CYBERSECURITYTRACKER
Vulnerabilities

July 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 3 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 4,101 vulnerabilities across 16,833 returned patch records from 5 vendors. Filter the complete month, or browse the static page trail without JavaScript.

16,833all patch recordsClear filters784criticalShow these records3Microsoft exploitation detectedShow these records6Microsoft in the Known Exploited Vulnerabilities catalogShow these records14,899tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 12 of 85 · records 2,201 to 2,400 of 16,833

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-64375 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsproc: protect ptrace_may_access() with exec_update_lock (FD links)
CVE-2026-64384 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablesmb: client: fix change notify replay double-free
CVE-2026-64401 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablesmb: client: resolve SWN tcon from live registrations
CVE-2026-64372 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablecpufreq: pcc: fix use-after-free and double free in _OSC evaluation
CVE-2026-64475 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablevfio/pci: Release the VGA arbiter client on register_device() failure
CVE-2026-64481 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableALSA: hda/cs35l41: Fix firmware load work teardown
CVE-2026-64421 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemedia: nxp: imx8-isi: Fix use-after-free on remove
CVE-2026-64391 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableksmbd: use opener credentials for ADS I/O
CVE-2026-64274 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableInput: goodix - clamp the device-reported contact count
CVE-2026-64315 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablecrypto: caam - use print_hex_dump_devel to guard key hex dumps
CVE-2026-64270 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableInput: mms114 - reject an oversized device packet size
CVE-2026-64322 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableudf: validate sparing table length as an entry count, not a byte count
CVE-2026-64385 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablesmb: client: fix double-free in SMB2_ioctl() replay
CVE-2026-64436 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablenet: af_key: initialize alg_key_len for IPComp states
CVE-2026-64435 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableaudit: Fix data races of skb_queue_len() readers on audit_queue
CVE-2026-64296 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableexfat: bound uniname advance in exfat_find_dir_entry()
CVE-2026-64280 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablefpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
CVE-2026-64329 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableusb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
CVE-2026-64440 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablestaging: rtl8723bs: fix OOB write in HT_caps_handler()
CVE-2026-64393 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableksmbd: run set info with opener credentials
CVE-2026-64449 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablestaging: vme_user: bound slave read/write to the kern_buf size
CVE-2026-64456 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablehwrng: virtio: clamp device-reported used.len at copy_data()
CVE-2026-64342 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableUSB: iowarrior: fix use-after-free on disconnect
CVE-2026-64365 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableHID: letsketch: fix UAF on inrange_timer at driver unbind
CVE-2026-64380 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablesmb: client: harden POSIX SID length parsing
CVE-2026-64392 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableksmbd: use opener credentials for delete-on-close
CVE-2026-64389 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableksmbd: validate NTLMv2 response before updating session key
CVE-2026-64445 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablestaging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
CVE-2026-64304 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablecrypto: qat - validate RSA CRT component lengths
CVE-2026-64320 ↗azl3 kernel 6.6.145.2-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablenvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
CVE-2026-64361 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablehfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
CVE-2026-64446 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablestaging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
CVE-2026-64437 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
CVE-2026-64399 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
CVE-2026-64341 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableUSB: iowarrior: fix use-after-free on disconnect race
CVE-2026-64268 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableRDMA/siw: bound Read Response placement to the RREAD length
CVE-2026-64340 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableUSB: legousbtower: fix use-after-free on disconnect race
CVE-2026-64333 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableUSB: serial: digi_acceleport: fix write buffer corruption
CVE-2026-64448 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablesmb: client: restrict implied bcc[0] exemption to responses without data area
CVE-2026-64395 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableksmbd: require source read access for duplicate extents
CVE-2026-64362 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableHID: lg-g15: cancel pending work on remove to fix a use-after-free
CVE-2026-64343 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableUSB: ldusb: fix use-after-free on disconnect race
CVE-2026-64305 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablecrypto: qat - protect service table iterations with service_lock
CVE-2026-64386 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablesmb: client: fix query_info() replay double-free
CVE-2026-64411 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsnetfilter: ebtables: terminate table name before find_table_lock()
CVE-2026-64273 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableInput: iforce - bound the device-reported force-feedback effect index
CVE-2026-64469 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablebinder: fix UAF in binder_thread_release()
CVE-2026-64407 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableBluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
CVE-2026-64266 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablefuse: re-lock request before returning from fuse_ref_folio()
CVE-2026-64423 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailable1 mentionsipv4: igmp: remove multicast group from hash table on device destruction
CVE-2026-64355 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablebpf: Reject fragmented frames in devmap
CVE-2026-64383 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablesmb: client: fix double-free in SMB2_flush() replay
CVE-2026-64496 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableiio: event: Fix event FIFO reset race
CVE-2026-64312 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablecrypto: pcrypt - restore callback for non-parallel fallback
CVE-2026-64510 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
CVE-2026-64463 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableusb: typec: tcpci_rt1711h: unregister TCPCI port with devres
CVE-2026-66373 ↗azl3 valkey 8.0.9-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableRedis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free. NOTE: this issue exists because of an incomplete fix for CVE-2026-25243.
CVE-2026-64246 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablepower: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()
CVE-2026-64403 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableBluetooth: L2CAP: validate option length before reading conf opt value
CVE-2026-66033 ↗azl3 libssh2 1.11.1-4 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablelibssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation
CVE-2026-66035 ↗azl3 libssh2 1.11.1-4 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablelibssh2 Heap Buffer Overflow via ETM Cipher Negotiation
CVE-2026-64286 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableKVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU
CVE-2026-66032 ↗azl3 libssh2 1.11.1-4 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablelibssh2 Double-Free Heap Corruption via sftp_open()
CVE-2026-64377 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablecpufreq: qcom-cpufreq-hw: Fix possible double free
CVE-2026-66034 ↗azl3 libssh2 1.11.1-4 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablelibssh2 Heap Out-of-Bounds Read via publickey subsystem
CVE-2026-64344 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableUSB: idmouse: fix use-after-free on disconnect race
CVE-2026-64245 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablefbdev: modedb: fix a possible UAF in fb_find_mode()
CVE-2026-64382 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablesmb: client: fix double-free in SMB2_open() replay
CVE-2026-64298 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableNFSv4: include MAY_WRITE in open permission mask for O_TRUNC
CVE-2026-64249 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablefpga: region: fix use-after-free in child_regions_with_firmware()
CVE-2026-64330 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableusb: typec: tcpm: Validate SVID index in svdm_consume_modes()
CVE-2026-64255 ↗azl3 kernel 6.6.145.2-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablewifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers
CVE-2026-64313 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablecrypto: ecc - Fix carry overflow in vli multiplication
CVE-2026-64402 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablecoresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
CVE-2026-64210 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablenet/mlx5e: xsk: Fix unlocked writing to ICOSQ
CVE-2026-64379 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablesmb: client: mask server-provided mode to 07777 in modefromsid
CVE-2026-64442 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablestaging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
CVE-2026-64303 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablespi: fsl-lpspi: terminate the RX channel on TX prepare failure path
CVE-2026-64219 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailabledrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async
CVE-2026-13321 ↗azl3 bind 9.20.23-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableDNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
CVE-2026-56852 ↗azl3 azurelinux-image-tools 1.5.0-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableInfinite loop on invalid input in golang.org/x/text
CVE-2026-16493 ↗azl3 ansible 2.17.11-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableAnsible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-50260trackedCVSS 7.8Red Hat Enterprise Linux Server (v. 7 ELS)tigervnc-0:1.8.0-36.el7_9.5.ppc64lePatch ↗Advisory ↗
SuseCVE-2026-50260trackedCVSS 7.8SUSE Liberty Linux 9.6 EMStigervnc-0:1.14.1-11.el9_6.x86_64no patch linkAdvisory ↗
SuseCVE-2026-50260trackedCVSS 7.8SUSE Liberty Linux 7 LTSStigervnc-0:1.8.0-36.el7_9.5.x86_64no patch linkAdvisory ↗
Red HatCVE-2026-50261trackedCVSS 7.8Red Hat Enterprise Linux AppStream E4S (v.9.2)tigervnc-0:1.12.0-14.el9_2.15.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50261trackedCVSS 7.8Red Hat Enterprise Linux AppStream AUS (v.8.4)tigervnc-0:1.11.0-8.el8_4.16.srcPatch ↗Advisory ↗
Red HatCVE-2026-50261trackedCVSS 7.8Red Hat Enterprise Linux AppStream E4S (v.8.8)tigervnc-0:1.12.0-15.el8_8.18.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-50261trackedCVSS 7.8Red Hat Enterprise Linux AppStream EUS (v.9.6)tigervnc-0:1.14.1-11.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50261trackedCVSS 7.8Red Hat Enterprise Linux AppStream E4S (v.9.4)tigervnc-0:1.13.1-8.el9_4.10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50261trackedCVSS 7.8Red Hat Enterprise Linux AppStream AUS (v.8.6)tigervnc-0:1.12.0-6.el8_6.18.srcPatch ↗Advisory ↗
Red HatCVE-2026-50261trackedCVSS 7.8Red Hat Enterprise Linux Server (v. 7 ELS)tigervnc-0:1.8.0-36.el7_9.5.ppc64lePatch ↗Advisory ↗
SuseCVE-2026-50261trackedCVSS 7.8SUSE Liberty Linux 9.6 EMStigervnc-0:1.14.1-11.el9_6.x86_64no patch linkAdvisory ↗
SuseCVE-2026-50261trackedCVSS 7.8SUSE Liberty Linux 7 LTSStigervnc-0:1.8.0-36.el7_9.5.x86_64no patch linkAdvisory ↗
Red HatCVE-2026-50264trackedCVSS 7.8Red Hat Enterprise Linux AppStream E4S (v.9.2)tigervnc-0:1.12.0-14.el9_2.15.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50264trackedCVSS 7.8Red Hat Enterprise Linux AppStream AUS (v.8.4)tigervnc-0:1.11.0-8.el8_4.16.srcPatch ↗Advisory ↗
Red HatCVE-2026-50264trackedCVSS 7.8Red Hat Enterprise Linux AppStream E4S (v.8.8)tigervnc-0:1.12.0-15.el8_8.18.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-50264trackedCVSS 7.8Red Hat Enterprise Linux AppStream EUS (v.9.6)tigervnc-0:1.14.1-11.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50264trackedCVSS 7.8Red Hat Enterprise Linux AppStream E4S (v.9.4)tigervnc-0:1.13.1-8.el9_4.10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50264trackedCVSS 7.8Red Hat Enterprise Linux AppStream AUS (v.8.6)tigervnc-0:1.12.0-6.el8_6.18.srcPatch ↗Advisory ↗
Red HatCVE-2026-50264trackedCVSS 7.8Red Hat Enterprise Linux Server (v. 7 ELS)tigervnc-0:1.8.0-36.el7_9.5.ppc64lePatch ↗Advisory ↗
SuseCVE-2026-50264trackedCVSS 7.8SUSE Liberty Linux 9.6 EMStigervnc-0:1.14.1-11.el9_6.x86_64no patch linkAdvisory ↗
SuseCVE-2026-50264trackedCVSS 7.8SUSE Liberty Linux 7 LTSStigervnc-0:1.8.0-36.el7_9.5.x86_64no patch linkAdvisory ↗
Red HatCVE-2026-50721trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)libreswan-0:4.12-2.el8_10.6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50721trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)libreswan-0:4.15-10.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50721trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)libreswan-0:5.3.2-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50721trackedCVSS 7.5Fast Datapath for Red Hat Enterprise Linux 9libreswan-0:5.3.2-1.el9fdp.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50722trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)libreswan-0:4.12-2.el8_10.6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50722trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)libreswan-0:4.15-10.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50722trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)libreswan-0:5.3.2-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50722trackedCVSS 7.5Fast Datapath for Red Hat Enterprise Linux 9libreswan-0:5.3.2-1.el9fdp.aarch64Patch ↗Advisory ↗
SuseCVE-2026-52720trackedCVSS 8.8SUSE Linux Enterprise High Performance Computing 12 SP5gstreamer-plugins-bad-0:1.8.3-18.21.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-52722trackedCVSS 7.1SUSE Linux Enterprise High Performance Computing 12 SP5gstreamer-plugins-bad-0:1.8.3-18.21.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-53359trackedCVSS 8.8SUSE Linux Enterprise Live Patching 15 SP6kernel-livepatch-6_4_0-150600_23_84-default-0:10-150600.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-53359trackedCVSS 8.8SUSE Linux Enterprise Live Patching 15 SP7kernel-livepatch-6_4_0-150700_53_40-default-0:6-150700.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-53359trackedCVSS 8.8SUSE Linux Enterprise Live Patching 15 SP7kernel-livepatch-6_4_0-150700_53_31-default-0:9-150700.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-53359trackedCVSS 8.8SUSE Linux Enterprise Live Patching 15 SP5kernel-livepatch-5_14_21-150500_55_113-default-0:21-150500.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-53359trackedCVSS 8.8SUSE Linux Enterprise Live Patching 15 SP7kernel-livepatch-6_4_0-150700_7_59-rt-0:3-150700.2.1.x86_64no patch linkAdvisory ↗
SuseCVE-2026-53359trackedCVSS 8.8SUSE Linux Enterprise Live Patching 15 SP6kernel-livepatch-6_4_0-150600_23_81-default-0:10-150600.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-53359trackedCVSS 8.8SUSE Linux Enterprise Live Patching 15 SP7kernel-livepatch-6_4_0-150700_53_11-default-0:15-150700.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-53366trackedCVSS 8.5SUSE Linux Enterprise Live Patching 15 SP6kernel-livepatch-6_4_0-150600_23_84-default-0:10-150600.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-53366trackedCVSS 8.5SUSE Linux Enterprise Live Patching 15 SP7kernel-livepatch-6_4_0-150700_53_40-default-0:6-150700.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-53366trackedCVSS 8.5SUSE Linux Enterprise Live Patching 15 SP7kernel-livepatch-6_4_0-150700_53_31-default-0:9-150700.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-53366trackedCVSS 8.5SUSE Linux Enterprise Live Patching 15 SP7kernel-livepatch-6_4_0-150700_7_59-rt-0:3-150700.2.1.x86_64no patch linkAdvisory ↗
SuseCVE-2026-53366trackedCVSS 8.5SUSE Linux Enterprise Live Patching 15 SP6kernel-livepatch-6_4_0-150600_23_81-default-0:10-150600.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-53366trackedCVSS 8.5SUSE Linux Enterprise Live Patching 15 SP7kernel-livepatch-6_4_0-150700_53_11-default-0:15-150700.2.1.ppc64leno patch linkAdvisory ↗
Red HatCVE-2026-53488trackedCVSS 8.8Red Hat Advanced Cluster Management for Kubernetes 2.15registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:115337cf3b0e3d4376299c1b19df47570b7687b5e959ce4bf2ba62a5bec8d720_s390xPatch ↗Advisory ↗
SuseCVE-2026-54059trackedCVSS 7.5Open Enterprise Server 23.4python311-Pillow-0:9.5.0-150400.5.25.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-54060trackedCVSS 7.5Open Enterprise Server 23.4python311-Pillow-0:9.5.0-150400.5.25.1.aarch64no patch linkAdvisory ↗
Red HatCVE-2026-54369trackedCVSS 7.1Red Hat Discovery 2registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64Patch ↗Advisory ↗
SuseCVE-2026-55379trackedCVSS 7.5Open Enterprise Server 23.4python311-Pillow-0:9.5.0-150400.5.25.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-55380trackedCVSS 7.5Open Enterprise Server 23.4python311-Pillow-0:9.5.0-150400.5.25.1.aarch64no patch linkAdvisory ↗
Red HatCVE-2026-55969trackedCVSS 7.5Red Hat Hardened Imagesjaeger-0:2.20.0-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55969trackedCVSS 7.5Red Hat Hardened Imagestempo2.10-0:2.10.7-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55969trackedCVSS 7.5Red Hat Hardened Imagestempo3.0-0:3.0.2-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56852trackedCVSS 7.5Red Hat Hardened Imagesgo-fdo-client-0:1.0.0-2.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56852trackedCVSS 7.5Red Hat Hardened Imagesopentofu1.12-0:1.12.5-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56852trackedCVSS 7.5Red Hat Hardened Imagestrivy-0:0.72.0-0.1.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58016trackedCVSS 7.5Red Hat Discovery 2registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64Patch ↗Advisory ↗
SuseCVE-2026-59692trackedCVSS 7.5SUSE Linux Enterprise High Performance Computing 12 SP5gstreamer-plugins-bad-0:1.8.3-18.21.1.aarch64no patch linkAdvisory ↗
Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Container Native Virtualization 4.12registry.redhat.io/container-native-virtualization/kubevirt-console-plugin@sha256:91f0b7aa48e6d376398742fd6517a23fa9b07c5947493457ec9dd49a9609ae50_amd64Patch ↗Advisory ↗
Red HatCVE-2026-59869trackedCVSS 7.5multicluster engine for Kubernetes 2.10registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390xPatch ↗Advisory ↗
Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Advanced Cluster Management for Kubernetes 2.15registry.redhat.io/rhacm2/console-rhel9@sha256:04bcde179b1cbf750852e13ade08655b62947dcd7c8050e268ca70097079ac30_arm64Patch ↗Advisory ↗
Red HatCVE-2026-64600trackedCVSS 7.8Red Hat Enterprise Linux BaseOS (v. 10)kpatch-patch-6_12_0-211_16_1-0:1-5.el10_2.ppc64lePatch ↗Advisory ↗
SuseCVE-2026-8461trackedCVSS 8.8openSUSE Tumbleweedffmpeg-7-0:7.1.5-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-11331trackedCVSS 7.5openSUSE Tumbleweedbind-0:9.20.26-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-11605trackedCVSS 7.5openSUSE Tumbleweedbind-0:9.20.26-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-11622trackedCVSS 7.5openSUSE Tumbleweedbind-0:9.20.26-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-11721trackedCVSS 7.5openSUSE Tumbleweedbind-0:9.20.26-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-12617trackedCVSS 7.5openSUSE Tumbleweedbind-0:9.20.26-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-13204trackedCVSS 7.5openSUSE Tumbleweedbind-0:9.20.26-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-13321trackedCVSS 8.6openSUSE Tumbleweedbind-0:9.20.26-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-23240trackedCVSS 7.0SUSE Linux Enterprise Live Patching 15 SP6kernel-livepatch-6_4_0-150600_23_109-default-0:4-150600.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-32665trackedCVSS 7.5openSUSE Tumbleweedlibunbound8-0:1.25.2-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-34986trackedCVSS 7.5openSUSE Tumbleweedignition-0:2.26.0-5.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-39821trackedCVSS 7.4openSUSE Tumbleweedignition-0:2.26.0-5.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-40691trackedCVSS 7.5openSUSE Tumbleweedlibunbound8-0:1.25.2-1.1.aarch64no patch linkAdvisory ↗
Red HatCVE-2026-42533trackedCVSS 7.0Red Hat Hardened Imagesnginx-2:1.30.4-2.hum1@aarch64Patch ↗Advisory ↗
SuseCVE-2026-43038trackedCVSS 7.1SUSE Linux Enterprise Live Patching 15 SP6kernel-livepatch-6_4_0-150600_23_109-default-0:4-150600.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-44690trackedCVSS 7.5openSUSE Tumbleweedlibunbound8-0:1.25.2-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-46113trackedCVSS 8.8SUSE Linux Enterprise Live Patching 15 SP6kernel-livepatch-6_4_0-150600_23_109-default-0:4-150600.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-53359trackedCVSS 8.8SUSE Linux Enterprise Live Patching 15 SP6kernel-livepatch-6_4_0-150600_23_109-default-0:4-150600.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-53366trackedCVSS 8.5SUSE Linux Enterprise Live Patching 15 SP6kernel-livepatch-6_4_0-150600_23_109-default-0:4-150600.2.1.ppc64leno patch linkAdvisory ↗
SuseCVE-2026-55973trackedCVSS 7.5openSUSE Tumbleweedlibunbound8-0:1.25.2-1.1.aarch64no patch linkAdvisory ↗
Red HatCVE-2026-60005trackedCVSS 8.2Red Hat Hardened Imagesnginx-2:1.30.4-2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-67322trackedCVSS 7.5Red Hat Hardened Imagesclang21-0:21.1.8-8.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-67323trackedCVSS 8.4Red Hat Hardened Imagesclang21-0:21.1.8-8.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-67325trackedCVSS 8.8Red Hat Hardened Imagesclang21-0:21.1.8-8.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-67326trackedCVSS 7.0Red Hat Hardened Imagesclang21-0:21.1.8-8.hum1@aarch64Patch ↗Advisory ↗
SuseCVE-2024-11700trackedCVSS 8.1openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2024-7523trackedCVSS 8.1openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2024-7530trackedCVSS 8.8openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2024-8389trackedCVSS 8.1openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2024-9403trackedCVSS 8.8openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2024-9956trackedCVSS 7.8openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-0247trackedCVSS 8.8openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-11720trackedCVSS 8.1openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-12380trackedCVSS 8.8openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-13012trackedCVSS 7.5openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-13016trackedCVSS 7.5openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-13021trackedCVSS 7.5openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-13022trackedCVSS 7.5openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-13023trackedCVSS 7.5openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-13024trackedCVSS 7.5openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-13025trackedCVSS 7.5openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-13026trackedCVSS 7.5openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-13027trackedCVSS 7.5openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-14332trackedCVSS 8.8openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-3032trackedCVSS 7.4openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-4083trackedCVSS 8.8openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-4085trackedCVSS 7.8openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-49709trackedCVSS 8.1openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-49710trackedCVSS 8.8openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-5270trackedCVSS 7.5openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-5272trackedCVSS 7.3openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-8044trackedCVSS 8.8openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2025-9187trackedCVSS 8.8openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-0881trackedCVSS 8.3openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-0892trackedCVSS 7.5openSUSE Tumbleweedfirefox-esr-0:153.0-1.1.aarch64no patch linkAdvisory ↗
Red HatCVE-2026-11822trackedCVSS 7.8Red Hat Hardened Imageslemon-0:3.53.4-0.1.hum1@aarch64Patch ↗Advisory ↗

Glossary