CYBERSECURITYTRACKER
TRACKING7,811 stories in this site build1,697 vulnerability news stories in this site build
Vulnerabilities

June 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 0 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 2,291 vulnerabilities across 5,850 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.

5,850all patch recordsClear filters263criticalShow these records0Microsoft exploitation detectedShow these records2Microsoft in the Known Exploited Vulnerabilities catalogShow these records1,488tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 27 of 30 · records 5,201 to 5,400 of 5,850

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-42768 ↗azl3 openssl 3.3.7-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableMulti-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
CVE-2026-5419 ↗azl3 gnutls 3.8.3-11 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableGuntls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal
CVE-2026-10722 ↗azl3 containerd2 2.2.4-2 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablecilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow
CVE-2026-10275 ↗azl3 opensc 0.27.1-2 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableOpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow
CVE-2026-50219 ↗azl3 expat 2.6.4-6 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablelibexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,
CVE-2026-46252 ↗azl3 kernel 6.6.141.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableregulator: core: fix locking in regulator_resolve_supply() error path
CVE-2026-46272 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablecoresight: tmc-etr: Fix race condition between sysfs and perf mode
CVE-2026-12469 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12469 Uninitialized Use in GPU
CVE-2026-12448 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12448 Inappropriate implementation in WebView
CVE-2026-12442 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12442 Use after free in Passwords
CVE-2026-12438 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12438 Inappropriate implementation in WebView
CVE-2026-12032 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12032 Inappropriate implementation  Passwords
CVE-2026-12030 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12031 Inappropriate implementation  Views
CVE-2026-12028 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12028 Use after free  GPU
CVE-2026-11647 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11647 Use after free in Printing
CVE-2026-13038 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13038 Use after free in Autofill
CVE-2026-13036 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13036 Use after free in Blink
CVE-2026-13035 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13035 Use after free in Bluetooth
CVE-2026-13034 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13034 Inappropriate implementation in Passwords
CVE-2026-13033 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13033 Out of bounds read in Blink>InterestGroups
CVE-2026-13031 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13031 Use after free in Blink
CVE-2026-13029 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13029 Use after free in Web Authentication
CVE-2026-13027 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13027 Use after free in FileSystem
CVE-2026-13026 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13026 Use after free in Digital Credentials
CVE-2026-13025 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13025 Insufficient validation of untrusted input in DevTools
CVE-2026-13024 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13024 Insufficient validation of untrusted input in Navigation
CVE-2026-13023 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13023 Uninitialized Use in GPU
CVE-2026-13022 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13022 Inappropriate implementation in Autofill
CVE-2026-13021 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-13021 Inappropriate implementation in DeviceBoundSessionCredentials
CVE-2026-12437 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12437 Use after free in WebShare
CVE-2026-12439 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12439 Use after free in Digital Credentials
CVE-2026-12440 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12440 Use after free in DigitalCredentials
CVE-2026-12441 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12441 Use after free in File Input
CVE-2026-12443 ↗Microsoft Edge (Chromium-based)N/AOut-of-band1%Microsoft rating unavailableChromium: CVE-2026-12443 Use after free in Web Authentication
CVE-2026-12444 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12444 Out of bounds read in Chromoting
CVE-2026-12445 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12445 Use after free in Extensions
CVE-2026-12446 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12446 Insufficient data validation in Passwords
CVE-2026-12447 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12447 Heap buffer overflow in WebRTC
CVE-2026-12449 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12449 Use after free in Chromoting
CVE-2026-12451 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12451 Use after free in DigitalCredentials
CVE-2026-12452 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12452 Use after free in Downloads
CVE-2026-12453 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12453 Insufficient validation of untrusted input in Input
CVE-2026-12454 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12454 Race in Safe Browsing
CVE-2026-12455 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12455 Use after free in Tab Strip
CVE-2026-12456 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12456 Insufficient validation of untrusted input in Extensions
CVE-2026-12457 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12457 Insufficient data validation in Extensions
CVE-2026-12458 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12458 Incorrect security UI in Passwords
CVE-2026-12459 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12459 Inappropriate implementation in Serial
CVE-2026-12460 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12460 Insufficient policy enforcement in File System Access
CVE-2026-12461 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12461 Out of bounds read in WebRTC
CVE-2026-12462 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12462 Use after free in Media
CVE-2026-12463 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12463 Inappropriate implementation in Views
CVE-2026-12464 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12464 Use after free in Browser
CVE-2026-12465 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12465 Insufficient validation of untrusted input in Metrics
CVE-2026-12466 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12466 Heap buffer overflow in WebRTC
CVE-2026-12467 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12467 Use after free in Extensions
CVE-2026-12468 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-12468 Inappropriate implementation in Updater
CVE-2026-11701 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11701 Insufficient validation of untrusted input in Guest View
CVE-2026-11700 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11700 Use after free in Tracing
CVE-2026-11699 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11699 Use after free in Bluetooth
CVE-2026-11698 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11698 Use after free in Bluetooth
CVE-2026-11697 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11697 Insufficient validation of untrusted input in UI
CVE-2026-11696 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11696 Uninitialized Use in Video
CVE-2026-11695 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11695 Inappropriate implementation in Passwords
CVE-2026-11694 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11694 Use after free in ServiceWorker
CVE-2026-11693 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11693 Inappropriate implementation in Plugins
CVE-2026-11692 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11692 Use after free in Read Anything
CVE-2026-11691 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11691 Insufficient validation of untrusted input in New Tab Page
CVE-2026-11690 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11690 Out of bounds read and write in Media
CVE-2026-11689 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11689 Insufficient validation of untrusted input in Passwords
CVE-2026-11688 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11688 Object lifecycle issue in SVG
CVE-2026-11687 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11687 Use after free in Dawn
CVE-2026-11686 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11686 Insufficient validation of untrusted input in Dawn
CVE-2026-11685 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11685 Insufficient data validation in MediaCapture
CVE-2026-11684 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11684 Insufficient policy enforcement in Network
CVE-2026-11683 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11683 Use after free in WebCodecs
CVE-2026-11682 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11682 Insufficient validation of untrusted input in Views
CVE-2026-11681 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11681 Use after free in Ozone
CVE-2026-11680 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11680 Use after free in Media
CVE-2026-11679 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11679 Use after free in Codecs
CVE-2026-11678 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11678 Integer overflow in libyuv
CVE-2026-11677 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11677 Race in Network
CVE-2026-11676 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11676 Insufficient validation of untrusted input in Dawn
CVE-2026-11675 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11675 Insufficient validation of untrusted input in Skia
CVE-2026-11674 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11674 Use after free in Guest View
CVE-2026-11673 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11673 Use after free in InterestGroups
CVE-2026-11672 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11672 Out of bounds write in GPU
CVE-2026-11671 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11671 Use after free in Navigation
CVE-2026-11670 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11670 Use after free in PDF
CVE-2026-11669 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11669 Integer overflow in Media
CVE-2026-11668 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11668 Uninitialized Use in Codecs
CVE-2026-11667 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11667 Out of bounds read in WebRTC
CVE-2026-11666 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11666 Insufficient validation of untrusted input in Input
CVE-2026-11665 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11665 Out of bounds read in Dawn
CVE-2026-11664 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11664 Use after free in Payments
CVE-2026-11663 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11663 Use after free in Skia
CVE-2026-11662 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11662 Type Confusion in Bindings
CVE-2026-11661 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11661 Use after free in Views
CVE-2026-11660 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11660 Insufficient validation of untrusted input in New Tab Page
CVE-2026-11659 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-11659 Insufficient validation of untrusted input in UI

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-8961CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.11.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8961CVSS 3.4Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.11.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-8961CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.11.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-8961CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.11.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-8961CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.11.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)firefox-0:140.11.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.11.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.11.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.11.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)thunderbird-0:140.11.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.11.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.11.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.11.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.11.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.11.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)firefox-0:140.11.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.11.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.11.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.11.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)thunderbird-0:140.11.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.11.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.11.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.11.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.11.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.11.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)firefox-0:140.11.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.11.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.11.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.11.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)thunderbird-0:140.11.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.11.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.11.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.11.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.11.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.11.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-22001CVSS 2.7Red Hat Enterprise Linux AppStream (v. 8)mecab-0:0.996-2.module+el8.10.0+23550+bd321b9a.aarch64::mysql:8.4Patch ↗Advisory ↗
Red HatCVE-2026-24733CVSS 3.7Red Hat Enterprise Linux AppStream (v. 9)tomcat-1:9.0.117-1.el9_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-3832CVSS 3.7Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:5c18f8336186fb1c9dbc1e710e91420ca3f5eca92b081cace3325585789f4825_amd64Patch ↗Advisory ↗
Red HatCVE-2026-3832CVSS 3.7Red Hat Enterprise Linux AppStream EUS (v. 10.0)gnutls-c++-0:3.8.9-9.el10_0.19.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45446CVSS 3.7Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:5c18f8336186fb1c9dbc1e710e91420ca3f5eca92b081cace3325585789f4825_amd64Patch ↗Advisory ↗
Red HatCVE-2026-5419CVSS 3.7Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-rhel9@sha256:5c18f8336186fb1c9dbc1e710e91420ca3f5eca92b081cace3325585789f4825_amd64Patch ↗Advisory ↗
Red HatCVE-2026-5419CVSS 3.7Red Hat Enterprise Linux AppStream EUS (v. 10.0)gnutls-c++-0:3.8.9-9.el10_0.19.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6638CVSS 3.7Red Hat Enterprise Linux AppStream (v. 9)pg_repack-0:1.5.1-1.module+el9.8.0+24090+8f0ee565.aarch64::postgresql:16Patch ↗Advisory ↗
Red HatCVE-2026-6638CVSS 3.7Red Hat Enterprise Linux AppStream (v. 9)pg_repack-0:1.5.3-1.module+el9.8.0+23739+1c42644c.aarch64::postgresql:18Patch ↗Advisory ↗
Red HatCVE-2026-8961CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.11.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8961CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)thunderbird-0:140.11.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-8961CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)thunderbird-0:140.11.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8961CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)thunderbird-0:140.11.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.11.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)thunderbird-0:140.11.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)thunderbird-0:140.11.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)thunderbird-0:140.11.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.11.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)thunderbird-0:140.11.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)thunderbird-0:140.11.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)thunderbird-0:140.11.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.11.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)thunderbird-0:140.11.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)thunderbird-0:140.11.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)thunderbird-0:140.11.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-22001CVSS 2.7Red Hat Enterprise Linux AppStream (v. 8)mecab-0:0.996-2.module+el8.10.0+22857+7f331edd.aarch64::mysql:8.0Patch ↗Advisory ↗
Red HatCVE-2026-45446CVSS 3.7Red Hat Enterprise Linux AppStream (v. 10)openssl-debuginfo-1:3.5.5-4.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45446CVSS 3.7Red Hat Enterprise Linux AppStream (v. 9)openssl-debuginfo-1:3.5.5-4.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-22001CVSS 2.7Red Hat Enterprise Linux AppStream (v. 9)mecab-0:0.996-3.module+el9.8.0+24348+9b27f387.4.aarch64::mysql:8.4Patch ↗Advisory ↗
Red HatCVE-2026-35386CVSS 3.6Red Hat AI Inference Server 3.2registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:20ab3684a275906dab8e67c09d3b86eadb6599aadf7247185a732aa4f96c0c00_arm64Patch ↗Advisory ↗
Red HatCVE-2026-35387CVSS 3.1Red Hat AI Inference Server 3.2registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:20ab3684a275906dab8e67c09d3b86eadb6599aadf7247185a732aa4f96c0c00_arm64Patch ↗Advisory ↗
Red HatCVE-2026-35388CVSS 2.2Red Hat AI Inference Server 3.2registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:20ab3684a275906dab8e67c09d3b86eadb6599aadf7247185a732aa4f96c0c00_arm64Patch ↗Advisory ↗
Red HatCVE-2026-37977CVSS 3.7Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundle@sha256:b32c3aaa65f4ea0ef5eca9ea14ba20f7a382a625acfeebf2b9f604caeaea143d_amd64Patch ↗Advisory ↗
Red HatCVE-2026-37977CVSS 3.7Red Hat build of Keycloak 26.6.3Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-4874CVSS 3.1Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundle@sha256:b32c3aaa65f4ea0ef5eca9ea14ba20f7a382a625acfeebf2b9f604caeaea143d_amd64Patch ↗Advisory ↗
Red HatCVE-2026-4874CVSS 3.1Red Hat build of Keycloak 26.6.3Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-9088CVSS 2.7Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundle@sha256:b32c3aaa65f4ea0ef5eca9ea14ba20f7a382a625acfeebf2b9f604caeaea143d_amd64Patch ↗Advisory ↗
Red HatCVE-2026-9088CVSS 2.7Red Hat build of Keycloak 26.6.3Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-22036CVSS 3.7Red Hat Developer Hub 1.10registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:b99622b2ec913bdf7ad25a7a9919fbf07a6a177548b3f486acf648c533ca4f22_amd64Patch ↗Advisory ↗
Red HatCVE-2026-13573CVSS 3.3Red Hat Hardened Imagesclang21-0:21.1.8-6.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-13574CVSS 3.3Red Hat Hardened Imagesclang21-0:21.1.8-6.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-22001CVSS 2.7Red Hat Enterprise Linux AppStream (v. 9)mysql-0:8.0.46-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-35386CVSS 3.6Red Hat Enterprise Linux AppStream EUS (v.9.4)openssh-askpass-0:8.7p1-38.el9_4.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-35387CVSS 3.1Red Hat Enterprise Linux AppStream EUS (v.9.4)openssh-askpass-0:8.7p1-38.el9_4.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-35388CVSS 2.2Red Hat Enterprise Linux AppStream EUS (v.9.4)openssh-askpass-0:8.7p1-38.el9_4.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6638CVSS 3.7Red Hat Hardened Imagespostgresql18-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8961CVSS 3.4Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.11.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.11.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.11.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.11.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-35386CVSS 3.6Red Hat Enterprise Linux AppStream E4S (v.9.2)openssh-askpass-0:8.7p1-30.el9_2.11.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-35387CVSS 3.1Red Hat Enterprise Linux AppStream E4S (v.9.2)openssh-askpass-0:8.7p1-30.el9_2.11.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-35388CVSS 2.2Red Hat Enterprise Linux AppStream E4S (v.9.2)openssh-askpass-0:8.7p1-30.el9_2.11.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-22007CVSS 2.9Red Hat Enterprise Linux Supplementary (v. 8)java-1.8.0-ibm-1:1.8.0.8.65-1.el8_10.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-22007CVSS 2.9Red Hat Enterprise Linux Supplementary EUS (v. 10.0)java-21-ibm-semeru-certified-jdk-1:21.0.11.0.10-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-22018CVSS 3.7Red Hat Enterprise Linux Supplementary (v. 8)java-1.8.0-ibm-1:1.8.0.8.65-1.el8_10.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-34268CVSS 2.9Red Hat Enterprise Linux Supplementary (v. 8)java-1.8.0-ibm-1:1.8.0.8.65-1.el8_10.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-34268CVSS 2.9Red Hat Enterprise Linux Supplementary EUS (v. 10.0)java-21-ibm-semeru-certified-jdk-1:21.0.11.0.10-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-35386CVSS 3.6Red Hat Enterprise Linux BaseOS AUS (v.8.4)openssh-0:8.0p1-7.el8_4.2.srcPatch ↗Advisory ↗
Red HatCVE-2026-35387CVSS 3.1Red Hat Enterprise Linux BaseOS AUS (v.8.4)openssh-0:8.0p1-7.el8_4.2.srcPatch ↗Advisory ↗
Red HatCVE-2026-35388CVSS 2.2Red Hat Enterprise Linux BaseOS AUS (v.8.4)openssh-0:8.0p1-7.el8_4.2.srcPatch ↗Advisory ↗
Red HatCVE-2026-8961CVSS 3.4Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.11.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8962CVSS 3.4Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.11.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8968CVSS 3.4Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.11.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8970CVSS 3.4Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.11.0-1.el10_2.aarch64Patch ↗Advisory ↗

Glossary