Vulnerabilities
May 2026 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 3 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 1,835 vulnerabilities across 4,964 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 17 of 25 · records 3,201 to 3,400 of 4,964
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-46052 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableceph: only d_add() negative dentries when they are unhashed
CVE-2026-45850 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipvs: skip ipv6 extension headers for csum checks
CVE-2026-45571 ↗azl3 packer 1.9.5-13 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablego-git: Crafted repositories may modify main and submodule .git directories
CVE-2026-46047 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: qrtr: ns: Fix use-after-free in driver remove()
CVE-2026-45986 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: ccree - fix a memory leak in cc_mac_digest()
CVE-2026-23679 ↗azl3 libgusb 0.3.5-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelibusb < 1.0.30 NULL Pointer Dereference in parse_interface()
CVE-2026-46009 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown
CVE-2026-46046 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
CVE-2026-45997 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: sd: fix missing put_disk() when device_add(&disk_dev) fails
CVE-2026-46033 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: authencesn - reject short ahash digests during instance creation
CVE-2026-46089 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablezram: do not forget to endio for partial discard requests
CVE-2026-46017 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm: fix deferred split queue races during migration
CVE-2026-45897 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: nft_counter: serialize reset with spinlock
CVE-2026-45943 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableerofs: fix inline data read failure for ztailpacking pclusters
CVE-2026-45846 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()
CVE-2026-44899 ↗azl3 python-mistune 3.0.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableMistune Image Directive CSS Injection Vulnerability
CVE-2026-44898 ↗azl3 python-mistune 3.0.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableMistune TOC Anchor Injection XSS
CVE-2026-44897 ↗azl3 python-mistune 3.0.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableMistune Heading ID Attribute Injection XSS
CVE-2026-46091 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: rc: igorplugusb: heed coherency rules
CVE-2026-44708 ↗azl3 python-mistune 3.0.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableMistune Math Plugin XSS Escape Bypass
CVE-2026-45940 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: stmmac: fix oops when split header is enabled
CVE-2026-45839 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()
CVE-2026-44844 ↗azl3 perl-XML-Parser 2.47-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableeml_parser: Recursion DoS via nested message/rfc822 attachments
CVE-2026-45961 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegfs2: fix memory leaks in gfs2_fill_super error path
CVE-2026-45836 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
CVE-2026-45932 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: Fix tcx/netkit detach permissions when prog fd isn't given
CVE-2026-45834 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
CVE-2026-45944 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiommu/vt-d: Clear Present bit before tearing down context entry
CVE-2026-45835 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
CVE-2026-45999 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableerofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
CVE-2026-46018 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
CVE-2026-46053 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: rds: fix MR cleanup on copy error
CVE-2026-46051 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemd/raid5: fix soft lockup in retry_aligned_read()
CVE-2026-46031 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: ks8851: Reinstate disabling of BHs around IRQ handler
CVE-2026-46088 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
CVE-2026-46027 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/smc: avoid early lgr access in smc_clc_wait_msg
CVE-2026-45991 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableudf: fix partition descriptor append bookkeeping
CVE-2026-46058 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: amphion: Fix race between m2m job_abort and device_run
CVE-2026-46054 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableselinux: fix overlayfs mmap() and mprotect() access checks
CVE-2026-45855 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableata: libata-scsi: avoid Non-NCQ command starvation
CVE-2026-45840 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableopenvswitch: cap upcall PID array size and pre-size vport replies
CVE-2026-45989 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableof: unittest: fix use-after-free in testdrv_probe()
CVE-2026-46066 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableceph: fix num_ops off-by-one when crypto allocation fails
CVE-2026-45894 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiommu/vt-d: Clear Present bit before tearing down PASID entry
CVE-2026-46080 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableocfs2: split transactions in dio completion to avoid credit exhaustion
CVE-2026-46049 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: ctxfi: Add fallback to default RSR for S/PDIF
CVE-2026-45901 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: nf_tables: revert commit_mutex usage in reset path
CVE-2026-46059 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN
CVE-2026-46071 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: nSVM: Avoid clearing VMCB_LBR in vmcb12
CVE-2026-46085 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablerxrpc: Fix rxkad crypto unalignment handling
CVE-2026-46012 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablerxrpc: Fix memory leaks in rxkad_verify_response()
CVE-2026-46084 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/mana_ib: Disable RX steering on RSS QP destroy
CVE-2026-46037 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipv4: icmp: validate reply type before using icmp_pointers
CVE-2026-46021 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablethermal: core: Fix thermal zone governor cleanup issues
CVE-2026-45838 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: fix end-of-list detection in cgroup_storage_get_next_key()
CVE-2026-45930 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: mctp: ensure our nlmsg responses are initialised
CVE-2026-46005 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfs: fix a resource leak in xfs_alloc_buftarg()
CVE-2026-45973 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/mlx5: Fix UMR hang in LAG error state unload
CVE-2026-46062 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablentfs3: fix integer overflow in run_unpack() volume boundary check
CVE-2026-46075 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: atmel-sha204a - Fix potential UAF and memory leak in remove path
CVE-2026-45841 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
CVE-2026-45917 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipvs: do not keep dest_dst if dev is going down
CVE-2026-45877 ↗azl3 kernel 6.6.145.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients
CVE-2026-46064 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableibmasm: fix heap over-read in ibmasm_send_i2o_message()
CVE-2026-46078 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableerofs: fix the out-of-bounds nameoff handling for trailing dirents
CVE-2026-46011 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: mtk-jpeg: fix use-after-free in release path due to uncancelled work
CVE-2026-46002 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext2: reject inodes with zero i_nlink and valid mode in ext2_iget()
CVE-2026-46050 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemd/raid10: fix deadlock with check operation and nowait requests
CVE-2026-46048 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: caiaq: fix usb_dev refcount leak on probe failure
CVE-2026-6402 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewebpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins
CVE-2026-9149 ↗azl3 libsolv 0.7.28-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
CVE-2026-9150 ↗azl3 libsolv 0.7.28-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums
CVE-2026-46598 ↗azl3 docker-buildx 0.14.0-11 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInvoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent
CVE-2026-39828 ↗azl3 cert-manager 1.12.15-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInvoking bypass of certificate restrictions in golang.org/x/crypto/ssh
CVE-2026-39835 ↗azl3 cert-manager 1.12.15-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInvoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
CVE-2026-39827 ↗azl3 cert-manager 1.12.15-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInvoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh
CVE-2026-25681 ↗azl3 application-gateway-kubernetes-ingress 1.7.7-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInvoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
CVE-2026-27136 ↗azl3 application-gateway-kubernetes-ingress 1.7.7-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInvoking duplicate attributes can cause XSS in golang.org/x/net/html
CVE-2026-42502 ↗azl3 application-gateway-kubernetes-ingress 1.7.7-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInvoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
CVE-2026-25680 ↗azl3 application-gateway-kubernetes-ingress 1.7.7-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInvoking denial of service when parsing arbitrary HTML in golang.org/x/net/html
CVE-2026-42506 ↗azl3 application-gateway-kubernetes-ingress 1.7.7-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInvoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2025-38653CVSS 5.1Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.12.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-71089CVSS 6.6Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.12.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-0636CVSS 6.5Red Hat OpenShift Dev Spaces 3.28registry.redhat.io/devspaces/openvsx-rhel9@sha256:341c8f0f91bd41d4bded00443cd7ab2ddab4972a5ee1ddff4dcbfcdd5c2764f4_arm64Patch ↗Advisory ↗
Red HatCVE-2026-26996CVSS 6.5Red Hat OpenShift Dev Spaces 3.28registry.redhat.io/devspaces/openvsx-rhel9@sha256:341c8f0f91bd41d4bded00443cd7ab2ddab4972a5ee1ddff4dcbfcdd5c2764f4_arm64Patch ↗Advisory ↗
Red HatCVE-2026-27904CVSS 6.5Red Hat OpenShift Dev Spaces 3.28registry.redhat.io/devspaces/code-rhel9@sha256:b86a03ffcc1fc359116cc0ca231c64e5d612f047d41b5a2d44d1f3a9d880c14b_amd64Patch ↗Advisory ↗
Red HatCVE-2026-31802CVSS 6.2Red Hat OpenShift Dev Spaces 3.28registry.redhat.io/devspaces/code-rhel9@sha256:b86a03ffcc1fc359116cc0ca231c64e5d612f047d41b5a2d44d1f3a9d880c14b_amd64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Multicluster Global Hub 1.5.8registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8c03495da4214e70589e238a60815c265223952470da6d80034e2f83de5c3c8e_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-33215CVSS 6.5Multicluster Global Hub 1.5.8registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8c03495da4214e70589e238a60815c265223952470da6d80034e2f83de5c3c8e_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-33813CVSS 6.5Multicluster Global Hub 1.5.8registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8c03495da4214e70589e238a60815c265223952470da6d80034e2f83de5c3c8e_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-34000CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.0)xorg-x11-server-0:1.20.11-13.el9_0.srcPatch ↗Advisory ↗
Red HatCVE-2026-34000CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)xorg-x11-server-Xwayland-0:21.1.3-13.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-34000CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)xorg-x11-server-0:1.20.10-4.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-34000CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)xorg-x11-server-Xwayland-0:21.1.3-2.el8_6.6.srcPatch ↗Advisory ↗
Red HatCVE-2026-34000CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)xorg-x11-server-0:1.20.11-7.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-34000CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.0)tigervnc-0:1.11.0-22.el9_0.17.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-34000CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)xorg-x11-server-0:1.20.11-18.el8_8.srcPatch ↗Advisory ↗
Red HatCVE-2026-34002CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.0)xorg-x11-server-0:1.20.11-13.el9_0.srcPatch ↗Advisory ↗
Red HatCVE-2026-34002CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)xorg-x11-server-Xwayland-0:21.1.3-13.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-34002CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)xorg-x11-server-0:1.20.10-4.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-34002CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)xorg-x11-server-Xwayland-0:21.1.3-2.el8_6.6.srcPatch ↗Advisory ↗
Red HatCVE-2026-34002CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)xorg-x11-server-0:1.20.11-7.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-34002CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.0)tigervnc-0:1.11.0-22.el9_0.17.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-34002CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)xorg-x11-server-0:1.20.11-18.el8_8.srcPatch ↗Advisory ↗
Red HatCVE-2026-34079CVSS 6.7Red Hat Enterprise Linux AppStream (v. 9)flatpak-0:1.12.9-4.el9_8.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-34079CVSS 6.7Red Hat Enterprise Linux AppStream (v. 8)flatpak-0:1.12.9-4.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-34079CVSS 6.7Red Hat Enterprise Linux AppStream (v. 10)flatpak-0:1.16.0-9.el10_2.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-34352CVSS 6.3Red Hat Enterprise Linux AppStream E4S (v.9.0)tigervnc-0:1.11.0-22.el9_0.17.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-34477CVSS 6.8Red Hat Offline Knowledge Portal 1.2.13registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:b26253f0a6c6b9e8c8458ecb07e79e9f87ff313491fffc31e342e32bce0a2b3e_arm64Patch ↗Advisory ↗
Red HatCVE-2026-34478CVSS 5.8Red Hat Offline Knowledge Portal 1.2.13registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:b26253f0a6c6b9e8c8458ecb07e79e9f87ff313491fffc31e342e32bce0a2b3e_arm64Patch ↗Advisory ↗
Red HatCVE-2026-34479CVSS 5.3Red Hat Offline Knowledge Portal 1.2.13registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:b26253f0a6c6b9e8c8458ecb07e79e9f87ff313491fffc31e342e32bce0a2b3e_arm64Patch ↗Advisory ↗
Red HatCVE-2026-34480CVSS 5.3Red Hat Offline Knowledge Portal 1.2.13registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:b26253f0a6c6b9e8c8458ecb07e79e9f87ff313491fffc31e342e32bce0a2b3e_arm64Patch ↗Advisory ↗
Red HatCVE-2026-34481CVSS 6.5Red Hat Offline Knowledge Portal 1.2.13registry.redhat.io/offline-knowledge-portal/rhokp-rhel9@sha256:b26253f0a6c6b9e8c8458ecb07e79e9f87ff313491fffc31e342e32bce0a2b3e_arm64Patch ↗Advisory ↗
Red HatCVE-2026-43163CVSS 4.7Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.126.1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-43163CVSS 4.7Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.126.1.rt7.467.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-43205CVSS 6.7Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.18.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-5119CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.0)libsoup-0:2.72.0-8.el9_0.10.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-13837CVSS 5.9Red Hat Update Infrastructure 5registry.redhat.io/rhui5/installer-rhel9@sha256:fb8d5c681efa515095f164334fde48bb2c4160069ba7512ddbf16a865c65ae17_amd64Patch ↗Advisory ↗
Red HatCVE-2025-14087CVSS 5.6Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:29229a9b1908d9586aa60ae96ea4cab29316c058665ea4e10bd7d88e3434f38a_amd64Patch ↗Advisory ↗
Red HatCVE-2025-14512CVSS 6.5Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:29229a9b1908d9586aa60ae96ea4cab29316c058665ea4e10bd7d88e3434f38a_amd64Patch ↗Advisory ↗
Red HatCVE-2025-15282CVSS 4.8Red Hat Update Infrastructure 5registry.redhat.io/rhui5/installer-rhel9@sha256:fb8d5c681efa515095f164334fde48bb2c4160069ba7512ddbf16a865c65ae17_amd64Patch ↗Advisory ↗
Red HatCVE-2025-21999CVSS 6.4Red Hat Enterprise Linux AppStream EUS (v.9.4)bpftool-debuginfo-0:7.3.0-427.127.1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-38653CVSS 5.1Red Hat Enterprise Linux AppStream EUS (v.9.4)bpftool-debuginfo-0:7.3.0-427.127.1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-59375CVSS 5.3Red Hat Update Infrastructure 5registry.redhat.io/rhui5/installer-rhel9@sha256:fb8d5c681efa515095f164334fde48bb2c4160069ba7512ddbf16a865c65ae17_amd64Patch ↗Advisory ↗
Red HatCVE-2025-6075CVSS 4.0Red Hat Update Infrastructure 5registry.redhat.io/rhui5/installer-rhel9@sha256:fb8d5c681efa515095f164334fde48bb2c4160069ba7512ddbf16a865c65ae17_amd64Patch ↗Advisory ↗
Red HatCVE-2025-66031CVSS 5.3Red Hat OpenShift Container Platform 4.19registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:0c9af1cd0dbbd8d6ed2e0ce9d401a83a318ad3d857e4a80a3ccd24c9d08fe831_s390xPatch ↗Advisory ↗
Red HatCVE-2026-0672CVSS 4.8Red Hat Update Infrastructure 5registry.redhat.io/rhui5/installer-rhel9@sha256:fb8d5c681efa515095f164334fde48bb2c4160069ba7512ddbf16a865c65ae17_amd64Patch ↗Advisory ↗
Red HatCVE-2026-0865CVSS 4.5Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:29229a9b1908d9586aa60ae96ea4cab29316c058665ea4e10bd7d88e3434f38a_amd64Patch ↗Advisory ↗
Red HatCVE-2026-1502CVSS 4.5Red Hat Update Infrastructure 5registry.redhat.io/rhui5/installer-rhel9@sha256:fb8d5c681efa515095f164334fde48bb2c4160069ba7512ddbf16a865c65ae17_amd64Patch ↗Advisory ↗
Red HatCVE-2026-2100CVSS 5.3Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:29229a9b1908d9586aa60ae96ea4cab29316c058665ea4e10bd7d88e3434f38a_amd64Patch ↗Advisory ↗
Red HatCVE-2026-31790CVSS 5.9Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:29229a9b1908d9586aa60ae96ea4cab29316c058665ea4e10bd7d88e3434f38a_amd64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Developer Hub 1.8registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:eab7750691c87ec2609983cbccd7476e7e0313d9b30a707b687ea05adf092413_amd64Patch ↗Advisory ↗
Red HatCVE-2026-33007CVSS 5.3Red Hat Enterprise Linux AppStream (v. 9)httpd-0:2.4.62-13.el9_8.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33007CVSS 5.3Red Hat Enterprise Linux AppStream (v. 10)httpd-0:2.4.63-13.el10_2.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-34043CVSS 5.9Red Hat OpenShift Container Platform 4.19registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:0c9af1cd0dbbd8d6ed2e0ce9d401a83a318ad3d857e4a80a3ccd24c9d08fe831_s390xPatch ↗Advisory ↗
Red HatCVE-2026-34043CVSS 5.9Red Hat Enterprise Linux AppStream (v. 10)aspnetcore-runtime-8.0-0:8.0.27-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-34043CVSS 5.9Red Hat Enterprise Linux AppStream (v. 8)aspnetcore-runtime-8.0-0:8.0.27-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-34043CVSS 5.9Red Hat Enterprise Linux AppStream (v. 9)aspnetcore-runtime-8.0-0:8.0.27-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-35414CVSS 4.8Red Hat Update Infrastructure 5registry.redhat.io/rhui5/installer-rhel9@sha256:fb8d5c681efa515095f164334fde48bb2c4160069ba7512ddbf16a865c65ae17_amd64Patch ↗Advisory ↗
Red HatCVE-2026-35414CVSS 4.8Red Hat Enterprise Linux BaseOS E4S (v.8.8)openssh-0:8.0p1-20.el8_8.4.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-35414CVSS 4.8Red Hat Enterprise Linux AppStream AUS (v.8.6)openssh-askpass-0:8.0p1-15.el8_6.5.x86_64Patch ↗Advisory ↗
Red HatCVE-2026-35469CVSS 6.5Red Hat OpenShift Container Platform 4.19registry.redhat.io/openshift4/ose-powervs-block-csi-driver-rhel9@sha256:2ef5659e89fd5ff0f416a550b53ae3007b5b8e3e3b478efc1900021716eaa38b_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-35469CVSS 6.5Red Hat OpenShift Container Platform 4.19registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9@sha256:03162431c0c7b534e91c6b72231ac3925d5e3f33e094bf6f872ca5b01bef6ffb_arm64Patch ↗Advisory ↗
Red HatCVE-2026-3644CVSS 5.4Red Hat Update Infrastructure 5registry.redhat.io/rhui5/installer-rhel9@sha256:fb8d5c681efa515095f164334fde48bb2c4160069ba7512ddbf16a865c65ae17_amd64Patch ↗Advisory ↗
Red HatCVE-2026-40355CVSS 5.9Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:29229a9b1908d9586aa60ae96ea4cab29316c058665ea4e10bd7d88e3434f38a_amd64Patch ↗Advisory ↗
Red HatCVE-2026-40356CVSS 5.9Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:29229a9b1908d9586aa60ae96ea4cab29316c058665ea4e10bd7d88e3434f38a_amd64Patch ↗Advisory ↗
Red HatCVE-2026-4224CVSS 5.9Red Hat Update Infrastructure 5registry.redhat.io/rhui5/installer-rhel9@sha256:fb8d5c681efa515095f164334fde48bb2c4160069ba7512ddbf16a865c65ae17_amd64Patch ↗Advisory ↗
Red HatCVE-2026-43163CVSS 4.7Red Hat Enterprise Linux AppStream EUS (v.9.4)bpftool-debuginfo-0:7.3.0-427.127.1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4878CVSS 6.7Red Hat Enterprise Linux AppStream E4S (v.9.2)libcap-debuginfo-0:2.48-9.el9_2.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4878CVSS 6.7Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:29229a9b1908d9586aa60ae96ea4cab29316c058665ea4e10bd7d88e3434f38a_amd64Patch ↗Advisory ↗
Red HatCVE-2026-8954CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.11.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8954CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.11.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8954CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.11.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8954CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.11.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8955CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.11.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8955CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.11.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8955CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.11.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8955CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.11.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8957CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.11.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8957CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.11.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8957CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.11.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8957CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.11.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8958CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.11.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8958CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.11.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8958CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.11.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8958CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.11.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2024-12086CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)rsync-daemon-0:3.2.5-3.el9_6.1.noarchPatch ↗Advisory ↗
Red HatCVE-2025-10158CVSS 4.3Red Hat Enterprise Linux AppStream E4S (v.9.2)rsync-daemon-0:3.2.3-19.el9_2.3.noarchPatch ↗Advisory ↗
Red HatCVE-2025-10158CVSS 4.3Red Hat Enterprise Linux AppStream EUS (v.9.6)rsync-daemon-0:3.2.5-3.el9_6.1.noarchPatch ↗Advisory ↗
Red HatCVE-2025-10158CVSS 4.3Red Hat Enterprise Linux AppStream EUS (v.9.4)rsync-daemon-0:3.2.3-19.el9_4.3.noarchPatch ↗Advisory ↗
Red HatCVE-2025-10158CVSS 4.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)rsync-daemon-0:3.4.1-2.el10_0.2.noarchPatch ↗Advisory ↗
Red HatCVE-2025-21999CVSS 6.4Red Hat Enterprise Linux AppStream E4S (v.9.2)bpftool-debuginfo-0:7.0.0-284.172.1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-5372CVSS 5.0Red Hat Enterprise Linux AppStream E4S (v.8.8)libssh-debuginfo-0:0.9.6-13.el8_8.2.i686Patch ↗Advisory ↗
Red HatCVE-2026-1002CVSS 5.3Cryostat 4 on RHEL 9cryostat/cryostat-reports-rhel9@sha256:2842124c4358b187ff5fb7e82ec20dd0b3c6a177fb604ff1087a5e6e0de5a9d0_arm64Patch ↗Advisory ↗
Red HatCVE-2026-21998CVSS 4.9Red Hat Enterprise Linux AppStream (v. 10)mysql8.4-0:8.4.9-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-22002CVSS 4.9Red Hat Enterprise Linux AppStream (v. 10)mysql8.4-0:8.4.9-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-22004CVSS 4.9Red Hat Enterprise Linux AppStream (v. 10)mysql8.4-0:8.4.9-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-22005CVSS 4.9Red Hat Enterprise Linux AppStream (v. 10)mysql8.4-0:8.4.9-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-22009CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)mysql8.4-0:8.4.9-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-22015CVSS 4.3Red Hat Enterprise Linux AppStream (v. 10)mysql8.4-0:8.4.9-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-22017CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)mysql8.4-0:8.4.9-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2291CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)dnsmasq-0:2.79-36.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2377CVSS 6.5Red Hat Quay 3.14registry.redhat.io/quay/quay-rhel8@sha256:4ae7d2d72a2370bd5401f570e21386bc9a6df0b145030060c922fcf754c7839b_s390xPatch ↗Advisory ↗
Red HatCVE-2026-24880CVSS 4.3Red Hat JBoss Web Server 6.2 on RHEL 10jws6-tomcat-0:10.1.49-13.redhat_00011.1.el10jws.noarchPatch ↗Advisory ↗
Red HatCVE-2026-25854CVSS 4.3Red Hat JBoss Web Server 6.2 on RHEL 10jws6-tomcat-0:10.1.49-13.redhat_00011.1.el10jws.noarchPatch ↗Advisory ↗
Red HatCVE-2026-25952CVSS 6.4Red Hat Enterprise Linux Server (v. 7 ELS)freerdp-0:2.1.1-5.el7_9.9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-25952CVSS 6.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)freerdp-2:3.10.3-3.el10_0.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-25997CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)freerdp-2:3.10.3-3.el10_0.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-26986CVSS 5.3Red Hat Enterprise Linux Server (v. 7 ELS)freerdp-0:2.1.1-5.el7_9.9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-26986CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)freerdp-2:3.10.3-3.el10_0.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-27951CVSS 5.9Red Hat Enterprise Linux Server (v. 7 ELS)freerdp-0:2.1.1-5.el7_9.9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-29775CVSS 5.3Red Hat Enterprise Linux Server (v. 7 ELS)freerdp-0:2.1.1-5.el7_9.9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-29775CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)freerdp-2:3.10.3-3.el10_0.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-31884CVSS 6.5Red Hat Enterprise Linux Server (v. 7 ELS)freerdp-0:2.1.1-5.el7_9.9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-31884CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)freerdp-2:3.10.3-3.el10_0.7.aarch64Patch ↗Advisory ↗
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.