red HatCVE-2025-6176trackedCVSS 7.5Red Hat Satellite 6.17 for RHEL 9foreman-0:3.14.0.14-1.el9sat.srcPatch ↗Advisory ↗
Red HatCVE-2025-6176trackedCVSS 7.5Red Hat Satellite 6.16 for RHEL 8python-brotli-0:1.2.0-0.1.el8pc.srcPatch ↗Advisory ↗
Red HatCVE-2025-65637trackedCVSS 7.5Red Hat OpenShift Container Platform 4.14registry.redhat.io/openshift4/ose-cluster-image-registry-operator@sha256:3b121bc71b14ab2696d205622482bb7e2d421ab024c23f74e40dcdac42b0901d_arm64Patch ↗Advisory ↗
Red HatCVE-2025-65637trackedCVSS 7.5Red Hat OpenShift Container Platform 4.14registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:b59a8d8f2c540d1af31bed86a5d0098deedfa1893596bae5be48a54e91f741df_arm64Patch ↗Advisory ↗
Red HatCVE-2025-69720trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 10)ncurses-c++-libs-0:6.4-15.20240127.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-0980trackedCVSS 8.3Red Hat Satellite 6.18 for RHEL 9rubygem-rubyipmi-0:0.13.0-1.el9sat.noarchPatch ↗Advisory ↗
Red HatCVE-2026-0980trackedCVSS 8.3Red Hat Satellite 6.17 for RHEL 9foreman-0:3.14.0.14-1.el9sat.srcPatch ↗Advisory ↗
Red HatCVE-2026-0980trackedCVSS 8.3Red Hat Satellite 6.16 for RHEL 8rubygem-rubyipmi-0:0.13.0-0.1.el8sat.noarchPatch ↗Advisory ↗
Red HatCVE-2026-1207trackedCVSS 8.3Red Hat Satellite 6.17 for RHEL 9foreman-0:3.14.0.14-1.el9sat.srcPatch ↗Advisory ↗
Red HatCVE-2026-1207trackedCVSS 8.3Red Hat Satellite 6.16 for RHEL 8python-django-0:4.2.28-0.1.el8pc.srcPatch ↗Advisory ↗
Red HatCVE-2026-1287trackedCVSS 8.3Red Hat Satellite 6.17 for RHEL 9foreman-0:3.14.0.14-1.el9sat.srcPatch ↗Advisory ↗
Red HatCVE-2026-1287trackedCVSS 8.3Red Hat Satellite 6.16 for RHEL 8python-django-0:4.2.28-0.1.el8pc.srcPatch ↗Advisory ↗
Red HatCVE-2026-1530trackedCVSS 8.1Red Hat Satellite 6.17 for RHEL 9foreman-0:3.14.0.14-1.el9sat.srcPatch ↗Advisory ↗
Red HatCVE-2026-1530trackedCVSS 8.1Red Hat Satellite 6.16 for RHEL 8rubygem-fog-kubevirt-0:1.5.1-1.el8sat.noarchPatch ↗Advisory ↗
Red HatCVE-2026-1531trackedCVSS 8.1Red Hat Satellite 6.18 for RHEL 9rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarchPatch ↗Advisory ↗
Red HatCVE-2026-1531trackedCVSS 8.1Red Hat Satellite 6.17 for RHEL 9foreman-0:3.14.0.14-1.el9sat.srcPatch ↗Advisory ↗
Red HatCVE-2026-1531trackedCVSS 8.1Red Hat Satellite 6.16 for RHEL 8rubygem-foreman_kubevirt-0:0.2.0-2.el8sat.noarchPatch ↗Advisory ↗
Red HatCVE-2026-1961trackedCVSS 8.0Red Hat Satellite 6.18 for RHEL 9foreman-0:3.16.0.12-1.el9sat.srcPatch ↗Advisory ↗
Red HatCVE-2026-1961trackedCVSS 8.0Red Hat Satellite 6.17 for RHEL 9foreman-0:3.14.0.14-1.el9sat.srcPatch ↗Advisory ↗
Red HatCVE-2026-1961trackedCVSS 8.0Red Hat Satellite 6.16 for RHEL 8foreman-0:3.12.0.14-1.el8sat.srcPatch ↗Advisory ↗
Red HatCVE-2026-25679trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)go-toolset-0:1.25.8-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-25679trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)go-toolset-0:1.25.8-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-25679trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)go-toolset-0:1.25.8-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-25679trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.6)go-toolset-0:1.25.8-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4684trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4684trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4684trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4685trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4685trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4685trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4686trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4686trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4686trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4687trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4687trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4687trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4688trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4688trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4688trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4689trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4689trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4689trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4690trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4690trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4690trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4691trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4691trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4691trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4692trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4692trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4692trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4693trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4693trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4693trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4694trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4694trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4694trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4695trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4695trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4695trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4696trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4696trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4696trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4697trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4697trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4697trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4698trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4698trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4698trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4699trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4699trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4699trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4700trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4700trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4700trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4704trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4704trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4704trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4720trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4720trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4720trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4721trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.9.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4721trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.9.0-1.el10_1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4721trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.9.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2022-49985trackedCVSS 7.0Red Hat Enterprise Linux AppStream E4S (v.9.0)bpftool-debuginfo-0:5.14.0-70.171.1.el9_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2022-49985trackedCVSS 7.0Red Hat Enterprise Linux NFV E4S (v.9.0)kernel-rt-0:5.14.0-70.171.1.rt21.243.el9_0.srcPatch ↗Advisory ↗
Red HatCVE-2024-25621trackedCVSS 7.7Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-model-controller-rhel8@sha256:a880b9fd06cd7206e3397025371ba3a3655798be5d64bed620f3847ff6a0b5ac_amd64Patch ↗Advisory ↗
Red HatCVE-2025-12060trackedCVSS 8.3Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel8@sha256:a291cd5f04c559fd16477ae2ad364a350c4bf0c5a3f5aa2e614260fd4a5bece2_amd64Patch ↗Advisory ↗
Red HatCVE-2025-12638trackedCVSS 7.6Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel8@sha256:a291cd5f04c559fd16477ae2ad364a350c4bf0c5a3f5aa2e614260fd4a5bece2_amd64Patch ↗Advisory ↗
Red HatCVE-2025-12816trackedCVSS 8.7Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-dashboard-rhel8@sha256:022c21f044dead0ff28bfc5fb5fb2fd51f3ed8e1a6cfc90bd18222abf0388018_amd64Patch ↗Advisory ↗
Red HatCVE-2025-38024trackedCVSS 7.3Red Hat Enterprise Linux BaseOS AUS (v.8.6)bpftool-0:4.18.0-372.185.1.el8_6.x86_64Patch ↗Advisory ↗
Red HatCVE-2025-38024trackedCVSS 7.3Red Hat Enterprise Linux BaseOS AUS (v. 8.2)bpftool-0:4.18.0-193.190.1.el8_2.x86_64Patch ↗Advisory ↗
Red HatCVE-2025-38024trackedCVSS 7.3Red Hat Enterprise Linux BaseOS AUS (v.8.4)bpftool-0:4.18.0-305.187.1.el8_4.x86_64Patch ↗Advisory ↗
Red HatCVE-2025-38129trackedCVSS 7.3Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)kernel-rt-0:5.14.0-284.161.1.rt14.446.el9_2.srcPatch ↗Advisory ↗
Red HatCVE-2025-38129trackedCVSS 7.3Red Hat Enterprise Linux AppStream E4S (v.9.2)bpftool-debuginfo-0:7.0.0-284.161.1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-38129trackedCVSS 7.3Red Hat Enterprise Linux BaseOS AUS (v.8.4)bpftool-0:4.18.0-305.187.1.el8_4.x86_64Patch ↗Advisory ↗
Red HatCVE-2025-38248trackedCVSS 7.3Red Hat Enterprise Linux AppStream EUS (v.9.4)bpftool-debuginfo-0:7.3.0-427.116.1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40240trackedCVSS 7.5Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)kernel-rt-0:5.14.0-284.161.1.rt14.446.el9_2.srcPatch ↗Advisory ↗
Red HatCVE-2025-40240trackedCVSS 7.5Red Hat Enterprise Linux BaseOS AUS (v.8.6)bpftool-0:4.18.0-372.185.1.el8_6.x86_64Patch ↗Advisory ↗
Red HatCVE-2025-40240trackedCVSS 7.5Red Hat Enterprise Linux AppStream E4S (v.9.0)bpftool-debuginfo-0:5.14.0-70.171.1.el9_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40240trackedCVSS 7.5Red Hat Enterprise Linux BaseOS AUS (v. 8.2)bpftool-0:4.18.0-193.190.1.el8_2.x86_64Patch ↗Advisory ↗
Red HatCVE-2025-40240trackedCVSS 7.5Red Hat Enterprise Linux NFV E4S (v.9.0)kernel-rt-0:5.14.0-70.171.1.rt21.243.el9_0.srcPatch ↗Advisory ↗
Red HatCVE-2025-40240trackedCVSS 7.5Red Hat Enterprise Linux AppStream E4S (v.9.2)bpftool-debuginfo-0:7.0.0-284.161.1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40269trackedCVSS 7.3Red Hat Enterprise Linux BaseOS AUS (v.8.4)bpftool-0:4.18.0-305.187.1.el8_4.x86_64Patch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-codeflare-operator-rhel8@sha256:b68b73951beeabe942be43f65e778ff98e1cdfc6fdb4b052794f0cd4b191b819_amd64Patch ↗Advisory ↗
Red HatCVE-2025-61726trackedCVSS 7.5DevWorkspace Operator 0.4registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:11c561bf7aac3f3ac3adfbc437a3f56ef7fdf494f02c161bde982156b36d8b30_amd64Patch ↗Advisory ↗
Red HatCVE-2025-61729trackedCVSS 7.5Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel8@sha256:b26f5118ae8e7e25783233698fe0d5df1e56cde8d75f745204d9f78c4d838412_amd64Patch ↗Advisory ↗
Red HatCVE-2025-61729trackedCVSS 7.5DevWorkspace Operator 0.4registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:030160d105ab2fd0f9815527f1b37055c4f734bee9f37f7ea923a506f8e39c30_amd64Patch ↗Advisory ↗
Red HatCVE-2025-65637trackedCVSS 7.5Red Hat OpenShift Container Platform 4.18registry.redhat.io/openshift4/ose-docker-registry-rhel9@sha256:0d56d92f7ce705f8e4d8034bc9a343422ba719dd870b0ac4f1e24a46fe6360e4_amd64Patch ↗Advisory ↗
Red HatCVE-2025-66418trackedCVSS 7.5Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel8@sha256:a291cd5f04c559fd16477ae2ad364a350c4bf0c5a3f5aa2e614260fd4a5bece2_amd64Patch ↗Advisory ↗
Red HatCVE-2025-66626trackedCVSS 8.1Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel8@sha256:fd02f0f70e38c947cdc307be3d9660f87262d92c5a361fa1bf68f24a72c91476_amd64Patch ↗Advisory ↗
Red HatCVE-2025-68156trackedCVSS 7.5Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel8@sha256:fd02f0f70e38c947cdc307be3d9660f87262d92c5a361fa1bf68f24a72c91476_amd64Patch ↗Advisory ↗
Red HatCVE-2026-1526trackedCVSS 7.5Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-dashboard-rhel8@sha256:022c21f044dead0ff28bfc5fb5fb2fd51f3ed8e1a6cfc90bd18222abf0388018_amd64Patch ↗Advisory ↗
Red HatCVE-2026-1528trackedCVSS 7.5Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-dashboard-rhel8@sha256:022c21f044dead0ff28bfc5fb5fb2fd51f3ed8e1a6cfc90bd18222abf0388018_amd64Patch ↗Advisory ↗
CiscoCVE-2026-20004trackedCVSS 7.4Not reported16.9Patch ↗Advisory ↗
CiscoCVE-2026-20012trackedCVSS 8.6Cisco Firepower 2100 Series6.6Patch ↗Advisory ↗
CiscoCVE-2026-20084trackedCVSS 8.6Not reported16.6Patch ↗Advisory ↗
CiscoCVE-2026-20086trackedCVSS 8.6Not reported17.14Patch ↗Advisory ↗
CiscoCVE-2026-20125trackedCVSS 7.7Not reported12.2SXIPatch ↗Advisory ↗
Red HatCVE-2026-2229trackedCVSS 7.5Red Hat OpenShift AI 2.16registry.redhat.io/rhoai/odh-dashboard-rhel8@sha256:022c21f044dead0ff28bfc5fb5fb2fd51f3ed8e1a6cfc90bd18222abf0388018_amd64Patch ↗Advisory ↗
Red HatCVE-2026-24734trackedCVSS 7.4Red Hat JBoss Web Server 6.2 on RHEL 10jws6-tomcat-0:10.1.49-9.redhat_00007.1.el10jws.noarchPatch ↗Advisory ↗
Red HatCVE-2026-24734trackedCVSS 7.4Red Hat JBoss Web Server 6.2.1Not reportedPatch ↗Advisory ↗

Glossary