Patch Day month
April 2026 vulnerabilities
A defender-focused view of 1,517 vulnerabilities across 4,653 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An EPSS percentage is the global 30-day exploitation probability in the wild, not specific to you.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 20 of 24 · records 3,801–4,000 of 4,653
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-23409 ↗azl3 kernel 6.6.0.0-1 on Azure Linux 3.0ModerateOut-of-band—apparmor: fix differential encoding verification
CVE-2026-23405 ↗azl3 kernel 6.6.0.0-1 on Azure Linux 3.0ModerateOut-of-band—apparmor: fix: limit the number of levels of policy namespaces
CVE-2026-23404 ↗azl3 kernel 6.6.0.0-1 on Azure Linux 3.0ModerateOut-of-band—apparmor: replace recursive profile removal with iterative approach
CVE-2026-23403 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0ModerateOut-of-band—apparmor: fix memory leak in verify_header
CVE-2026-39881 ↗azl3 vim 9.2.0240-1 on Azure Linux 3.0ModerateOut-of-band—Vim Ex command injection in Vims NetBeans integration
CVE-2026-40025 ↗azl3 sleuthkit 4.12.1-1 on Azure Linux 3.0ModerateOut-of-band—Sleuth Kit APFS Keybag Parser Out-of-Bounds Read
CVE-2026-40026 ↗azl3 sleuthkit 4.12.1-1 on Azure Linux 3.0ModerateOut-of-band—Sleuth Kit ISO9660 SUSP Extension Reference Out-of-Bounds Read
CVE-2026-34446 ↗azl3 pytorch 2.2.2-12 on Azure Linux 3.0ModerateOut-of-band—ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load
CVE-2026-31790 ↗azl3 openssl 3.3.5-4 on Azure Linux 3.0ModerateOut-of-band—Incorrect Failure Handling in RSA KEM RSASVE Encapsulation
CVE-2026-39314 ↗azl3 cups 2.4.16-1 on Azure Linux 3.0ModerateOut-of-band—CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`
CVE-2026-39316 ↗azl3 cups 2.4.16-1 on Azure Linux 3.0ModerateOut-of-band—CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer
CVE-2026-34933 ↗cbl2 avahi 0.8-5 on CBL Mariner 2.0ModerateOut-of-band—Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2008-1891Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-1891Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-2662Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-2662Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-2663Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-2663Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-2664Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-2664Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-2725Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-2725Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-2726Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-2726Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-3655Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-3655Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-3656Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-3656Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-3657Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-3657Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-3905Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2008-3905Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2009-5147Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2009-5147Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2011-0188Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2011-0188Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2011-2686Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2011-2686Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2011-2705Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2011-2705Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2011-3009Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2011-3009Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2011-4815Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2011-4815Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2012-5371Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2012-5371Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2013-1821Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2013-1821Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2014-4975Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2014-4975Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2014-8080Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2014-8080Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2014-8090Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2014-8090Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2015-7551Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-3-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2015-7551Moderate (Red Hat rating)Red Hat Hardened Imagesruby3-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2023-40403CVSS 6.5Red Hat AI Inference Server 3.2registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:54616c9f3e4d27120504b0b2020432ef3ff85286a50de7be842f05df0cfcd69e_arm64Patch ↗Advisory ↗
Red HatCVE-2025-14831CVSS 5.3Red Hat Discovery 2registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64Patch ↗Advisory ↗
Red HatCVE-2025-14831CVSS 5.3Red Hat AI Inference Server 3.2registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:54616c9f3e4d27120504b0b2020432ef3ff85286a50de7be842f05df0cfcd69e_arm64Patch ↗Advisory ↗
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.