Patch Day month

May 2026 vulnerabilities

A defender-focused view of 1,473 vulnerabilities across 2,584 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.

2,584all patch recordsClear filters 143criticalShow these records 3Microsoft exploitation detectedShow these records 4Microsoft in CISA KEVShow these records 549tracked hereShow these records

Red Hat 1,436 Microsoft 1,128 Cisco 19 Android 1

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

#patch-filter-form, #patch-filter-loading { display: none !important; } Complete-month filters require JavaScript. The responsive records and ordinary page links below remain complete and usable.

An EPSS percentage is the global 30-day exploitation probability in the wild, not specific to you.

Page 1 of 13 · records 1–200 of 2,584

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle

CVE-2026-42897 ↗2026-05-14Microsoft Exchange Server 2016 Cumulative Update 23CriticalOut-of-band70%Exploitation detectedCISA KEVVulnCheckENISAKB5094139 KB5094140

and 2 more

KB5094142 KB5094144

2 mentionsMicrosoft Exchange Server Spoofing Vulnerability

CVE-2026-41091 ↗2026-05-19Microsoft Malware Protection EngineImportantOut-of-band10%Exploitation detectedCISA KEVVulnCheckENISA1 mentionsMicrosoft Defender Elevation of Privilege Vulnerability

CVE-2026-45498 ↗2026-05-19Microsoft Defender Antimalware PlatformLowOut-of-band63%Exploitation detectedCISA KEVVulnCheckENISA1 mentionsMicrosoft Defender Denial of Service Vulnerability

CVE-2026-45659 ↗2026-05-21Microsoft SharePoint Enterprise Server 2016ImportantOut-of-band9%CISA KEVVulnCheckENISAKB5002863 KB5002868

and 1 more

KB5002870

4 mentionsMicrosoft SharePoint Remote Code Execution Vulnerability

CVE-2026-23652 ↗2026-05-21Microsoft Power PagesCriticalOut-of-band1%Microsoft Power Pages Remote Code Execution Vulnerability

CVE-2026-23663 ↗2026-05-21Microsoft Global Secure Access (GSA)CriticalOut-of-band1%Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability

CVE-2026-26147 ↗2026-05-21Azure Stack HCICriticalOut-of-band1%Azure Stack HCI Information Disclosure Vulnerability

CVE-2026-33843 ↗2026-05-21Microsoft Entra IDCriticalOut-of-band0%Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

CVE-2026-35430 ↗2026-05-21Azure Privileged Identity Management (PIM)CriticalOut-of-band0%Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability

CVE-2026-40411 ↗2026-05-21Azure Virtual Network GatewayCriticalOut-of-band1%Azure Virtual Network Gateway Remote Code Execution Vulnerability

CVE-2026-40412 ↗2026-05-21Azure Orbital SpatioCriticalOut-of-band1%Azure Orbital Spatio Remote Code Execution Vulnerability

CVE-2026-41090 ↗2026-05-21Microsoft 365 Copilot for iOSCriticalOut-of-band0%Microsoft Copilot Tampering Vulnerability

CVE-2026-41104 ↗2026-05-21Microsoft Planetary Computer Pro (GeoCatalog)CriticalOut-of-band1%Microsoft Planetary Computer Pro Information Disclosure Vulnerability

CVE-2026-42827 ↗2026-05-21Microsoft 365 CopilotCriticalOut-of-band1%M365 Copilot Information Disclosure Vulnerability

CVE-2026-42901 ↗2026-05-21Microsoft Entra IDCriticalOut-of-band0%Microsoft Entra ID Elevation of Privilege Vulnerability

CVE-2026-47280 ↗2026-05-21Azure Resource ManagerCriticalOut-of-band0%Azure Resource Manager Elevation of Privilege Vulnerability

CVE-2026-45584 ↗2026-05-19Microsoft Malware Protection EngineCriticalOut-of-band1%Microsoft Defender Remote Code Execution Vulnerability

CVE-2026-42822 ↗2026-05-18Azure LocalCriticalOut-of-band0%More likelyAzure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability

CVE-2026-42945 ↗2026-05-16azl3 nginx 1.28.3-1 on Azure Linux 3.0CriticalOut-of-band66%VulnCheck1 mentionsNGINX ngx_http_rewrite_module vulnerability

CVE-2026-41615 ↗2026-05-14Microsoft Authenticator for AndroidCriticalOut-of-band1%Microsoft Authenticator Information Disclosure Vulnerability

CVE-2026-32161 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsCritical0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability

CVE-2026-35421 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsCritical1%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows GDI Remote Code Execution Vulnerability

CVE-2026-40358 ↗2026-05-12Microsoft Office 2019 for 32-bit editionsCritical0%KB5002866Microsoft Office Remote Code Execution Vulnerability

CVE-2026-40361 ↗2026-05-12Microsoft Office 2019 for 32-bit editionsCritical1%More likelyKB5002858Microsoft Outlook and Word Remote Code Execution Vulnerability

CVE-2026-40363 ↗2026-05-12Microsoft Office 2019 for 32-bit editionsCritical0%KB5002866Microsoft Office Remote Code Execution Vulnerability

CVE-2026-40364 ↗2026-05-12Microsoft Office 2019 for 32-bit editionsCritical4%More likelyKB5002858Microsoft Word Remote Code Execution Vulnerability

CVE-2026-40365 ↗2026-05-12Microsoft SharePoint Enterprise Server 2016Critical1%KB5002863 KB5002868

and 1 more

KB5002870

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-40366 ↗2026-05-12Microsoft Office 2019 for 32-bit editionsCritical0%KB5002858Microsoft Word Remote Code Execution Vulnerability

CVE-2026-40367 ↗2026-05-12Microsoft SharePoint Enterprise Server 2016Critical0%KB5002858 KB5002863

and 4 more

KB5002868 KB5002869 KB5002870 KB5002872

Microsoft Word Remote Code Execution Vulnerability

CVE-2026-40402 ↗2026-05-12Windows Server 2022Critical0%KB5087420 KB5087424

and 2 more

KB5087545 KB5093998

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2026-40403 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsCritical0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2026-41089 ↗2026-05-12Windows Server 2019Critical80%VulnCheckKB5087423 KB5087424

and 7 more

KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087545

Windows Netlogon Remote Code Execution Vulnerability

CVE-2026-41096 ↗2026-05-12Windows Server 2025 (Server Core installation)Critical2%KB5087420 KB5087423

and 6 more

KB5087539 KB5087541 KB5089466 KB5089548 KB5089549 KB5093998

Windows DNS Client Remote Code Execution Vulnerability

CVE-2026-41103 ↗2026-05-12Microsoft JIRA SAML SSO pluginCritical5%More likelyMicrosoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability

CVE-2026-42831 ↗2026-05-12Microsoft Office LTSC for Mac 2021Critical0%Microsoft Office Remote Code Execution Vulnerability

CVE-2026-42898 ↗2026-05-12Microsoft Dynamics 365 (on-premises) version 9.1Critical1%KB5078943Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

CVE-2026-26129 ↗2026-05-07Microsoft 365 Copilot's Business ChatCriticalOut-of-band1%M365 Copilot Information Disclosure Vulnerability

CVE-2026-26164 ↗2026-05-07Microsoft 365 Copilot's Business ChatCriticalOut-of-band1%M365 Copilot Information Disclosure Vulnerability

CVE-2026-32207 ↗2026-05-07Azure Machine LearningCriticalOut-of-band1%Azure Machine Learning Notebook Spoofing Vulnerability

CVE-2026-33109 ↗2026-05-07Azure Managed Instance for Apache CassandraCriticalOut-of-band1%Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

CVE-2026-33111 ↗2026-05-07Copilot Chat (Microsoft Edge)CriticalOut-of-band1%Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability

CVE-2026-33821 ↗2026-05-07Dynamics 365 Customer InsightsCriticalOut-of-band1%Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability

CVE-2026-33823 ↗2026-05-07Microsoft TeamsCriticalOut-of-band1%Microsoft Team Events Portal Information Disclosure Vulnerability

CVE-2026-33844 ↗2026-05-07Azure Managed Instance for Apache CassandraCriticalOut-of-band1%Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

CVE-2026-34327 ↗2026-05-07Microsoft Partner CenterCriticalOut-of-band1%Microsoft Partner Center Spoofing Vulnerability

CVE-2026-35428 ↗2026-05-07Azure Cloud ShellCriticalOut-of-band1%Azure Cloud Shell Spoofing Vulnerability

CVE-2026-35435 ↗2026-05-07Azure AI FoundryCriticalOut-of-band1%More likelyAzure AI Foundry Elevation of Privilege Vulnerability

CVE-2026-40379 ↗2026-05-07Microsoft Entra IDCriticalOut-of-band1%Azure Entra ID Spoofing Vulnerability

CVE-2026-41105 ↗2026-05-07Azure Monitor Action Group notification systemCriticalOut-of-band1%Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability

CVE-2026-42826 ↗2026-05-07Azure DevOpsCriticalOut-of-band1%Azure DevOps Information Disclosure Vulnerability

CVE-2026-8450 ↗2026-07-24azl3 perl-HTTP-Daemon 6.16-1 on Azure Linux 3.0CriticalOut-of-band—HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()

CVE-2026-7374 ↗2026-05-31azl3 kubevirt 1.7.1-2 on Azure Linux 3.0CriticalOut-of-band—Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability

CVE-2025-71305 ↗2026-05-28azl3 kernel 6.6.139.1-1 on Azure Linux 3.0CriticalOut-of-band—drm/display/dp_mst: Add protection against 0 vcpi

CVE-2026-45899 ↗2026-05-28azl3 kernel 6.6.139.1-1 on Azure Linux 3.0CriticalOut-of-band—ext4: drop extent cache when splitting extent fails

CVE-2026-42508 ↗2026-05-27azl3 libcontainers-common 20240213-3 on Azure Linux 3.0CriticalOut-of-band—Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

CVE-2026-39833 ↗2026-05-27azl3 docker-buildx 0.14.0-11 on Azure Linux 3.0CriticalOut-of-band—Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

CVE-2026-46595 ↗2026-05-27azl3 docker-buildx 0.14.0-11 on Azure Linux 3.0CriticalOut-of-band—Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

CVE-2026-39832 ↗2026-05-27azl3 docker-buildx 0.14.0-11 on Azure Linux 3.0CriticalOut-of-band—Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

CVE-2026-39834 ↗2026-05-27azl3 cert-manager 1.12.15-6 on Azure Linux 3.0CriticalOut-of-band—Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

CVE-2026-39831 ↗2026-05-27azl3 cert-manager 1.12.15-6 on Azure Linux 3.0CriticalOut-of-band—Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

CVE-2026-39830 ↗2026-05-27azl3 cert-manager 1.12.15-6 on Azure Linux 3.0CriticalOut-of-band—Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

CVE-2026-39824 ↗2026-05-27azl3 application-gateway-kubernetes-ingress 1.7.7-3 on Azure Linux 3.0CriticalOut-of-band—Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

CVE-2026-39821 ↗2026-05-27azl3 application-gateway-kubernetes-ingress 1.7.7-3 on Azure Linux 3.0CriticalOut-of-band—Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

CVE-2026-33278 ↗2026-05-21azl3 unbound 1.19.1-5 on Azure Linux 3.0CriticalOut-of-band—Possible arbitrary code execution during DNSSEC validation

CVE-2026-6722 ↗2026-05-11azl3 php 8.3.29-1 on Azure Linux 3.0CriticalOut-of-band—Use-After-Free in SOAP using Apache map

CVE-2026-31718 ↗2026-05-08azl3 kernel 6.6.137.1-2 on Azure Linux 3.0CriticalOut-of-band—ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger

CVE-2026-31705 ↗2026-05-02azl3 kernel 6.6.134.1-2 on Azure Linux 3.0CriticalOut-of-band—ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment

CVE-2026-47294 ↗2026-05-29Microsoft SharePoint Enterprise Server 2016ImportantOut-of-band1%KB5002863 KB5002868

and 1 more

KB5002870

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-42834 ↗2026-05-19Windows Admin Center in Azure PortalImportantOut-of-band0%Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

CVE-2026-45585 ↗2026-05-19Windows Server 2025 (Server Core installation)ImportantOut-of-band1%More likelyKB5094125 KB5094126

and 1 more

KB5095051

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2026-45495 ↗2026-05-15Microsoft Edge (Chromium-based)ImportantOut-of-band1%More likelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2025-54518 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5078737 KB5087420

and 12 more

KB5087423 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

AMD: CVE-2025-54518 CPU OP Cache Corruption

CVE-2026-21530 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5002578 KB5087420

and 15 more

KB5087423 KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Rich Text Edit Elevation of Privilege Vulnerability

CVE-2026-32170 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Rich Text Edit Elevation of Privilege Vulnerability

CVE-2026-32175 ↗2026-05-12.NET 10.0 installed on WindowsImportant1%KB5093446 KB5093447

and 1 more

KB5093448

.NET Core Tampering Vulnerability

CVE-2026-32177 ↗2026-05-12.NET 10.0 installed on WindowsImportant1%KB5087048 KB5087049

and 18 more

KB5087051 KB5087053 KB5087054 KB5087055 KB5087058 KB5087059 KB5087061 KB5087062 KB5087063 KB5087064 KB5087065 KB5087066 KB5087067 KB5087068 KB5087069 KB5093446 KB5093447 KB5093448

.NET Elevation of Privilege Vulnerability

CVE-2026-32185 ↗2026-05-12Microsoft Teams for AndroidImportant0%Microsoft Teams Spoofing Vulnerability

CVE-2026-32204 ↗2026-05-12Azure Monitor AgentImportant0%Azure Monitor Agent Elevation of Privilege Vulnerability

CVE-2026-32209 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability

CVE-2026-33110 ↗2026-05-12Microsoft SharePoint Enterprise Server 2016Important2%KB5002863 KB5002868

and 1 more

KB5002870

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-33112 ↗2026-05-12Microsoft SharePoint Enterprise Server 2016Important3%KB5002863 KB5002868

and 1 more

KB5002870

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2026-33117 ↗2026-05-12Azure SDK for JavaImportant0%Azure SDK for Java Security Feature Bypass Vulnerability

CVE-2026-33833 ↗2026-05-12Azure Machine LearningImportant0%Azure Machine Learning Notebook Spoofing Vulnerability

CVE-2026-33834 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Event Logging Service Elevation of Privilege Vulnerability

CVE-2026-33835 ↗2026-05-12Windows Server 2019Important2%More likelyKB5087420 KB5087423

and 11 more

KB5087424 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-33837 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant2%More likelyKB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows TCP/IP Local Elevation of Privilege Vulnerability

CVE-2026-33838 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVE-2026-33839 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 11 more

KB5087424 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Win32k Elevation of Privilege Vulnerability

CVE-2026-33840 ↗2026-05-12Windows Server 2025 (Server Core installation)Important2%More likelyKB5087423 KB5087539

and 3 more

KB5089466 KB5089548 KB5089549

Win32k Elevation of Privilege Vulnerability

CVE-2026-33841 ↗2026-05-12Windows Server 2022Important0%More likelyKB5087420 KB5087423

and 10 more

KB5087424 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-34329 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2026-34330 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Win32k Elevation of Privilege Vulnerability

CVE-2026-34331 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Win32k Elevation of Privilege Vulnerability

CVE-2026-34332 ↗2026-05-12Windows Server 2025 (Server Core installation)Important1%KB5087423 KB5087539Windows Kernel-Mode Driver Remote Code Execution Vulnerability

CVE-2026-34333 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-34334 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows TCP/IP Elevation of Privilege Vulnerability

CVE-2026-34336 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 12 more

KB5087424 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-34337 ↗2026-05-12Windows Server 2022Important0%KB5087420 KB5087423

and 11 more

KB5087424 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-34338 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-34339 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 12 more

KB5087424 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVE-2026-34340 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 11 more

KB5087424 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2026-34341 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability

CVE-2026-34342 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2026-34343 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability

CVE-2026-34344 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-34345 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 12 more

KB5087424 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-34347 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Win32k Elevation of Privilege Vulnerability

CVE-2026-34350 ↗2026-05-12Windows Server 2025 (Server Core installation)Important1%KB5087423 KB5087539Windows Storport Miniport Driver Denial of Service Vulnerability

CVE-2026-34351 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows TCP/IP Elevation of Privilege Vulnerability

CVE-2026-35415 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant0%KB5087420 KB5087423

and 13 more

KB5087424 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVE-2026-35416 ↗2026-05-12Windows 10 Version 1809 for 32-bit SystemsImportant2%More likelyKB5087420 KB5087423

and 14 more

KB5087424 KB5087470 KB5087471 KB5087537 KB5087538 KB5087539 KB5087541 KB5087544 KB5087545 KB5089466 KB5089548 KB5089549 KB5093998 KB5094127

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory

CiscoCVE-2026-20182trackedCVSS 10.0Cisco Catalyst SD-WAN17.2Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.16registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel9@sha256:7d1f571b87ba1e197285c78a78ac4dcffa55ac4e6382ecf10ed630abd02e4df0_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.16registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:a38d8ed8b5ea31126b1f2238db1e790ea01a154949187bfe355c21a76f789462_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Pipelines 1.2registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9@sha256:0b165040657b16770b52a0cde7be46db0d6410e6d502b11e7b6053f9ad441c49_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Pipelines 1.2registry.redhat.io/openshift-pipelines/pipelines-operator-bundle@sha256:f4100f181620f5424e66633dbdd3c7402c8db75f93c54fe092ff2301d8dd0015_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33211CVSS 9.6Red Hat OpenShift Pipelines 1.2registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9@sha256:0b165040657b16770b52a0cde7be46db0d6410e6d502b11e7b6053f9ad441c49_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33211CVSS 9.6Red Hat OpenShift Pipelines 1.2registry.redhat.io/openshift-pipelines/pipelines-operator-bundle@sha256:f4100f181620f5424e66633dbdd3c7402c8db75f93c54fe092ff2301d8dd0015_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.16microshift-0:4.16.63-202605251227.p0.g1133ac0.assembly.4.16.63.el9.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat multicluster global hub 1.5.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:62b308e48b973c04509efc66de4cdf11acc729625b75f86bab27de82a7230d14_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-41607CVSS 9.1Red Hat multicluster global hub 1.5.0registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8c03495da4214e70589e238a60815c265223952470da6d80034e2f83de5c3c8e_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.19registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:02d39c48c3ecaaea7d6d3854845c498b53f2ef644d83c2c662f2ac15fc9ad907_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.19registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:79246f9cf97c2dcbcb41bf61c07d9dedb9e99ea87af071c685c12c035f1035ee_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.19microshift-0:4.19.32-202605212036.p0.g27d51c3.assembly.4.19.32.el9.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Cryostat 4 on RHEL 9cryostat/cryostat-grafana-dashboard-rhel9@sha256:8270ad1bdb5394e463b8f688fe39adbfd3177881f3a3ed0e188f5acd07b12747_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.21registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9@sha256:051fe1b7a40fa21e8e84db4d984748f8c9bd6507904a738778ba3ea2c8fc05a4_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.21registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:b7d56d9687b95c08a7f36ef1fc338fd74d2c070bb8e57f0814617f375042e0b0_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift GitOps 1.19registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8@sha256:021a2b93438ab7a0cdb1ee15ce32c38cccb556802203b7f79604b21fde0dfe38_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift GitOps 1.18registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:45982222d809b7e77adf13a750f5e5dca63aa0240d76b7d496f1e2676f71c87f_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat Quay 3.14registry.redhat.io/quay/quay-rhel8@sha256:4ae7d2d72a2370bd5401f570e21386bc9a6df0b145030060c922fcf754c7839b_s390xPatch ↗Advisory ↗

Red HatCVE-2026-7374CVSS 9.9Red Hat Container Native Virtualization 4.21registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:269847ed93e9213f9295c7ce9da76ccdbe5812d87d86485167025145e374ca69_amd64Patch ↗Advisory ↗

Red HatCVE-2026-7374CVSS 9.9Red Hat Container Native Virtualization 4.18registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:2182b286267298b951fe96e36abb05de59dc6569b9633e31ce5ec1354f30aeae_amd64Patch ↗Advisory ↗

Red HatCVE-2026-7374CVSS 9.9Red Hat Container Native Virtualization 4.17registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:72cf5ccb119c366afd5e03cd30896520c904a6a5185763023a2cb0dbe51781d8_arm64Patch ↗Advisory ↗

Red HatCVE-2026-7374CVSS 9.9Red Hat Container Native Virtualization 4.19registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:2684c4c10aa7f81d79ade6808a862fafdc58ff00f8b3b331b7b777fc73de537d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-7374CVSS 9.9Red Hat Container Native Virtualization 4.2registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:0136aaa20934175d763c6b5ddf24ebd90e8a7e4510a6517c60705d96ae6c5149_s390xPatch ↗Advisory ↗

Red HatCVE-2026-7374CVSS 9.9Red Hat Container Native Virtualization 4.12registry.redhat.io/container-native-virtualization/virt-handler@sha256:14d2ab487872ac2180a6bf413703d124e5a66063222712e0b0693d120414512d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-7374CVSS 9.9Red Hat Container Native Virtualization 4.15registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64Patch ↗Advisory ↗

Red HatCVE-2026-7374CVSS 9.9Red Hat Container Native Virtualization 4.13registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64Patch ↗Advisory ↗

Red HatCVE-2026-7374CVSS 9.9Red Hat Container Native Virtualization 4.14registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64Patch ↗Advisory ↗

Red HatCVE-2026-7374CVSS 9.9Red Hat Container Native Virtualization 4.16registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:3f39822dbf9a5ad965f4e09b66ad4319c95e38492095e1a5265033d3d245c060_amd64Patch ↗Advisory ↗

CiscoCVE-2026-20223CVSS 10.0Cisco Secure Workload1.102Patch ↗Advisory ↗

Red HatCVE-2026-22778CVSS 9.8Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:6e7c80ca248eb60192b65f5209efecbfb1467ed884899f34fe8a60ea1e9cd5dd_s390xPatch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.18registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel9@sha256:b1700eb1f2dacd9b9c8f682891180dc83f876390d0c386c0bcf3778ee2aa7eac_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.20registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:2007fc6d424e2075b80f2a987cd0ae65fd38ae02865aafddd4d5605aa3460474_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/kube-metrics-server-rhel9@sha256:0d9d982295f7e40a8117ae0e37507718c8fbddecbab6d8d168fba7b8c40d9d04_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:2a70c8d6b2f7ee2030b48c0a405a79b3c66183338a4552b94970cf8ea531b96f_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.18microshift-0:4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-kube-auth-proxy-rhel9@sha256:0e360eae488f4e2515221476aeffeb591f40d44b97177f51803449d8f3d61e7a_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)opentelemetry-collector-0:0.144.0-2.el10_0.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat Enterprise Linux AppStream EUS (v.9.6)opentelemetry-collector-0:0.144.0-2.el9_6.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat Enterprise Linux AppStream EUS (v.9.4)opentelemetry-collector-0:0.144.0-2.el9_4.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-27962CVSS 9.1Red Hat Quay 3.16registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64Patch ↗Advisory ↗

Red HatCVE-2026-28802CVSS 9.1Red Hat Quay 3.16registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.21registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:15d899f50080b793865170add60d8f1a75c720fbee60a15005d6791af9664176_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.21registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator@sha256:55af6d0b6f04aae9227108d33af2589ec2b08def27b0a96bbd8cf5dcd96a0b34_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1multicluster engine for Kubernetes 2.9.0registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:16dddebe90650a5d8a0d3c10357c7d0a094920889921befb9a52d9377493c5f4_s390xPatch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1multicluster engine for Kubernetes 2.1registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:055922c629f46db60d21bc850a65eff3e1dd8cb2428591d464c6a9f5cfb97951_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1multicluster engine for Kubernetes 2.11.0registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:58bd75f698338aab4cc8c04e28530368dece860c4741f8a2926f72726671e8e1_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1multicluster engine for Kubernetes 2.9.0registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:9382c0cf93d5bfc0e844aeacb5507aefa8b6358bf3c211890adc5a78878140d5_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat Enterprise Linux AppStream (v. 10)opentelemetry-collector-0:0.144.0-2.el10_2.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat Enterprise Linux AppStream (v. 9)rhc-1:0.2.7-5.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat Enterprise Linux AppStream (v. 9)opentelemetry-collector-0:0.144.0-2.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat Quay 3.16registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64Patch ↗Advisory ↗

Red HatCVE-2026-4599CVSS 9.1Red Hat Quay 3.16registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64Patch ↗Advisory ↗

Red HatCVE-2026-4599CVSS 9.1Migration Toolkit for Virtualization 2.1registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:0b1a46357b43429aa2729b7caa728969a0d2cf306f56cbf3607acb78ac95b099_amd64Patch ↗Advisory ↗

Red HatCVE-2026-4599CVSS 9.1Migration Toolkit for Virtualization 2.9registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:ac92e8f85699adfd5517fa9bbeb34833a4f9f9b0ccbfa3a55c0d9822976dadfc_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27446CVSS 9.1Red Hat JBoss EAP 8.1 for RHEL 8eap8-activemq-artemis-0:2.40.0-6.redhat_00012.1.el8eap.noarchPatch ↗Advisory ↗

Red HatCVE-2026-27446CVSS 9.1Red Hat JBoss EAP 8.1 for RHEL 9eap8-activemq-artemis-0:2.40.0-6.redhat_00012.1.el9eap.noarchPatch ↗Advisory ↗

Red HatCVE-2026-27446CVSS 9.1Red Hat JBoss Enterprise Application Platform 8.1—Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1multicluster engine for Kubernetes 2.6registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:04a8dd280a134d768f6818aa2d2af3ba9ad8f6d2226d536f763f2df3fb4816d8_s390xPatch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.15registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:2203b3d33eb5908f8989970788a214469d29588924d48670b5a12f0f43334233_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1multicluster engine for Kubernetes 2.8registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:2157410769cc1243e3396847f32ad03eadb6bdf4693cf14d332e55afd9a107e1_s390xPatch ↗Advisory ↗

Red HatCVE-2026-7598CVSS 9.1Red Hat Hardened Imagesrust-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.14registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:07ceb33add8664b2ed5a4135f47d21e6e3a8cb0347dddeb69245540c97f5b15e_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27140CVSS 9.0Red Hat Enterprise Linux AppStream EUS (v.9.6)go-toolset-0:1.25.9-1.el9_6.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-27140CVSS 9.0Red Hat Enterprise Linux AppStream EUS (v. 10.0)go-toolset-0:1.25.9-1.el10_0.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-41607CVSS 9.1Red Hat OpenShift distributed tracing 3.9.2registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:bea6c0fb2bead67356a76060901018b90c2cda12e5ef0ffca8993e16b761ab41_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.18registry.redhat.io/openshift4/ose-powervs-block-csi-driver-rhel9-operator@sha256:915ceff6d73dd9c552e961db39a6dfc6c42fb35711833911595ecf67321266a4_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.18registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:377cf0a041ed83dc3c21078b152842412c4e995c9194b40930baaf3c4ccf10e3_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:3ba68ff7f848a6118338e57d10cea4e128d47ebc4889ca5db8fe99ab758e4fab_amd64Patch ↗Advisory ↗

Red HatCVE-2026-29186CVSS 9.1Red Hat Developer Hub 1.9registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:80453720616cee369e9f79863ef1815a2741afdeb25d3572085d11ad54afa9a0_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat Advanced Cluster Security 4.9registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:093c816ee564a4192c965d723977060cc17ad9f88060c093c183c3e22860ac2d_s390xPatch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat Advanced Cluster Security for Kubernetes 4.10registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:28eff2a215687431483d5d586a66998f2a8b3606d711d4e15c0cbb6360818a5d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33228CVSS 9.8Red Hat Developer Hub 1.9registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:80453720616cee369e9f79863ef1815a2741afdeb25d3572085d11ad54afa9a0_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27606CVSS 9.1Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-platform-ui-0:2.6.8-1.el9ap.noarchPatch ↗Advisory ↗

Red HatCVE-2026-27606CVSS 9.1Red Hat Ansible Automation Platform 2.5 for RHEL 8automation-gateway-server-0:2.5.20260422-2.el8ap.noarchPatch ↗Advisory ↗

Red HatCVE-2026-27606CVSS 9.1Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/gateway-rhel9@sha256:1a71e725e9407a4461970dd03b5b0d57caca62765b7342ae1c133fc1ab61400e_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat Advanced Cluster Management for Kubernetes 2.15registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:08670904b912776ccbe1b62d7e9e0bbbf376e54c33b34763f2b78f88e395ad5d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-35030CVSS 9.1Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:1a107e35bf15b706ec620d9140850c29a799ed9497f46f3c1c88dd0eb589ae61_arm64Patch ↗Advisory ↗

AndroidCVE-2026-0073Critical (Android rating)platform/packages/modules/adb—Patch ↗Advisory ↗

Red HatCVE-2026-42899trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)aspnetcore-runtime-8.0-0:8.0.27-1.el10_2.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-42899trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)aspnetcore-runtime-8.0-0:8.0.27-1.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-42899trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)aspnetcore-runtime-8.0-0:8.0.27-1.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-42945trackedCVSS 8.1Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:29229a9b1908d9586aa60ae96ea4cab29316c058665ea4e10bd7d88e3434f38a_amd64Patch ↗Advisory ↗

Red HatCVE-2026-43284trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.10.1.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-42899trackedCVSS 7.5Red Hat Hardened Imagesdotnet10-0-main@srcPatch ↗Advisory ↗

Red HatCVE-2026-42899trackedCVSS 7.5Red Hat Hardened Imagesdotnet9-0-main@srcPatch ↗Advisory ↗

Red HatCVE-2026-42899trackedCVSS 7.5Red Hat Hardened Imagesdotnet8-0-main@srcPatch ↗Advisory ↗

Red HatCVE-2026-42945trackedCVSS 8.1Red Hat Hardened Imagesnginx-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-45591trackedCVSS 7.5Red Hat Hardened Imagesdotnet9-0-main@srcPatch ↗Advisory ↗