Vulnerabilities
May 2026 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 3 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 1,835 vulnerabilities across 4,964 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 16 of 25 · records 3,001 to 3,200 of 4,964
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-45492 ↗Microsoft Edge (Chromium-based)ModerateOut-of-band0%Microsoft rates: Exploitation More LikelyMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2026-45494 ↗Microsoft Edge (Chromium-based)ModerateOut-of-band0%Microsoft rates: Exploitation More LikelyMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-35429 ↗Microsoft Edge for AndroidModerateOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability
CVE-2026-41107 ↗Microsoft Edge (Chromium-based)ModerateOut-of-band1%Microsoft rates: Exploitation Less LikelyMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2026-42891 ↗Microsoft Edge for AndroidModerateOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability
CVE-2026-43083 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailablenet: ioam6: fix OOB and missing lock
CVE-2026-43185 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailableksmbd: fix signededness bug in smb_direct_prepare_negotiation()
CVE-2026-43197 ↗azl3 kernel 6.6.141.1-1 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailablenetconsole: avoid OOB reads, msg is not nul-terminated
CVE-2026-43198 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailabletcp: fix potential race in tcp_v6_syn_recv_sock()
CVE-2026-7009 ↗azl3 rust 1.75.0-30 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableOCSP stapling bypass with Apple SecTrust
CVE-2026-48525 ↗azl3 python-jwt 2.8.0-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS
CVE-2026-48522 ↗azl3 python-jwt 2.8.0-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePyJWKClient: missing scheme allowlist enables SSRF + token forgery via file://, ftp://, data: schemes
CVE-2026-46140 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: btmtk: validate WMT event SKB length before struct access
CVE-2026-6324 ↗azl3 libsoup 3.4.4-15 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsoup: libsoup: http request smuggling via unsigned to signed conversion error
CVE-2026-10028 ↗azl3 glib-networking 2.78.0-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGlib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain
CVE-2026-44839 ↗azl3 rabbitmq-server 3.13.7-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRabbitMQ: Unsanitized vhost names allow for XSS in management UI
CVE-2025-15649 ↗azl3 perl 5.38.2-509 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date
CVE-2026-42015 ↗azl3 gnutls 3.8.3-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling
CVE-2026-41184 ↗azl3 cni-plugins 1.4.0-5 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableServiceAccount token disclosure via install-cni container logs
CVE-2026-46178 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
CVE-2026-46181 ↗azl3 kernel 6.6.141.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
CVE-2026-46174 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablex86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache
CVE-2026-46193 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfrm: ah: account for ESN high bits in async callbacks
CVE-2026-46184 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesound: ua101: fix division by zero at probe
CVE-2026-46106 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableeventfs: Hold eventfs_mutex and SRCU when remount walks events
CVE-2026-46121 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock
CVE-2026-46124 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableisofs: validate block number from NFS file handle in isofs_export_iget
CVE-2026-46142 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: libwx: fix VF illegal register access
CVE-2026-46151 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: usblp: fix heap leak in IEEE 1284 device ID via short response
CVE-2026-46199 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
CVE-2026-46130 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledm-verity-fec: fix reading parity bytes split across blocks (take 3)
CVE-2026-46206 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebatman-adv: reject new tp_meter sessions during teardown
CVE-2026-46144 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
CVE-2026-46113 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: x86: Fix shadow paging use-after-free due to unexpected GFN
CVE-2026-42497 ↗azl3 perl 5.38.2-509 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableArchive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory
CVE-2026-46189 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
CVE-2026-46167 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
CVE-2026-46138 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt
CVE-2026-46147 ↗azl3 kernel 6.6.145.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()
CVE-2026-46187 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: rsi: fix kthread lifetime race between self-exit and external-stop
CVE-2026-46241 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablespi: mpc52xx: fix use-after-free on registration failure
CVE-2026-46153 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailable8021q: delete cleared egress QoS mappings
CVE-2026-46156 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
CVE-2026-46227 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
CVE-2026-46112 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/hns: Fix unlocked call to hns_roce_qp_remove()
CVE-2026-46122 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: b43: enforce bounds check on firmware key index in b43_rx()
CVE-2026-46114 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
CVE-2026-46233 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebatman-adv: bla: only purge non-released claims
CVE-2026-46125 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: mac80211: remove station if connection prep fails
CVE-2026-46146 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
CVE-2026-46204 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu/vcn4: Prevent OOB reads when parsing IB
CVE-2026-46120 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableip6_gre: Use cached t->net in ip6erspan_changelink().
CVE-2026-46152 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: mac80211: drop stray 'static' from fast-RX rx_result
CVE-2026-46238 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebatman-adv: stop caching unowned originator pointers in BAT IV
CVE-2026-46133 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/rxe: Reject unknown opcodes before ICRC processing
CVE-2026-46218 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: Add bounds checking to ib_{get,set}_value
CVE-2026-46108 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipmi:si: Return state to normal if message allocation fails
CVE-2026-46145 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/mana: Validate rx_hash_key_len
CVE-2026-46230 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
CVE-2026-46190 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
CVE-2026-46170 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemptcp: pm: ADD_ADDR rtx: free sk if last
CVE-2026-46129 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: fix double free in create_space_info() error path
CVE-2026-46175 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: fix fsck inconsistency caused by FGGC of node block
CVE-2026-46136 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: mt76: mt7921: fix a potential clc buffer length underflow
CVE-2026-46157 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger
CVE-2026-46177 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipmi: Add limits to event and receive message requests
CVE-2026-46132 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
CVE-2026-46196 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()
CVE-2026-46127 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
CVE-2026-46235 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: saa7164: add ioremap return checks and cleanups
CVE-2026-46164 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: fix double free in create_space_info_sub_group() error path
CVE-2026-46236 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: rc: xbox_remote: heed DMA restrictions
CVE-2026-46116 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
CVE-2026-46225 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablespi: rspi: fix controller deregistration
CVE-2026-46179 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableASoC: SOF: Don't allow pointer operations on unconfigured streams
CVE-2026-46208 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebatman-adv: stop tp_meter sessions during mesh teardown
CVE-2026-46149 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
CVE-2026-46176 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
CVE-2026-46107 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledm-thin: fix metadata refcount underflow
CVE-2026-46171 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableriscv: kvm: fix vector context allocation leak
CVE-2026-46234 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablevsock: fix buffer size clamping order
CVE-2026-46205 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablestaging: media: atomisp: Disallow all private IOCTLs
CVE-2026-46220 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
CVE-2026-46197 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdkfd: validate SVM ioctl nattr against buffer size
CVE-2026-46232 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: playstation: Clamp num_touch_reports
CVE-2026-46158 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemptcp: pm: ADD_ADDR rtx: always decrease sk refcount
CVE-2026-46212 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebatman-adv: bla: prevent use-after-free when deleting claims
CVE-2026-46165 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableopenvswitch: vport: fix self-deadlock on release of tunnel ports
CVE-2026-46161 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemd/raid10: fix divide-by-zero in setup_geo() with zero far_copies
CVE-2026-46226 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablespi: fsl: fix controller deregistration
CVE-2026-46159 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak
CVE-2026-46180 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
CVE-2026-42250 ↗azl3 bzip2 1.0.8-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableOff-by-One Leading to Out-of-Bounds Write in bzip2
CVE-2026-46160 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: fix missing last_unlink_trans update when removing a directory
CVE-2026-46173 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableexit: prevent preemption of oopsing TASK_DEAD task
CVE-2026-46128 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipmi: Check event message buffer response for bad data
CVE-2026-46229 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
CVE-2026-46109 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: ulpi: fix memory leak on ulpi_register() error paths
CVE-2026-46194 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: fix node_cnt race between extent node destroy and writeback
CVE-2026-46110 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: stmmac: Prevent NULL deref when RX memory exhausted
CVE-2026-46131 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: x86: check for nEPT/nNPT in slow flush hypercalls
CVE-2026-46111 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: hci_conn: fix potential UAF in create_big_sync
CVE-2026-46163 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: b43legacy: enforce bounds check on firmware key index in RX path
CVE-2026-46198 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebatman-adv: fix integer overflow on buff_pos
CVE-2026-46168 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemptcp: fix scheduling with atomic in timestamp sockopt
CVE-2026-46148 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablespi: microchip-core-qspi: control built-in cs manually
CVE-2026-46172 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
CVE-2026-46186 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: virtio_bt: validate rx pkt_type header length
CVE-2026-46209 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
CVE-2026-46200 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablespi: mpc52xx: fix controller deregistration
CVE-2026-46214 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablevsock/virtio: fix accept queue count leak on transport mismatch
CVE-2026-46231 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebatman-adv: bla: put backbone reference on failed claim hash insert
CVE-2026-46219 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablespi: mpc52xx: fix use-after-free on unbind
CVE-2026-46094 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext4: fix bounds check in check_xattrs() to prevent out-of-bounds access
CVE-2026-46076 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1
CVE-2026-46003 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: qrtr: ns: Limit the total number of nodes
CVE-2026-46006 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/nouveau: fix u32 overflow in pushbuf reloc bounds check
CVE-2026-46026 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: qrtr: ns: Limit the maximum number of lookups
CVE-2026-46000 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablerxrpc: Fix conn-level packet handling to unshare RESPONSE packets
CVE-2026-46016 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableremoteproc: xlnx: Only access buffer information if IPI is buffered
CVE-2026-46102 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: strparser: fix skb_head leak in strp_abort_strp()
CVE-2026-45993 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLoongArch: Add spectre boundry for syscall dispatch table
CVE-2026-46022 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemisc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()
CVE-2026-46082 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0
CVE-2026-45844 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: arp_tables: fix IEEE1394 ARP payload parsing
CVE-2026-46090 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: aloop: Fix peer runtime UAF during format-change stop
CVE-2026-45963 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableASoC: nau8821: Cancel delayed work on component remove
CVE-2026-45998 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablerxrpc: Fix potential UAF after skb_unshare() failure
CVE-2026-46024 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelibceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()
CVE-2026-45934 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation
CVE-2026-45858 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1
CVE-2026-45843 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableslip: bound decode() reads against the compressed packet length
CVE-2026-46015 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletcp: call sk_data_ready() after listener migration
CVE-2026-46068 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx
CVE-2026-45987 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
CVE-2026-46056 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: hci_event: fix potential UAF in SSP passkey handlers
CVE-2026-46083 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablespi: fix resource leaks on device setup failure
CVE-2026-46063 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablex86/shstk: Prevent deadlock during shstk sigreturn
CVE-2026-46077 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: atmel-tdes - fix DMA sync direction
CVE-2026-46099 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
CVE-2026-45861 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegfs2: Fix slab-use-after-free in qd_put
CVE-2026-46079 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablerbd: fix null-ptr-deref when device_add_disk() fails
CVE-2026-46098 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: caif: clear client service pointer on teardown
CVE-2026-46065 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info
CVE-2026-46086 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: bridge: use a stable FDB dst snapshot in RCU readers
CVE-2026-46014 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: SVM: Add missing save/restore handling of LBR MSRs
CVE-2026-45845 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/sched: taprio: fix NULL pointer dereference in class dump
CVE-2026-46101 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: reject zero shift in nft_bitwise
CVE-2026-46072 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablentfs3: add buffer boundary checks to run_unpack()
CVE-2026-45949 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablehwrng: core - use RCU and work_struct to fix race condition
CVE-2026-45842 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableslip: reject VJ receive packets on instances with no rstate array
CVE-2026-46032 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT
CVE-2026-46092 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: rtw88: check for PCI upstream bridge existence
CVE-2026-46019 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup
CVE-2026-45859 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation
CVE-2026-46103 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecan: ucan: fix devres lifetime
CVE-2026-46040 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableinotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails
CVE-2026-45996 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablespi: imx: fix use-after-free on unbind
CVE-2026-46069 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
CVE-2026-45994 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableibmasm: fix OOB reads in command_file_write due to missing size checks
CVE-2026-46038 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: qrtr: ns: Free the node during ctrl_cmd_bye()
CVE-2026-46070 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemd/raid5: validate payload size before accessing journal metadata
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.10.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.4)firefox-0:140.10.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)thunderbird-0:140.10.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)thunderbird-0:140.10.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)thunderbird-0:140.10.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.0)thunderbird-0:140.10.0-1.el9_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.4)thunderbird-0:140.10.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.10.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.10.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.10.0-2.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-7321trackedCVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.10.1-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40257trackedCVSS 6.7Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.7.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40320trackedCVSS 6.3Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.7.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.10.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.10.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.10.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.10.1-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-7321trackedCVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.10.1-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-7321trackedCVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.10.1-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-7321trackedCVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.10.1-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-7321trackedCVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.10.1-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.10.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.0)firefox-0:140.10.0-1.el9_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.10.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.2)firefox-0:140.10.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.10.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-43512trackedCVSS 6.5Red Hat Hardened Imagestomcat10-0:10.1.55-1.hum1@noarchPatch ↗Advisory ↗
Red HatCVE-2026-43515trackedCVSS 5.4Red Hat Hardened Imagestomcat10-0:10.1.55-1.hum1@noarchPatch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.10.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-22871trackedCVSS 5.4Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:cf03e567cdeea58957b2dec053a5bc460e98ea216a7435ea3a74ce3c714e89aa_amd64Patch ↗Advisory ↗
Red HatCVE-2025-40252trackedCVSS 4.7Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.123.1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40252trackedCVSS 4.7Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.123.1.rt7.464.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-43512trackedCVSS 6.5Red Hat Hardened Imagestomcat11-0:11.0.22-0.1.hum1@noarchPatch ↗Advisory ↗
Red HatCVE-2026-43515trackedCVSS 5.4Red Hat Hardened Imagestomcat11-0:11.0.22-0.1.hum1@noarchPatch ↗Advisory ↗
Red HatCVE-2026-6771trackedCVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.10.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-35469CVSS 6.5Red Hat OpenShift Container Platform 4.16registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:78dd3a2b6a0f6323b1bb6ba04e7651cdbbe6f09752433f49de045eda0532a1e0_amd64Patch ↗Advisory ↗
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.