Patch Day month

May 2026 vulnerabilities

A server-rendered hunting trail for May 2026: 2,180 returned patch records across 4 vendors. Browse page by page, or use “Load next” to keep adding rows without losing your place.

2,180all patches

140critical

3exploitation detected

4in CISA KEV

544tracked here

Microsoft 1,128Red Hat 1,032Cisco 19Android 1

Page 1 of 11 · records 1–200 of 2,180

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle

CVE-2026-48525 ↗2026-07-24azl3 python-jwt 2.8.0-2 on Azure Linux 3.0ModerateOut-of-band—PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS

CVE-2026-48522 ↗2026-07-24azl3 python-jwt 2.8.0-2 on Azure Linux 3.0ModerateOut-of-band—PyJWKClient: missing scheme allowlist enables SSRF + token forgery via file://, ftp://, data: schemes

CVE-2026-48526 ↗2026-07-24azl3 python-jwt 2.8.0-2 on Azure Linux 3.0ImportantOut-of-band—PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

CVE-2026-48524 ↗2026-07-24azl3 python-jwt 2.8.0-2 on Azure Linux 3.0LowOut-of-band—PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)

CVE-2026-8450 ↗2026-07-24azl3 perl-HTTP-Daemon 6.16-1 on Azure Linux 3.0CriticalOut-of-band—HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()

CVE-2026-46140 ↗2026-06-25azl3 kernel 6.6.142.1-1 on Azure Linux 3.0ModerateOut-of-band—Bluetooth: btmtk: validate WMT event SKB length before struct access

CVE-2026-43059 ↗2026-06-10azl3 kernel 6.6.141.1-1 on Azure Linux 3.0ImportantOut-of-band—Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers

CVE-2026-48959 ↗2026-06-02azl3 perl 5.38.2-509 on Azure Linux 3.0ImportantOut-of-band—IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward

CVE-2026-6324 ↗2026-06-02azl3 libsoup 3.4.4-15 on Azure Linux 3.0ModerateOut-of-band—Libsoup: libsoup: http request smuggling via unsigned to signed conversion error

CVE-2026-10028 ↗2026-06-02azl3 glib-networking 2.78.0-2 on Azure Linux 3.0ModerateOut-of-band—Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain

CVE-2026-9963 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9963 Uninitialized Use in iOS

CVE-2026-10020 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10020 Insufficient validation of untrusted input in Skia

CVE-2026-9898 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9898 Insufficient validation of untrusted input in GPU

CVE-2026-9956 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9956 Use after free in iOS

CVE-2026-9955 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9955 Inappropriate implementation in iOS

CVE-2026-9950 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9950 Insufficient validation of untrusted input in iOS

CVE-2026-9889 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9889 Out of bounds read and write in Dawn

CVE-2026-9888 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9888 Use after free in WebView

CVE-2026-9947 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9947 Use after free in XML

CVE-2026-9943 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9943 Out of bounds read in WebGL

CVE-2026-9880 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9880 Insufficient validation of untrusted input in WebGL

CVE-2026-9876 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9876 Use after free in WebGL

CVE-2026-9875 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9875 Out of bounds read in WebGL

CVE-2026-9921 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9921 Uninitialized Use in WebGL

CVE-2026-9919 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9919 Out of bounds read in WebGL

CVE-2026-9977 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9977 Insufficient validation of untrusted input in WebShare

CVE-2026-9917 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9917 Uninitialized Use in WebGL

CVE-2026-9974 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9974 Out of bounds write in GPU

CVE-2026-9971 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9971 Inappropriate implementation in iOS

CVE-2026-9912 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9912 Inappropriate implementation in GPU

CVE-2026-9911 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9911 Integer overflow in ANGLE

CVE-2026-9969 ↗2026-05-31Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9969 Insufficient validation of untrusted input in ANGLE

CVE-2026-40034 ↗2026-05-31azl3 rust 1.75.0-29 on Azure Linux 3.0ImportantOut-of-band—gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule

CVE-2026-44839 ↗2026-05-31azl3 rabbitmq-server 3.13.7-6 on Azure Linux 3.0ModerateOut-of-band—RabbitMQ: Unsanitized vhost names allow for XSS in management UI

CVE-2025-15649 ↗2026-05-31azl3 perl 5.38.2-509 on Azure Linux 3.0ModerateOut-of-band—IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date

CVE-2026-48962 ↗2026-05-31azl3 perl 5.38.2-509 on Azure Linux 3.0ImportantOut-of-band—IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

CVE-2026-48864 ↗2026-05-31azl3 libsolv 0.7.28-3 on Azure Linux 3.0ImportantOut-of-band—Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

CVE-2026-9804 ↗2026-05-31azl3 kubevirt 1.7.1-2 on Azure Linux 3.0ImportantOut-of-band—Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read

CVE-2026-7374 ↗2026-05-31azl3 kubevirt 1.7.1-2 on Azure Linux 3.0CriticalOut-of-band—Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability

CVE-2026-42012 ↗2026-05-31azl3 gnutls 3.8.3-8 on Azure Linux 3.0ImportantOut-of-band—Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

CVE-2026-5260 ↗2026-05-31azl3 gnutls 3.8.3-8 on Azure Linux 3.0ImportantOut-of-band—Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

CVE-2026-42015 ↗2026-05-31azl3 gnutls 3.8.3-8 on Azure Linux 3.0ModerateOut-of-band—Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

CVE-2026-42013 ↗2026-05-31azl3 gnutls 3.8.3-8 on Azure Linux 3.0ImportantOut-of-band—Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name

CVE-2026-42790 ↗2026-05-31azl3 erlang 26.2.5.20-1 on Azure Linux 3.0ImportantOut-of-band—nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

CVE-2026-42789 ↗2026-05-31azl3 erlang 26.2.5.20-1 on Azure Linux 3.0ImportantOut-of-band—Non-CA certificate accepted as intermediate issuer in public_key path validation

CVE-2026-46242 ↗2026-05-31azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ImportantOut-of-band—eventpoll: fix ep_remove struct eventpoll / struct file UAF

CVE-2026-40510 ↗2026-05-31azl3 opensc 0.27.1-1 on Azure Linux 3.0LowOut-of-band—OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c

CVE-2026-40528 ↗2026-05-31azl3 opensc 0.27.1-1 on Azure Linux 3.0LowOut-of-band—OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c

CVE-2026-41184 ↗2026-05-30azl3 cni-plugins 1.4.0-5 on Azure Linux 3.0ModerateOut-of-band—ServiceAccount token disclosure via install-cni container logs

CVE-2026-10022 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10022 Type Confusion in V8

CVE-2026-10021 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10021 Insufficient validation of untrusted input in USB

CVE-2026-10019 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10019 Integer overflow in ANGLE

CVE-2026-10018 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10018 Integer overflow in ANGLE

CVE-2026-10017 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10017 Out of bounds read in Headless

CVE-2026-10016 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10016 Use after free in DOM

CVE-2026-10015 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10015 Integer overflow in WTF

CVE-2026-10013 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10013 Use after free in WebCodecs

CVE-2026-10012 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10012 Use after free in Skia

CVE-2026-10011 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10011 Inappropriate implementation in Skia

CVE-2026-10009 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10009 Integer overflow in Skia

CVE-2026-10007 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10007 Use after free in SVG

CVE-2026-10006 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10006 Race in WebAudio

CVE-2026-10005 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10005 Use after free in WebAppInstalls

CVE-2026-10004 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10004 Insufficient validation of untrusted input in Passwords

CVE-2026-10003 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10003 Use after free in Views

CVE-2026-10002 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10002 Use after free in PDFium

CVE-2026-10001 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10001 Use after free in PerformanceManager

CVE-2026-10000 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-10000 Use after free in Passwords

CVE-2026-9999 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9999 Inappropriate implementation in ANGLE

CVE-2026-9998 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9998 Integer overflow in Skia

CVE-2026-9997 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9997 Use after free in Input

CVE-2026-9996 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9996 Out of bounds read in WebRTC

CVE-2026-9995 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9995 Use after free in WebXR

CVE-2026-9994 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9994 Use after free in Core

CVE-2026-9993 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9993 Use after free in Views

CVE-2026-9992 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9992 Use after free in Network

CVE-2026-9991 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9991 Inappropriate implementation in Media

CVE-2026-9990 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9990 Use after free in WebAppInstalls

CVE-2026-9989 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9989 Inappropriate implementation in Media

CVE-2026-9988 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9988 Use after free in WebRTC

CVE-2026-9986 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9986 Insufficient validation of untrusted input in OptimizationGuide

CVE-2026-9985 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9985 Insufficient validation of untrusted input in Media

CVE-2026-9984 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9984 Use after free in UI

CVE-2026-9983 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9983 Type Confusion in Skia

CVE-2026-9982 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9982 Insufficient validation of untrusted input in ANGLE

CVE-2026-9981 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9981 Inappropriate implementation in Skia

CVE-2026-9980 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9980 Insufficient validation of untrusted input in Printing

CVE-2026-9979 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9979 Insufficient validation of untrusted input in Input

CVE-2026-9978 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9978 Use after free in Glic

CVE-2026-9976 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9976 Inappropriate implementation in USB

CVE-2026-9975 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9975 Out of bounds read and write in ANGLE

CVE-2026-9973 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9973 Out of bounds write in V8

CVE-2026-9972 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9972 Uninitialized Use in Gamepad

CVE-2026-9970 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9970 Use after free in WebGL

CVE-2026-9968 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9968 Integer overflow in V8

CVE-2026-9967 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9967 Out of bounds write in GPU

CVE-2026-9966 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9966 Integer overflow in XML

CVE-2026-9965 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9965 Out of bounds write in ANGLE

CVE-2026-9964 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9964 Use after free in Bluetooth

CVE-2026-9962 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9962 Use after free in WebRTC

CVE-2026-9961 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9961 Use after free in SurfaceCapture

CVE-2026-9960 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9960 Integer overflow in PDFium

CVE-2026-9959 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9959 Race in WebRTC

CVE-2026-9958 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9958 Use after free in PDFium

CVE-2026-9957 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9957 Use after free in PDF

CVE-2026-9954 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9954 Use after free in TabStrip

CVE-2026-9953 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9953 Out of bounds read in ANGLE

CVE-2026-9952 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9952 Use after free in WebAudio

CVE-2026-9951 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9951 Use after free in UI

CVE-2026-9949 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9949 Use after free in Core

CVE-2026-9948 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9948 Use after free in Views

CVE-2026-9946 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9946 Use after free in ANGLE

CVE-2026-9945 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9945 Use after free in Media

CVE-2026-9944 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9944 Uninitialized Use in ANGLE

CVE-2026-9942 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9942 Uninitialized Use in ANGLE

CVE-2026-9941 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9941 Use after free in ANGLE

CVE-2026-9940 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9940 Heap buffer overflow in ANGLE

CVE-2026-9939 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9939 Heap buffer overflow in WebCodecs

CVE-2026-9938 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9938 Inappropriate implementation in V8

CVE-2026-9937 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9937 Use after free in UI

CVE-2026-9936 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9936 Use after free in GFX

CVE-2026-9935 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9935 Uninitialized Use in ANGLE

CVE-2026-9934 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9934 Use after free in Aura

CVE-2026-9933 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9933 Use after free in Input

CVE-2026-9932 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9932 Use after free in ANGLE

CVE-2026-9931 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9931 Use after free in GPU

CVE-2026-9930 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9930 Out of bounds write in Dawn

CVE-2026-9929 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9929 Inappropriate implementation in WebGL

CVE-2026-9928 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9928 Out of bounds read in ANGLE

CVE-2026-9927 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9927 Use after free in ANGLE

CVE-2026-9926 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9926 Heap buffer overflow in ANGLE

CVE-2026-9925 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9925 Use after free in ANGLE

CVE-2026-9924 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9924 Heap buffer overflow in ANGLE

CVE-2026-9923 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9923 Use after free in Skia

CVE-2026-9922 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9922 Use after free in GPU

CVE-2026-9920 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9920 Uninitialized Use in GPU

CVE-2026-9918 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9918 Inappropriate implementation in Tint

CVE-2026-9916 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9916 Out of bounds write in ANGLE

CVE-2026-9915 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9915 Heap buffer overflow in ANGLE

CVE-2026-9914 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9914 Insufficient validation of untrusted input in ANGLE

CVE-2026-9913 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9913 Inappropriate implementation in ANGLE

CVE-2026-9910 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9910 Out of bounds memory access in ANGLE

CVE-2026-9909 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9909 Integer overflow in Skia

CVE-2026-9908 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9908 Out of bounds read in ANGLE

CVE-2026-9907 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9907 Out of bounds read in Dawn

CVE-2026-9906 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9906 Out of bounds write in GPU

CVE-2026-9905 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9905 Use after free in Accessibility

CVE-2026-9904 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9904 Use after free in ANGLE

CVE-2026-9903 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9903 Insufficient validation of untrusted input in Site Isolation

CVE-2026-9902 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9902 Use after free in Accessibility

CVE-2026-9901 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9901 Use after free in ANGLE

CVE-2026-9900 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9900 Out of bounds write in ANGLE

CVE-2026-9899 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9899 Use after free in ANGLE

CVE-2026-9897 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9897 Use after free in DOM

CVE-2026-9896 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9896 Out of bounds write in V8

CVE-2026-9895 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9895 Out of bounds read in GPU

CVE-2026-9894 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9894 Use after free in GPU

CVE-2026-9893 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9893 Use after free in Skia

CVE-2026-9892 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9892 Inappropriate implementation in Skia

CVE-2026-9891 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9891 Use after free in Extensions

CVE-2026-9890 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9890 Use after free in XR

CVE-2026-9887 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9887 Use after free in Proxy

CVE-2026-9886 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9886 Use after free in Base

CVE-2026-9885 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9885 Insufficient validation of untrusted input in UI

CVE-2026-9884 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9884 Use after free in Browser

CVE-2026-9882 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9882 Integer overflow in ANGLE

CVE-2026-9883 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9883 Use after free in Base

CVE-2026-9881 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9881 Use after free in Bluetooth

CVE-2026-9879 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9879 Out of bounds write in ANGLE

CVE-2026-9878 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9878 Use after free in ANGLE

CVE-2026-9877 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9877 Use after free in ANGLE

CVE-2026-9874 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9874 Use after free in Dawn

CVE-2026-9873 ↗2026-05-29Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-9873 Use after free in Network

CVE-2026-47294 ↗2026-05-29Microsoft SharePoint Enterprise Server 2016ImportantOut-of-band1%KB5002863 KB5002868

and 1 more

KB5002870

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-46178 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()

CVE-2026-46181 ↗2026-05-29azl3 kernel 6.6.141.1-1 on Azure Linux 3.0ModerateOut-of-band—RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

CVE-2026-46174 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache

CVE-2026-46193 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—xfrm: ah: account for ESN high bits in async callbacks

CVE-2026-46184 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—sound: ua101: fix division by zero at probe

CVE-2026-46106 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—eventfs: Hold eventfs_mutex and SRCU when remount walks events

CVE-2026-46121 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock

CVE-2026-46124 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—isofs: validate block number from NFS file handle in isofs_export_iget

CVE-2026-46142 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—net: libwx: fix VF illegal register access

CVE-2026-46151 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—usb: usblp: fix heap leak in IEEE 1284 device ID via short response

CVE-2026-46199 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

CVE-2026-46130 ↗2026-05-29azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-band—dm-verity-fec: fix reading parity bytes split across blocks (take 3)

CVE-2026-46169 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0LowOut-of-band—hfsplus: fix uninit-value by validating catalog record size

CVE-2026-46206 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—batman-adv: reject new tp_meter sessions during teardown

CVE-2026-46144 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()

CVE-2026-46135 ↗2026-05-29azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-band—nvmet-tcp: fix race between ICReq handling and queue teardown

CVE-2026-46119 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—libceph: Fix slab-out-of-bounds access in auth message processing

CVE-2026-9538 ↗2026-05-29azl3 perl 5.38.2-509 on Azure Linux 3.0ImportantOut-of-band—Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header

CVE-2026-46113 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

CVE-2026-42497 ↗2026-05-29azl3 perl 5.38.2-509 on Azure Linux 3.0ModerateOut-of-band—Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory

CVE-2026-46189 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

CVE-2026-42496 ↗2026-05-29azl3 perl 5.38.2-509 on Azure Linux 3.0ImportantOut-of-band—Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory

CVE-2026-46167 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl

CVE-2026-46138 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt

CVE-2026-46147 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-band—KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()

CVE-2026-46150 ↗2026-05-29azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ImportantOut-of-band—fanotify: fix false positive on permission events