Vulnerabilities

April 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 1,536 vulnerabilities across 4,782 returned patch records from 5 vendors. Filter the complete month, or browse the static page trail without JavaScript.

4,782all patch recordsClear filters 144criticalShow these records 2Microsoft exploitation detectedShow these records 6Microsoft in the Known Exploited Vulnerabilities catalogShow these records 3,018tracked hereShow these records

Patch records: Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here: Records joined to a vulnerability record in this tracker.
Defender priority: Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely: Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.

Red Hat 3,882 Microsoft 739 SUSE 125 Cisco 31 Android 5

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

#patch-filter-form, #patch-filter-loading { display: none !important; } Complete-month filters require JavaScript. The responsive records and ordinary page links below remain complete and usable.

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 1 of 24 · records 1 to 200 of 4,782

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle

CVE-2026-32201 ↗2026-04-14Microsoft SharePoint Enterprise Server 2016Important43%Microsoft rates: Exploitation DetectedCISA KEVVulnCheckENISAKB5002853 KB5002854

and 1 more

KB5002861

3 mentionsMicrosoft SharePoint Server Spoofing Vulnerability

CVE-2026-32202 ↗2026-04-14Windows 10 Version 1809 for 32-bit SystemsImportant71%Microsoft rates: Exploitation DetectedCISA KEVVulnCheckENISAKB5099414 KB5099444

and 8 more

KB5099445 KB5099535 KB5099536 KB5099538 KB5099539 KB5099540 KB5101649 KB5101650

1 mentionsWindows Shell Spoofing Vulnerability

CVE-2026-33824 ↗2026-04-14Windows 10 Version 1809 for 32-bit SystemsCritical77%Microsoft rates: Exploitation Less LikelyCISA KEVVulnCheckENISAKB5082052 KB5082060

and 7 more

KB5082063 KB5082123 KB5082142 KB5082198 KB5082200 KB5083768 KB5083769

3 mentionsWindows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

CVE-2026-31431 ↗2026-04-23azl3 kernel 6.6.130.1-3 on Azure Linux 3.0ImportantOut-of-band98%Microsoft rating unavailableCISA KEVVulnCheckENISA11 mentionscrypto: algif_aead - Revert to operating out-of-place

CVE-2026-33825 ↗2026-04-14Microsoft Defender Antimalware PlatformImportant7%Microsoft rates: Exploitation More LikelyPublicly disclosedCISA KEVVulnCheckENISA1 mentionsMicrosoft Defender Elevation of Privilege Vulnerability

CVE-2026-5281 ↗2026-04-02Microsoft Edge (Chromium-based)N/AOut-of-band14%Microsoft rating unavailableCISA KEVVulnCheckENISAChromium: CVE-2026-5281 Use after free in Dawn

CVE-2026-34872 ↗2026-05-07azl3 nodejs24 24.14.1-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailableAn issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using finite-field Diffie-Hellman, the other party can force the shared secret into a small set of values (lack of contributory behavior). This is a problem for protocols that depend on contributory behavior (which is not the case for TLS). The attack can be carried by the peer, or depending on the protocol by an active network attacker (person in the middle).

CVE-2026-34873 ↗2026-05-07azl3 nodejs24 24.14.1-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailableAn issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session.

CVE-2026-34875 ↗2026-05-07azl3 nodejs24 24.14.1-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailableAn issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.

CVE-2017-20230 ↗2026-05-03cbl2 perl 5.34.1-491 on CBL Mariner 2.0CriticalOut-of-band1%Microsoft rating unavailableStorable versions before 3.05 for Perl has a stack overflow

CVE-2026-31659 ↗2026-04-26azl3 kernel 6.6.134.1-2 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablebatman-adv: reject oversized global TT response buffers

CVE-2026-31668 ↗2026-04-26azl3 kernel 6.6.130.1-3 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailableseg6: separate dst_cache for input and output paths in seg6 lwtunnel

CVE-2026-31657 ↗2026-04-26azl3 kernel 6.6.130.1-3 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablebatman-adv: hold claim backbone gateways by reference

CVE-2026-31607 ↗2026-04-26azl3 kernel 6.6.130.1-3 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailableusbip: validate number_of_packets in usbip_pack_ret_submit()

CVE-2026-21515 ↗2026-04-23Azure IOT CentralCriticalOut-of-band1%Microsoft rates: N/AAzure IoT Central Elevation of Privilege Vulnerability

CVE-2026-24303 ↗2026-04-23Microsoft Partner CenterCriticalOut-of-band<1%Microsoft rates: N/AMicrosoft Partner Center Elevation of Privilege Vulnerability

CVE-2026-26150 ↗2026-04-23Microsoft Purview eDiscoveryCriticalOut-of-band1%Microsoft rates: N/AMicrosoft Purview eDiscovery Elevation of Privilege Vulnerability

CVE-2026-32172 ↗2026-04-23Microsoft Power AppsCriticalOut-of-band<1%Microsoft rates: N/AMicrosoft Power Apps Remote Code Execution Vulnerability

CVE-2026-32210 ↗2026-04-23Microsoft Dynamics 365 (online)CriticalOut-of-band1%Microsoft rates: N/AMicrosoft Dynamics 365 (online) Spoofing Vulnerability

CVE-2026-33102 ↗2026-04-23Microsoft 365 CopilotCriticalOut-of-band<1%Microsoft rates: N/AMicrosoft 365 Copilot Elevation of Privilege Vulnerability

CVE-2026-33819 ↗2026-04-23Microsoft BingCriticalOut-of-band1%Microsoft rates: N/AMicrosoft Bing Remote Code Execution Vulnerability

CVE-2026-35431 ↗2026-04-23Microsoft Entra IDCriticalOut-of-band1%Microsoft rates: N/AMicrosoft Entra ID Entitlement Management Spoofing Vulnerability

CVE-2026-31478 ↗2026-04-23cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0CriticalOut-of-band1%Microsoft rating unavailableksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()

CVE-2026-5450 ↗2026-04-22azl3 glibc 2.38-20 on Azure Linux 3.0CriticalOut-of-band1%Microsoft rating unavailablescanf %mc off-by-one heap buffer overflow

CVE-2026-5194 ↗2026-04-15cbl2 mariadb 10.6.25-1 on CBL Mariner 2.0CriticalOut-of-band1%Microsoft rating unavailablewolfSSL ECDSA Certificate Verification

CVE-2026-23666 ↗2026-04-14Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5082398 KB5082400

and 16 more

KB5082402 KB5082403 KB5082404 KB5082406 KB5082411 KB5082413 KB5082414 KB5082417 KB5082418 KB5082419 KB5082420 KB5082421 KB5082424 KB5082425 KB5082426 KB5082427

.NET Framework Denial of Service Vulnerability

CVE-2026-32157 ↗2026-04-14Windows 11 Version 26H1 for ARM64-based SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5083768Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-32190 ↗2026-04-14Microsoft Office 2019 for 32-bit editionsCritical<1%Microsoft rates: Exploitation Less LikelyKB5002859Microsoft Office Remote Code Execution Vulnerability

CVE-2026-33114 ↗2026-04-14Microsoft 365 Apps for Enterprise for 32-bit SystemsCritical<1%Microsoft rates: Exploitation Less LikelyMicrosoft Word Remote Code Execution Vulnerability

CVE-2026-33115 ↗2026-04-14Microsoft 365 Apps for Enterprise for 32-bit SystemsCritical<1%Microsoft rates: Exploitation Less LikelyMicrosoft Word Remote Code Execution Vulnerability

CVE-2026-33826 ↗2026-04-14Windows Server 2019Critical1%Microsoft rates: Exploitation More LikelyKB5082060 KB5082063

and 4 more

KB5082123 KB5082126 KB5082142 KB5082198

Windows Active Directory Remote Code Execution Vulnerability

CVE-2026-33827 ↗2026-04-14Windows 10 Version 1809 for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyKB5082052 KB5082060

and 9 more

KB5082063 KB5082123 KB5082126 KB5082127 KB5082142 KB5082198 KB5082200 KB5083768 KB5083769

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2026-27140 ↗2026-04-11azl3 golang 1.26.2-1 on Azure Linux 3.0CriticalOut-of-band1%Microsoft rating unavailableCode execution vulnerability in SWIG code generation in cmd/go

CVE-2026-27143 ↗2026-04-11cbl2 golang 1.18.8-10 on CBL Mariner 2.0CriticalOut-of-band1%Microsoft rating unavailableMissing bound checks can lead to memory corruption in safe Go in cmd/compile

CVE-2026-26135 ↗2026-04-02Azure Custom Locations Resource ProviderCriticalOut-of-band1%Microsoft rates: N/AAzure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability

CVE-2026-32173 ↗2026-04-02Azure SRE Agent Gateway - SignalR HubCriticalOut-of-band1%Microsoft rates: N/AAzure SRE Agent Information Disclosure Vulnerability

CVE-2026-32186 ↗2026-04-02Microsoft BingCriticalOut-of-band1%Microsoft rates: N/AMicrosoft Bing Elevation of Privilege Vulnerability

CVE-2026-32211 ↗2026-04-02Azure Web AppsCriticalOut-of-band1%Microsoft rates: N/AAzure MCP Server Information Disclosure Vulnerability

CVE-2026-32213 ↗2026-04-02Azure AI FoundryCriticalOut-of-band1%Microsoft rates: N/AAzure AI Foundry Elevation of Privilege Vulnerability

CVE-2026-33105 ↗2026-04-02Azure Kubernetes ServiceCriticalOut-of-band1%Microsoft rates: N/AMicrosoft Azure Kubernetes Service Elevation of Privilege Vulnerability

CVE-2026-33107 ↗2026-04-02Azure DatabricksCriticalOut-of-band1%Microsoft rates: N/AAzure Databricks Elevation of Privilege Vulnerability

CVE-2025-62718 ↗2026-04-15azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailableAxios has a NO_PROXY Hostname Normalization Bypass Leads to SSRF

CVE-2026-40175 ↗2026-04-15azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailableAxios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

CVE-2026-41082 ↗2026-05-07azl3 ocaml-dune 3.15.2-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableIn OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.

CVE-2026-25833 ↗2026-05-07azl3 nodejs24 24.14.1-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableMbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function

CVE-2026-25835 ↗2026-05-07azl3 qemu 10.1.0-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableMbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).

CVE-2026-34876 ↗2026-05-07azl3 qemu 10.1.0-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableAn issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls_ccm_finish() in library/ccm.c allows attackers to obtain adjacent CCM context data via invocation of the multipart CCM API with an oversized tag_len parameter. This is caused by missing validation of the tag_len parameter against the size of the internal 16-byte authentication buffer. The issue affects the public multipart CCM API in Mbed TLS 3.x, where mbedtls_ccm_finish() can be invoked directly by applications. In Mbed TLS 4.x versions prior to the fix, the same missing validation exists in the internal implementation; however, the function is not exposed as part of the public API. Exploitation requires application-level invocation of the multipart CCM API.

CVE-2026-34874 ↗2026-05-07azl3 nodejs24 24.14.1-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableAn issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing that allows an attacker to write to address 0.

CVE-2026-33845 ↗2026-05-07azl3 gnutls 3.8.3-8 on Azure Linux 3.0ImportantOut-of-band2%Microsoft rating unavailableGnutls: gnutls: denial of service via dtls zero-length fragment

CVE-2026-30656 ↗2026-05-03azl3 fio 3.37-3 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableA NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.

CVE-2026-6846 ↗2026-05-03azl3 gdb 13.2-7 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableBinutils: binutils: arbitrary code execution via malformed xcoff object file processing

CVE-2026-37555 ↗2026-05-03cbl2 libsndfile 1.0.31-4 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableAn issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

CVE-2026-31533 ↗2026-05-01azl3 kernel 6.6.134.1-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsnet/tls: fix use-after-free in -EBUSY error path of tls_do_encryption

CVE-2026-41636 ↗2026-04-30cbl2 ceph 16.2.10-11 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailableApache Thrift: Node.js skip() recursion

CVE-2026-41605 ↗2026-04-30azl3 thrift 0.15.0-5 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableApache Thrift: Swift Compact Protocol integer overflow

CVE-2026-41604 ↗2026-04-30cbl2 ceph 16.2.10-11 on CBL-Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableApache Thrift: Swift Range crash in skip()

CVE-2026-41603 ↗2026-04-30azl3 thrift 0.15.0-5 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableApache Thrift: Java TSSLTransportFactory hostname verification

CVE-2026-41602 ↗2026-04-30azl3 influxdb 2.7.5-15 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableApache Thrift: Go TFramedTransport uint32 overflow

CVE-2025-48431 ↗2026-04-30cbl2 ceph 16.2.10-11 on CBL Mariner 2.0ImportantOut-of-band1%Microsoft rating unavailableApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

CVE-2026-31508 ↗2026-04-30cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsnet: openvswitch: Avoid releasing netdev before teardown completes

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Container Platform 4.16registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:3f36c9fe97e7a51fe5690f19c604c3713527981c9367b8b7686882e36aaf93ea_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Quay 3.9registry.redhat.io/quay/quay-rhel8@sha256:2c3c6f149c673cfd68cb5cc62f75bb75480a8d4f4470a7de93191bca1cc0f253_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1multicluster engine for Kubernetes 2.10registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:085d4698e4eb08202f1f9f1e6a85a3b0251a5d185ca9c9f4b77612640dd4fb54_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Openshift Data Foundation 4.20registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:2cebd0dc24a731f2c2d33a7b1930d9bf65845ab83817775d378c07630a1e55c1_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Openshift Data Foundation 4.19registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:225ba1747733c974fd4a3c9b49f657b180b83486d1c35a473e8e5a2b96abcc53_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1multicluster engine for Kubernetes 2.11registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:49c62e8ac4762849f1596729a752cd88a0d6aefb40a7a459e9b22493c1e275fd_arm64Patch ↗Advisory ↗

SuseCVE-2024-9264trackedCVSS 9.9openSUSE Leap 16.0grafana-0:11.6.11-bp160.1.1.aarch64no patch linkAdvisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Container Platform 4.19registry.redhat.io/openshift4/ose-powervs-block-csi-driver-rhel9-operator@sha256:1d5caff7082d26409e72c3d18b018f01178321f3922a0868af8058f839261d3b_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Container Platform 4.19registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:8be03eb8cddd01ebdb98180c67dd640848a997e7ddf8b6e7f22a7559499869ea_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Advanced Cluster Management for Kubernetes 2.16registry.redhat.io/rhacm2/volsync-rhel9@sha256:035aff4df7d0f68580d1592dc48b44af82df171b12de09b5bb7df9842877edcb_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Quay 3.12registry.redhat.io/quay/quay-rhel8@sha256:3c87ef209deb488a3c37626273123280364972c155ae53d986fbc784bf219892_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Quay 3.10registry.redhat.io/quay/quay-rhel8@sha256:1f42a9088fd931804a16d6170c2d65a1a49b2433e906d3e3ac59f5169793ae8d_s390xPatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Builds for Red Hat OpenShift 1.6.0registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Builds 1.7.3registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Advanced Cluster Management for Kubernetes 2.15registry.redhat.io/rhacm2/volsync-rhel9@sha256:15a198e39cc0d139796a6cc9fa3bc0e6607776b0020f044452265e0868e44598_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33211trackedCVSS 9.6Builds for Red Hat OpenShift 1.6.0registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:1c0d155195bfd251b40da10e153c8a738250f14253f337b198476740cb7bd81a_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33211trackedCVSS 9.6Red Hat OpenShift Builds 1.7.3registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:190edd3effb60c56c885fc964d3eb48076293e1e43d745c4615ed00ef7daa145_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-27140trackedCVSS 9.0Red Hat Enterprise Linux AppStream (v. 8)delve-0:1.25.2-1.module+el8.10.0+23746+9db33b5e.aarch64::go-toolset:rhel8Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Enterprise Linux AppStream EUS (v.9.6)rhc-1:0.2.7-1.el9_6.3.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Enterprise Linux AppStream (v. 9)rhc-1:0.2.7-4.el9_7.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Advanced Cluster Security 4.8registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift AI 2.25registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:5be8977599e99ff5828eff59ad5d9ea5d0f2d99115b5e99d31df9469fb8ea912_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27140trackedCVSS 9.0Red Hat Enterprise Linux AppStream (v. 9)go-toolset-0:1.25.9-1.el9_7.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-27140trackedCVSS 9.0Red Hat Enterprise Linux AppStream (v. 10)go-toolset-0:1.25.9-3.el10_1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-27606trackedCVSS 9.1Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Enterprise Linux AppStream (v. 8)rhc-1:0.2.5-6.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Trusted Artifact Signer 1.3registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Trusted Artifact Signer 1.3registry.redhat.io/rhtas/createtree-rhel9@sha256:163edb41ea7f64afc8333ee14d4b28161f7017285afcca6ca12238732c77b98d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Trusted Artifact Signer 1.3registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Trusted Artifact Signer 1.3registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:95b5aefafd17dd44794f6d5d1e75278faa5a74f2472db667409d1c88caaef1f1_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Trusted Artifact Signer 1.3registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:8bf79d15df12c6af59d76463ebbf5c4d505752dfaea8a48ea9b9aa42fc8146d4_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Trusted Artifact Signer 1.3registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:3b0329d626fa27764ca1b350b9e9647e8c655bc43fac4abff3f13726b7c1ae4e_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390xPatch ↗Advisory ↗

Red HatCVE-2026-33211trackedCVSS 9.6Red Hat OpenShift Pipelines 1.2registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:2a0a54ddea2b4705e329cec213048054e59c255c650c7d132543d5576e61cea9_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33211trackedCVSS 9.6Red Hat OpenShift Pipelines 1.2registry.redhat.io/openshift-pipelines/pipelines-operator-bundle@sha256:8cadde0c138f382b9da827165ddcc141e81f864d389dcb17d270e420c33d1085_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33211trackedCVSS 9.6Red Hat Trusted Artifact Signer 1.3registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33937trackedCVSS 9.8Red Hat OpenShift Dev Spaces 3.27registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64Patch ↗Advisory ↗

SuseCVE-2026-41176trackedCVSS 9.8openSUSE Leap 16.0rclone-0:1.73.5-bp160.1.1.aarch64no patch linkAdvisory ↗

SuseCVE-2026-41179trackedCVSS 9.8openSUSE Leap 16.0rclone-0:1.73.5-bp160.1.1.aarch64no patch linkAdvisory ↗

Red HatCVE-2026-29186trackedCVSS 9.1Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Container Platform 4.18registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:06041c8dbcd76ef4a51a7a38a2049536f6862d7ddd94609f1cf35df582519f10_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1DevWorkspace Operator 0.4registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:03e66dbde56c09f627bc5eb60ebfd5127a43d313dff99e75e37039de8ab9430d_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33228trackedCVSS 9.8Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb763e2b7a9d101f73b03b9e1c5688e7034fd9d31413e890817bd4098a7d42f9_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift distributed tracing 3.9.3registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:59b7e5bd9dfbf299d3fb92747eccc89a0ac546939f0496deb0cbd418b016be30_s390xPatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift distributed tracing 3.9.3registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:0174a3a6a65cac3b13423b903c9038baaa37c6c3d6dbeee9918c5f576b4f5d7d_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Service Mesh 3.0registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3113f8ef93a2abecad7ad6bd44d800c9c2735888b93f7a9b713ee93669fc3802_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Service Mesh 3.1registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:321be87a16bb3b4564223709a86bf2d00c831a249de86d48e03855855776d250_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Service Mesh 3.2registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:3e210dcd0cab9c18bc0629a3a20b27e75bc09c09decbfcc9f6ab69f7c29670e1_arm64Patch ↗Advisory ↗

Red HatCVE-2026-27606trackedCVSS 9.1Red Hat OpenShift Service Mesh 2.6registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390xPatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1OpenShift Compliance Operator 1registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:e2cbcab60fad0718e63a8c9bacaca97d205735e968505a56ae1a1c523d5ee2da_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Service Mesh 2.6registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:56e3e74a021ca82802a7ec1e9b62ba3770e0c27a4039f9ea69a9b1ce89f2f3bb_s390xPatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Service Mesh 3.0registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:30b527ebc5f4f58fc10a86c7261a87552601edf8b184058f8e34a5f3b51df69a_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Service Mesh 3.1registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:8d573425eaf37eb78aec16ce191ee6d2e6232f2e022d4f2a10e0f34546b3e30c_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Service Mesh 3.2registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:0227a1bbf4d38482ddb9df144b0a78d1c0dda91517e8b1bbed10dc8fcb30ece6_s390xPatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Service Mesh 3.3registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6fe662754ea1d798925482785c355722e46f625ff2d22b65c186a35e7adee65a_s390xPatch ↗Advisory ↗

CiscoCVE-2026-20147trackedCVSS 9.9Cisco Identity Services Engine3.2Patch ↗Advisory ↗

CiscoCVE-2026-20180trackedCVSS 9.9Cisco Identity Services Engine3.1Patch ↗Advisory ↗

CiscoCVE-2026-20184trackedCVSS 9.8Apple macOS39Patch ↗Advisory ↗

CiscoCVE-2026-20186trackedCVSS 9.9Cisco Identity Services Engine3.1Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Container Platform 4.21registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:1d437ab0e23b76b9d36fd0a32154ffa9ed63697e1b70b4bcdb8db930d1cea995_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Web Terminal 1.13registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:790b2a87d81149568d58618db96e7804068b2bc112ff9313e0a06e95ac9841de_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Advanced Cluster Management for Kubernetes 2.15registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:251df7bb1820fed1c75e7b5dd14ed2d12a9bf2f3b74c87f6a0027ebf0641d4e5_ppc64lePatch ↗Advisory ↗

Red HatCVE-2025-49794trackedCVSS 9.1Red Hat Hardened Imageslibxml2-0:2.15.2-0.3.hum1@srcPatch ↗Advisory ↗

Red HatCVE-2025-49796trackedCVSS 9.1Red Hat Hardened Imageslibxml2-0:2.15.2-0.3.hum1@srcPatch ↗Advisory ↗

Red HatCVE-2026-4631trackedCVSS 9.8Red Hat Enterprise Linux AppStream EUS (v. 10.0)cockpit-packagekit-0:334.1-3.el10_0.noarchPatch ↗Advisory ↗

Red HatCVE-2026-4631trackedCVSS 9.8Red Hat Enterprise Linux AppStream EUS (v.9.6)cockpit-packagekit-0:334.2-2.el9_6.noarchPatch ↗Advisory ↗

Red HatCVE-2026-4631trackedCVSS 9.8Red Hat Enterprise Linux AppStream (v. 10)cockpit-packagekit-0:344-3.el10_1.noarchPatch ↗Advisory ↗

Red HatCVE-2026-4631trackedCVSS 9.8Red Hat Enterprise Linux AppStream (v. 9)cockpit-packagekit-0:344-2.el9_7.noarchPatch ↗Advisory ↗

Red HatCVE-2025-15467trackedCVSS 9.8Red Hat Hardened Imagesopenssl-0:3.5.6-0.1.hum1@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-27962trackedCVSS 9.1Red Hat Quay 3.14registry.redhat.io/quay/quay-rhel8@sha256:01f890a5280ddd4093134dc21578f8a5f06cdade4b9a6d59f31ca8deec8c43c3_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat OpenShift Container Platform 4.20registry.redhat.io/openshift4/ose-powervs-block-csi-driver-rhel9-operator@sha256:121a497c12db985c4bc55611b8e9e853651cc9d458b9d0525bc4d3edff7b7b24_amd64Patch ↗Advisory ↗

Red HatCVE-2026-25755trackedCVSS 9.6Red Hat Advanced Cluster Security 4.8registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5533b87f5a3c9df67608236393d31507dd2b1f0af0ca787997f9dfed44222d9d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-25755trackedCVSS 9.6Red Hat Advanced Cluster Security 4.9registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:433c4926f5a93402642d459c627a1ecf65e101a42bcce4042c36858205b93be9_arm64Patch ↗Advisory ↗

Red HatCVE-2026-25940trackedCVSS 9.6Red Hat Advanced Cluster Security 4.8registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5533b87f5a3c9df67608236393d31507dd2b1f0af0ca787997f9dfed44222d9d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-25940trackedCVSS 9.6Red Hat Advanced Cluster Security 4.9registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:433c4926f5a93402642d459c627a1ecf65e101a42bcce4042c36858205b93be9_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Advanced Cluster Security 4.8registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5533b87f5a3c9df67608236393d31507dd2b1f0af0ca787997f9dfed44222d9d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Advanced Cluster Security 4.9registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:433c4926f5a93402642d459c627a1ecf65e101a42bcce4042c36858205b93be9_arm64Patch ↗Advisory ↗

Red HatCVE-2026-1615trackedCVSS 9.8Red Hat Developer Hub 1.9registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:5e564d74dd0a96027d9283991bda32a13b87384a9c9572456ce318dfac7e9f7d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-24046trackedCVSS 9.1Red Hat Developer Hub 1.9registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:5e564d74dd0a96027d9283991bda32a13b87384a9c9572456ce318dfac7e9f7d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27606trackedCVSS 9.1Red Hat Developer Hub 1.9registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:5e564d74dd0a96027d9283991bda32a13b87384a9c9572456ce318dfac7e9f7d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-28498trackedCVSS 9.1Red Hat Quay 3.10registry.redhat.io/quay/quay-rhel8@sha256:a0b2026075e946fc046a6be46170a902051230d147061868209d559abd71981b_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Red Hat Developer Hub 1.9registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:4e4ab9dd3243274e6f378553e241ae8b9fdeed7fe2daaa7efb34f60ee46a2eef_amd64Patch ↗Advisory ↗

Red HatCVE-2026-4599trackedCVSS 9.1Red Hat Quay 3.10registry.redhat.io/quay/quay-rhel8@sha256:a0b2026075e946fc046a6be46170a902051230d147061868209d559abd71981b_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-4599trackedCVSS 9.1Red Hat Quay 3.9registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-28498trackedCVSS 9.1Red Hat Quay 3.12registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64Patch ↗Advisory ↗

Red HatCVE-2026-4599trackedCVSS 9.1Red Hat Quay 3.12registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64Patch ↗Advisory ↗

Red HatCVE-2026-28498trackedCVSS 9.1Red Hat Quay 3.16registry.redhat.io/quay/quay-rhel9@sha256:5937639bb3bc4fd76c1dfa9d1550f8ab955a5d12b44794c076d127a5ba4d68a4_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-28498trackedCVSS 9.1Red Hat Quay 3.15registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-28802trackedCVSS 9.1Red Hat Quay 3.15registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-4599trackedCVSS 9.1Red Hat Quay 3.15registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64lePatch ↗Advisory ↗

Red HatCVE-2025-15467trackedCVSS 9.8Red Hat Service Interconnect 1service-interconnect/skupper-config-sync-rhel9@sha256:9066ce6dbb603fddd2e0f0cce572149959964e053edfee3790c09b0a0c9ac9cd_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-28498trackedCVSS 9.1Red Hat Quay 3.16registry.redhat.io/quay/quay-rhel9@sha256:0bc25ef16eabd14562b5c15b2f242558ace42865d416820420d669436d9d71ae_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186trackedCVSS 9.1Network Observability (NETOBSERV) 1.11.0registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64Patch ↗Advisory ↗

Red HatCVE-2026-1615trackedCVSS 9.8Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:293b2d26b9a82fa6a55dafb4c594287838cae765c358f3bdfea5b89d83f0391e_s390xPatch ↗Advisory ↗

CiscoCVE-2026-20093trackedCVSS 9.8Cisco UCS C-Series Rack-Mount Standalone Server Software2.1Patch ↗Advisory ↗

CiscoCVE-2026-20160trackedCVSS 9.8Cisco Smart Software Manager9Patch ↗Advisory ↗

Red HatCVE-2026-22797trackedCVSS 9.9Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:29871a94fc618bf280a7c38280ec0642c766838bac34a9ace503378a67f4638d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-28498trackedCVSS 9.1Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:111c3fa869282760a7408db240e5fbddd74816fa5ffc12578c267427eae8eb96_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-28802trackedCVSS 9.1Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:111c3fa869282760a7408db240e5fbddd74816fa5ffc12578c267427eae8eb96_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-7598CVSS 9.1Red Hat Hardened Imageslibssh2-main@aarch64Patch ↗Advisory ↗

AndroidCVE-2026-0049Critical (Android rating)platform/external/dng_sdkNot reportedPatch ↗Advisory ↗

Red HatCVE-2025-47913trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)buildah-2:1.33.13-3.el9_4.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61726trackedCVSS 7.5Red Hat OpenShift Container Platform 4.16containernetworking-plugins-1:1.4.0-8.rhaos4.16.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61726trackedCVSS 7.5Red Hat OpenShift Container Platform 4.16registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:4b0358e16d845b50b56a29ddbdc0ef6f1ba6861f14f49976a8dd4306e003195b_amd64Patch ↗Advisory ↗

Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)podman-4:4.9.4-20.el9_4.2.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)skopeo-2:1.14.5-2.el9_4.4.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)buildah-2:1.33.13-3.el9_4.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)runc-4:1.2.9-1.el9_4.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)containernetworking-plugins-1:1.4.0-6.el9_4.3.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)gvisor-tap-vsock-6:0.7.3-5.el9_4.3.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61726trackedCVSS 7.5Red Hat Openshift Data Foundation 4.19registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:225ba1747733c974fd4a3c9b49f657b180b83486d1c35a473e8e5a2b96abcc53_arm64Patch ↗Advisory ↗

Red HatCVE-2025-61729trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)podman-4:4.9.4-20.el9_4.2.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61729trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)skopeo-2:1.14.5-2.el9_4.4.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61729trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)buildah-2:1.33.13-3.el9_4.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61729trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)runc-4:1.2.9-1.el9_4.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61729trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)containernetworking-plugins-1:1.4.0-6.el9_4.3.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61729trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)gvisor-tap-vsock-6:0.7.3-5.el9_4.3.aarch64Patch ↗Advisory ↗

Red HatCVE-2025-61729trackedCVSS 7.5Red Hat Openshift Data Foundation 4.19registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:225ba1747733c974fd4a3c9b49f657b180b83486d1c35a473e8e5a2b96abcc53_arm64Patch ↗Advisory ↗

Red HatCVE-2025-61732trackedCVSS 7.4Red Hat OpenShift Container Platform 4.16registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:4b0358e16d845b50b56a29ddbdc0ef6f1ba6861f14f49976a8dd4306e003195b_amd64Patch ↗Advisory ↗

Red HatCVE-2026-22016trackedCVSS 7.5Temurin Build of OpenJDK 25.0.3Not reportedPatch ↗Advisory ↗

Red HatCVE-2026-25679trackedCVSS 7.5Red Hat Quay 3.9registry.redhat.io/quay/quay-rhel8@sha256:2c3c6f149c673cfd68cb5cc62f75bb75480a8d4f4470a7de93191bca1cc0f253_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-25679trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)podman-4:4.9.4-20.el9_4.2.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-25679trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)skopeo-2:1.14.5-2.el9_4.4.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-25679trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)buildah-2:1.33.13-3.el9_4.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-25679trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)runc-4:1.2.9-1.el9_4.1.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-25679trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)containernetworking-plugins-1:1.4.0-6.el9_4.3.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-25679trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.4)gvisor-tap-vsock-6:0.7.3-5.el9_4.3.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-26007trackedCVSS 7.4Red Hat Enterprise Linux AppStream (v. 8)fence-agents-0:4.2.1-129.el8_10.25.srcPatch ↗Advisory ↗

Red HatCVE-2026-27459trackedCVSS 8.1Red Hat Quay 3.9registry.redhat.io/quay/quay-rhel8@sha256:2c3c6f149c673cfd68cb5cc62f75bb75480a8d4f4470a7de93191bca1cc0f253_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-27622trackedCVSS 7.4Red Hat Enterprise Linux AppStream E4S (v.8.8)OpenEXR-0:2.2.0-12.el8_8.1.srcPatch ↗Advisory ↗

Red HatCVE-2026-27622trackedCVSS 7.4Red Hat Enterprise Linux AppStream AUS (v.8.6)OpenEXR-0:2.2.0-12.el8_6.1.srcPatch ↗Advisory ↗

Red HatCVE-2026-27622trackedCVSS 7.4Red Hat Enterprise Linux AppStream AUS (v. 8.2)OpenEXR-0:2.2.0-11.el8_2.1.srcPatch ↗Advisory ↗

Red HatCVE-2026-27622trackedCVSS 7.4Red Hat Enterprise Linux AppStream AUS (v.8.4)OpenEXR-0:2.2.0-12.el8_4.1.srcPatch ↗Advisory ↗

Red HatCVE-2026-30922trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)fence-agents-0:4.2.1-129.el8_10.25.srcPatch ↗Advisory ↗

Red HatCVE-2026-32286trackedCVSS 7.5Red Hat Quay 3.9registry.redhat.io/quay/quay-rhel8@sha256:2c3c6f149c673cfd68cb5cc62f75bb75480a8d4f4470a7de93191bca1cc0f253_ppc64lePatch ↗Advisory ↗