CYBERSECURITYTRACKER
TRACKING8,239 stories in this site build1,871 vulnerability news stories in this site build
Vulnerabilities

May 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 3 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 1,970 vulnerabilities across 5,970 returned patch records from 5 vendors. Filter the complete month, or browse the static page trail without JavaScript.

5,970all patch recordsClear filters158criticalShow these records3Microsoft exploitation detectedShow these records4Microsoft in the Known Exploited Vulnerabilities catalogShow these records4,141tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 27 of 30 · records 5,201 to 5,400 of 5,970

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-7568 ↗azl3 php 8.3.29-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSigned integer overflow in metaphone()
CVE-2026-7258 ↗azl3 php 8.3.29-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableOut-of-bounds read in urldecode() on NetBSD
CVE-2026-7261 ↗azl3 php 8.3.29-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSoapServer session-persisted object use-after-free via SOAP header fault
CVE-2026-42256 ↗azl3 ruby 3.3.5-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet-imap: Denial of service via high iteration count for `SCRAM-*` authentication
CVE-2026-42258 ↗azl3 ruby 3.3.5-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet-imap: Command Injection via unvalidated Symbol inputs
CVE-2026-42257 ↗azl3 ruby 3.3.5-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet-imap: Command Injection via "raw" arguments to multiple commands
CVE-2026-39826 ↗azl3 golang 1.25.9-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableEscaper bypass leads to XSS in html/template
CVE-2026-39825 ↗azl3 golang 1.25.9-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil
CVE-2026-39823 ↗azl3 golang 1.25.9-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBypass of meta content URL escaping causes XSS in html/template
CVE-2026-39819 ↗azl3 golang 1.25.9-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInvoking "go bug" follows symlinks in predictable temporary filenames in cmd/go
CVE-2026-39817 ↗azl3 golang 1.25.9-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInvoking "go tool pack" does not sanitize output paths in cmd/go
CVE-2026-44656 ↗azl3 vim 9.2.0392-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableVim: OS Command Injection via 'path' completion
CVE-2026-45130 ↗azl3 vim 9.2.0392-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableVim: Heap Buffer Overflow in spell file loading
CVE-2026-6666 ↗azl3 pgbouncer 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePgBouncer crash in kill_pool_logins_server_error
CVE-2026-6667 ↗azl3 pgbouncer 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePgBouncer missing authorization check in KILL_CLIENT admin command
CVE-2026-37458 ↗azl3 frr 10.5.0-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableMissing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service (DoS) via supplying a crafted UPDATE message.
CVE-2026-43308 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()
CVE-2026-43311 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesoc/tegra: pmc: Fix unsafe generic_handle_irq() call
CVE-2026-43292 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
CVE-2026-43294 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels
CVE-2026-43310 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC
CVE-2026-43299 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()
CVE-2026-43305 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path
CVE-2026-43344 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableperf/x86/intel/uncore: Fix die ID init and look up bugs
CVE-2026-43319 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablespi: spidev: fix lock inversion between spi_lock and buf_lock
CVE-2026-43306 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: crypto: Use the correct destructor kfunc type
CVE-2026-43331 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablex86/kexec: Disable KCOV instrumentation after load_segments()
CVE-2026-43300 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove()
CVE-2025-71299 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablespi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsing
CVE-2026-43416 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepowerpc, perf: Check that current->mm is alive before getting user callchain
CVE-2026-43309 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemd raid: fix hang when stopping arrays with metadata through dm-raid
CVE-2026-43338 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: reserve enough transaction items for qgroup ioctls
CVE-2026-23631 ↗azl3 valkey 8.0.7-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableredis-server Lua use-after-free may allow remote code execution
CVE-2026-33857 ↗azl3 httpd 2.4.66-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache HTTP Server: Off-by-one OOB reads in AJP getter functions
CVE-2026-33007 ↗azl3 httpd 2.4.66-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache HTTP Server: mod_authn_socache crash
CVE-2026-33006 ↗azl3 httpd 2.4.66-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache HTTP Server: mod_auth_digest timing attack
CVE-2026-34032 ↗azl3 httpd 2.4.66-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)
CVE-2026-33523 ↗azl3 httpd 2.4.66-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line
CVE-2026-43868 ↗cbl2 ceph 16.2.10-11 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern
CVE-2026-43119 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: hci_sync: annotate data-races around hdev->req_status
CVE-2026-43216 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: Drop the lock in skb_may_tx_timestamp()
CVE-2025-71272 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemost: core: fix resource leak in most_register_interface error paths
CVE-2026-43195 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: validate user queue size constraints
CVE-2026-43088 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: af_key: zero aligned sockaddr tail in PF_KEY exports
CVE-2026-43165 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablehwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin
CVE-2026-43201 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableAPEI/GHES: ARM processor Error: don't go past allocated memory
CVE-2025-71294 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: fix NULL pointer issue buffer funcs
CVE-2026-43243 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Add signal type check for dcn401 get_phyd32clk_src
CVE-2026-43107 ↗azl3 kernel 6.6.141.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfrm: account XFRMA_IF_ID in aevent size calculation
CVE-2025-71289 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefs/ntfs3: handle attr_set_size() errors when truncating files
CVE-2026-43191 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35
CVE-2026-43244 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablekcm: fix zero-frag skb in frag_list on partial sendmsg error
CVE-2026-43129 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableima: verify the previous kernel's IMA buffer lies in addressable RAM
CVE-2026-43109 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablex86: shadow stacks: proper error handling for mmap lock
CVE-2026-43118 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: fix zero size inode with non-zero size after log replay
CVE-2025-71273 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()
CVE-2025-71285 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: qrtr: Drop the MHI auto_queue feature for IPCR DL channels
CVE-2025-71293 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu/ras: Move ras data alloc before bad page check
CVE-2026-43234 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableteam: avoid NETDEV_CHANGEMTU event when unregistering slave
CVE-2026-43115 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesrcu: Use irq_work to start GP in tiny SRCU
CVE-2026-43137 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableASoC: SOF: Intel: hda: Fix NULL pointer dereference
CVE-2025-71290 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemisc: ti_fpc202: fix a potential memory leak in probe function
CVE-2026-43161 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode
CVE-2026-43127 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablentfs3: fix circular locking dependency in run_unpack_ex
CVE-2026-43131 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/pm: Fix null pointer dereference issue
CVE-2026-43204 ↗azl3 kernel 6.6.137.1-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableASoC: qcom: q6asm: drop DSP responses for closed data streams

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-33985CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v.9.6)freerdp-2:2.11.7-1.el9_6.10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33985CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v.9.4)freerdp-2:2.11.2-1.el9_4.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-40355CVSS 5.9Red Hat Enterprise Linux BaseOS (v. 8)krb5-0:1.18.2-34.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-40356CVSS 5.9Red Hat Enterprise Linux BaseOS (v. 8)krb5-0:1.18.2-34.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2023-40403CVSS 6.5Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:b74a5cc403d0a07b0ef29808cef709121169582b69f2b9ff54a02d35b0cc0908_amd64Patch ↗Advisory ↗
Red HatCVE-2025-13836CVSS 6.8Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:b74a5cc403d0a07b0ef29808cef709121169582b69f2b9ff54a02d35b0cc0908_amd64Patch ↗Advisory ↗
Red HatCVE-2025-14831CVSS 5.3Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:b74a5cc403d0a07b0ef29808cef709121169582b69f2b9ff54a02d35b0cc0908_amd64Patch ↗Advisory ↗
Red HatCVE-2026-22695CVSS 6.1Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:b74a5cc403d0a07b0ef29808cef709121169582b69f2b9ff54a02d35b0cc0908_amd64Patch ↗Advisory ↗
Red HatCVE-2026-22801CVSS 6.6Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:b74a5cc403d0a07b0ef29808cef709121169582b69f2b9ff54a02d35b0cc0908_amd64Patch ↗Advisory ↗
Red HatCVE-2026-25952CVSS 6.4Red Hat Enterprise Linux AppStream E4S (v.9.2)freerdp-2:2.4.1-6.el9_2.9.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-25952CVSS 6.4Red Hat Enterprise Linux AppStream E4S (v.9.0)freerdp-2:2.4.1-3.el9_0.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-26986CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.2)freerdp-2:2.4.1-6.el9_2.9.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-26986CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.0)freerdp-2:2.4.1-3.el9_0.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-27951CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.2)freerdp-2:2.4.1-6.el9_2.9.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-27951CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.0)freerdp-2:2.4.1-3.el9_0.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28417CVSS 4.4Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:b74a5cc403d0a07b0ef29808cef709121169582b69f2b9ff54a02d35b0cc0908_amd64Patch ↗Advisory ↗
Red HatCVE-2026-28421CVSS 5.3Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:b74a5cc403d0a07b0ef29808cef709121169582b69f2b9ff54a02d35b0cc0908_amd64Patch ↗Advisory ↗
Red HatCVE-2026-29775CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.2)freerdp-2:2.4.1-6.el9_2.9.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-29775CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.0)freerdp-2:2.4.1-3.el9_0.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-31884CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.2)freerdp-2:2.4.1-6.el9_2.9.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-31884CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.0)freerdp-2:2.4.1-3.el9_0.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-31885CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.2)freerdp-2:2.4.1-6.el9_2.9.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-31885CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.0)freerdp-2:2.4.1-3.el9_0.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33985CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.2)freerdp-2:2.4.1-6.el9_2.9.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33985CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.0)freerdp-2:2.4.1-3.el9_0.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-41889CVSS 5.9Red Hat Hardened Imagescaddy-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-44928CVSS 5.3Red Hat Hardened Imagesuriparser-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4887CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)gimp-2:3.0.4-1.el9_7.5.aarch64Patch ↗Advisory ↗
Red HatCVE-2023-40403CVSS 6.5Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:3a2527c5c164fad4d2f0fbda199dcd887e5acaf211fe3cd12dc3aa9f499836c0_arm64Patch ↗Advisory ↗
Red HatCVE-2023-40403CVSS 6.5Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64Patch ↗Advisory ↗
Red HatCVE-2025-14087CVSS 5.6Red Hat Enterprise Linux BaseOS (v. 8)glib2-0:2.56.4-169.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-14087CVSS 5.6Red Hat Enterprise Linux AppStream (v. 10)glib2-debuginfo-0:2.80.4-10.el10_1.13.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-14087CVSS 5.6Red Hat Enterprise Linux AppStream (v. 9)glib2-debuginfo-0:2.68.4-18.el9_7.2.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-14512CVSS 6.5Red Hat Enterprise Linux BaseOS (v. 8)glib2-0:2.56.4-169.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-14512CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)glib2-debuginfo-0:2.80.4-10.el10_1.13.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-14512CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)glib2-debuginfo-0:2.68.4-18.el9_7.2.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-14831CVSS 5.3Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:3a2527c5c164fad4d2f0fbda199dcd887e5acaf211fe3cd12dc3aa9f499836c0_arm64Patch ↗Advisory ↗
Red HatCVE-2025-14831CVSS 5.3Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64Patch ↗Advisory ↗
Red HatCVE-2025-46299CVSS 6.5Red Hat Enterprise Linux AppStream AUS (v.8.4)webkit2gtk3-0:2.52.3-1.el8_4.i686Patch ↗Advisory ↗
Red HatCVE-2025-47914CVSS 5.3Red Hat Ceph Storage 8.1registry.redhat.io/rhceph/grafana-rhel9@sha256:3d4903b8dbe33464c05ce219ee2e945bf1be169efbed73caee5185883c9df508_amd64Patch ↗Advisory ↗
Red HatCVE-2025-58181CVSS 5.3Red Hat Ceph Storage 8.1registry.redhat.io/rhceph/grafana-rhel9@sha256:3d4903b8dbe33464c05ce219ee2e945bf1be169efbed73caee5185883c9df508_amd64Patch ↗Advisory ↗
Red HatCVE-2025-64718CVSS 5.3Red Hat Ceph Storage 8.1registry.redhat.io/rhceph/grafana-rhel9@sha256:3d4903b8dbe33464c05ce219ee2e945bf1be169efbed73caee5185883c9df508_amd64Patch ↗Advisory ↗
Red HatCVE-2025-9714CVSS 6.2Red Hat Enterprise Linux AppStream AUS (v.8.6)libxml2-debuginfo-0:2.9.7-13.el8_6.13.i686Patch ↗Advisory ↗
Red HatCVE-2026-20643CVSS 5.4Red Hat Enterprise Linux AppStream AUS (v.8.4)webkit2gtk3-0:2.52.3-1.el8_4.i686Patch ↗Advisory ↗
Red HatCVE-2026-20665CVSS 5.4Red Hat Enterprise Linux AppStream AUS (v.8.4)webkit2gtk3-0:2.52.3-1.el8_4.i686Patch ↗Advisory ↗
Red HatCVE-2026-20676CVSS 4.3Red Hat Enterprise Linux AppStream AUS (v.8.4)webkit2gtk3-0:2.52.3-1.el8_4.i686Patch ↗Advisory ↗
Red HatCVE-2026-20691CVSS 4.3Red Hat Enterprise Linux AppStream AUS (v.8.4)webkit2gtk3-0:2.52.3-1.el8_4.i686Patch ↗Advisory ↗
Red HatCVE-2026-25952CVSS 6.4Red Hat Enterprise Linux AppStream (v. 10)freerdp-2:3.10.3-5.el10_1.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-25952CVSS 6.4Red Hat Enterprise Linux AppStream (v. 8)freerdp-2:2.11.7-9.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-25997CVSS 5.3Red Hat Enterprise Linux AppStream (v. 10)freerdp-2:3.10.3-5.el10_1.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-26986CVSS 5.3Red Hat Enterprise Linux AppStream (v. 10)freerdp-2:3.10.3-5.el10_1.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-26986CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)freerdp-2:2.11.7-9.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-27951CVSS 5.9Red Hat Enterprise Linux AppStream (v. 8)freerdp-2:2.11.7-9.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28417CVSS 4.4Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:3a2527c5c164fad4d2f0fbda199dcd887e5acaf211fe3cd12dc3aa9f499836c0_arm64Patch ↗Advisory ↗
Red HatCVE-2026-28417CVSS 4.4Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64Patch ↗Advisory ↗
Red HatCVE-2026-28421CVSS 5.3Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:3a2527c5c164fad4d2f0fbda199dcd887e5acaf211fe3cd12dc3aa9f499836c0_arm64Patch ↗Advisory ↗
Red HatCVE-2026-28421CVSS 5.3Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64Patch ↗Advisory ↗
Red HatCVE-2026-28871CVSS 4.3Red Hat Enterprise Linux AppStream AUS (v.8.4)webkit2gtk3-0:2.52.3-1.el8_4.i686Patch ↗Advisory ↗
Red HatCVE-2026-29775CVSS 5.3Red Hat Enterprise Linux AppStream (v. 10)freerdp-2:3.10.3-5.el10_1.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-29775CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)freerdp-2:2.11.7-9.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-31884CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)freerdp-2:3.10.3-5.el10_1.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-31884CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)freerdp-2:2.11.7-9.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-31885CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)freerdp-2:3.10.3-5.el10_1.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-31885CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)freerdp-2:2.11.7-9.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33982CVSS 6.6Red Hat Enterprise Linux AppStream (v. 10)freerdp-2:3.10.3-5.el10_1.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33985CVSS 5.3Red Hat Enterprise Linux AppStream (v. 10)freerdp-2:3.10.3-5.el10_1.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33985CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)freerdp-2:2.11.7-9.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-35414CVSS 4.8Red Hat Enterprise Linux AppStream EUS (v.9.6)openssh-askpass-0:8.7p1-45.el9_6.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-42308CVSS 6.2Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:3a2527c5c164fad4d2f0fbda199dcd887e5acaf211fe3cd12dc3aa9f499836c0_arm64Patch ↗Advisory ↗
Red HatCVE-2026-42308CVSS 6.2Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64Patch ↗Advisory ↗
Red HatCVE-2026-42308CVSS 6.2Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:3aecb1fcf7c282681d9a83ec51fd2fa2ff078567603942466734f55c8294961c_amd64Patch ↗Advisory ↗
Red HatCVE-2026-42309CVSS 5.1Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:3a2527c5c164fad4d2f0fbda199dcd887e5acaf211fe3cd12dc3aa9f499836c0_arm64Patch ↗Advisory ↗
Red HatCVE-2026-42309CVSS 5.1Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64Patch ↗Advisory ↗
Red HatCVE-2026-42309CVSS 5.1Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:3aecb1fcf7c282681d9a83ec51fd2fa2ff078567603942466734f55c8294961c_amd64Patch ↗Advisory ↗
Red HatCVE-2026-42310CVSS 4.0Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:3a2527c5c164fad4d2f0fbda199dcd887e5acaf211fe3cd12dc3aa9f499836c0_arm64Patch ↗Advisory ↗
Red HatCVE-2026-42310CVSS 4.0Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64Patch ↗Advisory ↗
Red HatCVE-2026-42310CVSS 4.0Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:3aecb1fcf7c282681d9a83ec51fd2fa2ff078567603942466734f55c8294961c_amd64Patch ↗Advisory ↗
Red HatCVE-2026-4271CVSS 5.3Red Hat Enterprise Linux AppStream (v. 10)libsoup3-0:3.6.5-3.el10_1.11.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-5119CVSS 5.9Red Hat Enterprise Linux AppStream (v. 10)libsoup3-0:3.6.5-3.el10_1.11.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6757CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.10.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6761CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.10.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6762CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.10.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6763CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.10.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6764CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.10.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6765CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.10.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6767CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.10.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6769CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.10.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6770CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.10.0-1.el9_7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-41889CVSS 5.9Red Hat Hardened Imagesgo-fdo-server-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45287CVSS 4.0Red Hat Hardened Imagespodman-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45287CVSS 4.0Red Hat Hardened Imagestrivy-0:0.69.3-1.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-22695CVSS 6.1Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202604281506-0Patch ↗Advisory ↗
Red HatCVE-2026-22801CVSS 6.6Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202604281506-0Patch ↗Advisory ↗
Red HatCVE-2026-28417CVSS 4.4Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202604281506-0Patch ↗Advisory ↗
Red HatCVE-2026-28421CVSS 5.3Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202604281506-0Patch ↗Advisory ↗
Red HatCVE-2025-46299CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v.9.4)webkit2gtk3-0:2.52.3-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-9714CVSS 6.2Red Hat Enterprise Linux AppStream AUS (v.8.4)libxml2-debuginfo-0:2.9.7-9.el8_4.9.i686Patch ↗Advisory ↗
Red HatCVE-2025-9714CVSS 6.2Red Hat Enterprise Linux AppStream E4S (v.8.8)libxml2-debuginfo-0:2.9.7-16.el8_8.13.i686Patch ↗Advisory ↗
Red HatCVE-2026-20643CVSS 5.4Red Hat Enterprise Linux AppStream EUS (v.9.4)webkit2gtk3-0:2.52.3-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-20665CVSS 5.4Red Hat Enterprise Linux AppStream EUS (v.9.4)webkit2gtk3-0:2.52.3-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-20676CVSS 4.3Red Hat Enterprise Linux AppStream EUS (v.9.4)webkit2gtk3-0:2.52.3-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-20691CVSS 4.3Red Hat Enterprise Linux AppStream EUS (v.9.4)webkit2gtk3-0:2.52.3-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28871CVSS 4.3Red Hat Enterprise Linux AppStream EUS (v.9.4)webkit2gtk3-0:2.52.3-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33176CVSS 6.5Red Hat Satellite 6.18 for RHEL 9rubygem-activesupport-0:7.0.8.7-2.el9sat.noarchPatch ↗Advisory ↗
Red HatCVE-2026-33176CVSS 6.5Red Hat Satellite 6.17 for RHEL 9rubygem-activesupport-0:7.0.8.7-2.el9sat.noarchPatch ↗Advisory ↗
Red HatCVE-2026-33176CVSS 6.5Red Hat Satellite 6.16 for RHEL 8rubygem-activesupport-0:6.1.7.8-2.el8sat.noarchPatch ↗Advisory ↗
Red HatCVE-2026-35414CVSS 4.8Red Hat Discovery 2registry.redhat.io/discovery/discovery-server-rhel9@sha256:14ec7040666af93b0f95adca24dd3c95962fcd28623f9acadfae115b38b49d61_arm64Patch ↗Advisory ↗
Red HatCVE-2026-4878CVSS 6.7Red Hat Discovery 2registry.redhat.io/discovery/discovery-server-rhel9@sha256:14ec7040666af93b0f95adca24dd3c95962fcd28623f9acadfae115b38b49d61_arm64Patch ↗Advisory ↗
Red HatCVE-2025-67873CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.0)capstone-0:4.0.2-5.el9_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-0636CVSS 6.5Red Hat AMQ Broker 7.13.5Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-0636CVSS 6.5Red Hat AMQ Broker 7.12.7Not reportedPatch ↗Advisory ↗
CiscoCVE-2026-20168CVSS 6.5Cisco IoT Field Network Director4.1Patch ↗Advisory ↗
CiscoCVE-2026-20169CVSS 6.4Cisco IoT Field Network Director4.1Patch ↗Advisory ↗
CiscoCVE-2026-20172CVSS 4.3Cisco Enterprise Chat and Email11.5Patch ↗Advisory ↗
CiscoCVE-2026-20189CVSS 4.3Cisco Prime Infrastructure3.3Patch ↗Advisory ↗
CiscoCVE-2026-20193CVSS 4.3Cisco Identity Services Engine3.3Patch ↗Advisory ↗
CiscoCVE-2026-20195CVSS 5.3Cisco Identity Services Engine3.3Patch ↗Advisory ↗
CiscoCVE-2026-20219CVSS 5.4Apple macOS39Patch ↗Advisory ↗
Red HatCVE-2026-33007CVSS 5.3Red Hat Hardened Imageshttpd-0:2.4.67-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4878CVSS 6.7Red Hat OpenShift distributed tracing 3.9.3registry.redhat.io/rhosdt/opentelemetry-collector-rhel9@sha256:265d8d864589e9ca6739e5eff46be545dc531aa6aa72378674b3ae9ff48f14ac_s390xPatch ↗Advisory ↗
Red HatCVE-2026-5119CVSS 5.9Red Hat Enterprise Linux AppStream (v. 9)libsoup-0:2.72.0-12.el9_7.6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-5119CVSS 5.9Red Hat Enterprise Linux AppStream (v. 8)libsoup-debuginfo-0:2.62.3-14.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6735CVSS 5.4Red Hat Hardened Imagesphp-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-7258CVSS 5.9Red Hat Hardened Imagesphp-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2025-10158CVSS 4.3Middleware Containers for OpenShiftrhpam-7/rhpam-businesscentral-monitoring-rhel8@sha256:92df715c896f06f6aa93b631bd62e3a146bad3cd08666cbab955d5cccdad0ea0_amd64Patch ↗Advisory ↗
Red HatCVE-2025-14831CVSS 5.3Middleware Containers for OpenShiftrhpam-7/rhpam-businesscentral-monitoring-rhel8@sha256:92df715c896f06f6aa93b631bd62e3a146bad3cd08666cbab955d5cccdad0ea0_amd64Patch ↗Advisory ↗
Red HatCVE-2025-46299CVSS 6.5Red Hat Enterprise Linux AppStream AUS (v.8.6)webkit2gtk3-0:2.52.3-1.el8_6.i686Patch ↗Advisory ↗
Red HatCVE-2025-9820CVSS 4.0Middleware Containers for OpenShiftrhpam-7/rhpam-businesscentral-monitoring-rhel8@sha256:92df715c896f06f6aa93b631bd62e3a146bad3cd08666cbab955d5cccdad0ea0_amd64Patch ↗Advisory ↗
Red HatCVE-2026-0636CVSS 6.5Red Hat build of Quarkus 3.20.6.SP1Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-0636CVSS 6.5Red Hat build of Quarkus 3.27.3.SP1Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-0636CVSS 6.5Red Hat Build of Apache Camel 4.14 for Quarkus 3.27Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-20643CVSS 5.4Red Hat Enterprise Linux AppStream AUS (v.8.6)webkit2gtk3-0:2.52.3-1.el8_6.i686Patch ↗Advisory ↗
Red HatCVE-2026-20665CVSS 5.4Red Hat Enterprise Linux AppStream AUS (v.8.6)webkit2gtk3-0:2.52.3-1.el8_6.i686Patch ↗Advisory ↗
Red HatCVE-2026-20676CVSS 4.3Red Hat Enterprise Linux AppStream AUS (v.8.6)webkit2gtk3-0:2.52.3-1.el8_6.i686Patch ↗Advisory ↗

Glossary