Patch Day month

July 2026 vulnerabilities

A server-rendered hunting trail for July 2026: 4,551 returned patch records across 3 vendors. Browse page by page, or use “Load next” to keep adding rows without losing your place.

4,551all patches

189critical

3exploitation detected

4in CISA KEV

1,850tracked here

Red Hat 2,465Microsoft 2,070Cisco 16

Page 17 of 23 · records 3,201–3,400 of 4,551

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle

CVE-2026-14101 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14101 Insufficient policy enforcement in Sandbox

CVE-2026-13998 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13998 Incorrect security UI in File Input

CVE-2026-13992 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13992 Inappropriate implementation in UI

CVE-2026-13975 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13975 Out of bounds read in ANGLE

CVE-2026-13974 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13974 Integer overflow in Safe Browsing

CVE-2026-13944 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13944 Inappropriate implementation in DataTransfer

CVE-2026-13914 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13914 Inappropriate implementation in Passwords

CVE-2026-13880 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13880 Use after free in USB

CVE-2026-13878 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13878 Use after free in Bluetooth

CVE-2026-13846 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13846 Use after free in USB

CVE-2026-13833 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13833 Uninitialized Use in ANGLE

CVE-2026-13827 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13827 Use after free in Updater

CVE-2026-13819 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13819 Out of bounds read in ANGLE

CVE-2026-13805 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13805 Use after free in GFX

CVE-2026-13792 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13792 Use after free in Touchbar

CVE-2026-13791 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13791 Insufficient validation of untrusted input in Downloads

CVE-2026-13785 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13785 Use after free in Bluetooth

CVE-2026-13778 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-13778 Use after free in WebUSB

CVE-2026-14421 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14421 Uninitialized Use in Dawn

CVE-2026-14401 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14401 Insufficient validation of untrusted input in ANGLE

CVE-2026-14388 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14388 Out of bounds read in ANGLE

CVE-2026-14432 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14432 Use after free in V8

CVE-2026-14431 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14431 Type Confusion in V8

CVE-2026-14430 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14430 Integer overflow in V8

CVE-2026-14429 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14429 Insufficient validation of untrusted input in Skia

CVE-2026-14427 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14427 Heap buffer overflow in Skia

CVE-2026-14426 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14426 Use after free in V8

CVE-2026-14425 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14425 Use after free in ANGLE

CVE-2026-14423 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14423 Type Confusion in Tint

CVE-2026-14420 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14420 Out of bounds read and write in Dawn

CVE-2026-14419 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14419 Use after free in Skia

CVE-2026-14418 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14418 Uninitialized Use in ANGLE

CVE-2026-14417 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14417 Use after free in Dawn

CVE-2026-14416 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14416 Out of bounds read in Dawn

CVE-2026-14415 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14415 Inappropriate implementation in V8

CVE-2026-14414 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14414 Insufficient validation of untrusted input in Skia

CVE-2026-14413 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14413 Uninitialized Use in ANGLE

CVE-2026-14412 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14412 Insufficient validation of untrusted input in ANGLE

CVE-2026-14411 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14411 Insufficient validation of untrusted input in ANGLE

CVE-2026-14410 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14410 Inappropriate implementation in Skia

CVE-2026-14409 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14409 Inappropriate implementation in V8

CVE-2026-14408 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14408 Uninitialized Use in Dawn

CVE-2026-14407 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14407 Inappropriate implementation in V8

CVE-2026-14406 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14406 Out of bounds read in V8

CVE-2026-14405 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14405 Uninitialized Use in V8

CVE-2026-14404 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14404 Inappropriate implementation in PDFium

CVE-2026-14403 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14403 Use after free in V8

CVE-2026-14402 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14402 Uninitialized Use in ANGLE

CVE-2026-14400 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14400 Out of bounds write in ANGLE

CVE-2026-14399 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14399 Uninitialized Use in Dawn

CVE-2026-14398 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14398 Use after free in ANGLE

CVE-2026-14395 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14395 Out of bounds write in V8

CVE-2026-14394 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14394 Use after free in V8

CVE-2026-14393 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14393 Use after free in V8

CVE-2026-14392 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14392 Out of bounds write in Tint

CVE-2026-14391 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14391 Integer overflow in ANGLE

CVE-2026-14390 ↗2026-07-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-14390 Use after free in ANGLE

CVE-2026-58281 ↗2026-07-11Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2026-58596 ↗2026-07-11Microsoft Edge (Chromium-based)ImportantOut-of-band0%More likelyMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVE-2026-58253 ↗2026-07-11azl3 telegraf 1.31.0-23 on Azure Linux 3.0ImportantOut-of-band—NATS Server: Route API Auth Bypass

CVE-2026-58209 ↗2026-07-11azl3 telegraf 1.31.0-23 on Azure Linux 3.0ModerateOut-of-band—NATS Server: MQTT retained and QoS replay bypass subscribe deny filters

CVE-2026-58252 ↗2026-07-11azl3 telegraf 1.31.0-23 on Azure Linux 3.0ModerateOut-of-band—NATS Server: Subscribe Authz Bypass via Wildcard-Overlap

CVE-2026-58250 ↗2026-07-11azl3 telegraf 1.31.0-23 on Azure Linux 3.0ModerateOut-of-band—NATS Server: Pre-auth server crash via double INFO in leafnode handshake

CVE-2026-58208 ↗2026-07-11azl3 telegraf 1.31.0-23 on Azure Linux 3.0ModerateOut-of-band—NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled

CVE-2026-58251 ↗2026-07-11azl3 telegraf 1.31.0-23 on Azure Linux 3.0ModerateOut-of-band—NATS Server: Queue Subscribe Authz Bypass

CVE-2026-58207 ↗2026-07-11azl3 telegraf 1.31.0-23 on Azure Linux 3.0ImportantOut-of-band—NATS Server: Remote crash via integer overflow in Connz pagination

CVE-2026-59869 ↗2026-07-11azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-band0%js-yaml: YAML merge-key chains can force quadratic CPU consumption

CVE-2026-59890 ↗2026-07-11azl3 python-pip 24.2-9 on Azure Linux 3.0ModerateOut-of-band—setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

CVE-2026-59930 ↗2026-07-11azl3 python-mistune 3.3.0-1 on Azure Linux 3.0ModerateOut-of-band—Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content

CVE-2026-59922 ↗2026-07-11azl3 python-mistune 3.3.0-1 on Azure Linux 3.0ImportantOut-of-band0%Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)

CVE-2026-59925 ↗2026-07-11azl3 python-mistune 3.3.0-1 on Azure Linux 3.0ImportantOut-of-band0%inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs

CVE-2026-59926 ↗2026-07-11azl3 python-mistune 3.3.0-1 on Azure Linux 3.0ModerateOut-of-band—Mistune: XSS via unescaped class option in Admonition directive

CVE-2026-59928 ↗2026-07-11azl3 python-mistune 3.3.0-1 on Azure Linux 3.0ImportantOut-of-band0%Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions

CVE-2026-14740 ↗2026-07-11azl3 perl-DBI 1.643-5 on Azure Linux 3.0ImportantOut-of-band—DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment

CVE-2026-14380 ↗2026-07-11azl3 perl-DBI 1.643-5 on Azure Linux 3.0ImportantOut-of-band—DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile

CVE-2026-14739 ↗2026-07-11azl3 perl-DBI 1.643-5 on Azure Linux 3.0ImportantOut-of-band0%DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders

CVE-2026-14461 ↗2026-07-11azl3 mtr 0.95-3 on Azure Linux 3.0ModerateOut-of-band—Out-of-bound read in mtr

CVE-2026-59998 ↗2026-07-11azl3 openssh 9.8p1-8 on Azure Linux 3.0ModerateOut-of-band—sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

CVE-2026-20244 ↗2026-07-11azl3 clamav 1.5.2-3 on Azure Linux 3.0ImportantOut-of-band—ClamAV DMG File Processing Denial of Service Vulnerability

CVE-2026-20243 ↗2026-07-11azl3 clamav 1.5.2-3 on Azure Linux 3.0ImportantOut-of-band—ClamAV ALZ Archive Processing Denial of Service Vulnerability

CVE-2026-20217 ↗2026-07-11azl3 clamav 1.5.2-3 on Azure Linux 3.0ImportantOut-of-band—ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability

CVE-2026-20216 ↗2026-07-11azl3 clamav 1.5.2-3 on Azure Linux 3.0ImportantOut-of-band—ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability

CVE-2026-20215 ↗2026-07-11azl3 clamav 1.5.2-3 on Azure Linux 3.0ImportantOut-of-band—ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability

CVE-2026-20214 ↗2026-07-11azl3 clamav 1.5.2-3 on Azure Linux 3.0ImportantOut-of-band—ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability

CVE-2026-20213 ↗2026-07-11azl3 clamav 1.5.2-3 on Azure Linux 3.0ImportantOut-of-band—ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability

CVE-2026-59856 ↗2026-07-11azl3 vim 9.2.0735-1 on Azure Linux 3.0ImportantOut-of-band—Vim: Arbitrary Code Execution via PHP Omni-Completion

CVE-2026-56288 ↗2026-07-10azl3 kpatch 0.9.8-3 on Azure Linux 3.0ModerateOut-of-band—NULL Pointer Dereference in GNU patch

CVE-2026-56289 ↗2026-07-10azl3 kpatch 0.9.8-3 on Azure Linux 3.0ModerateOut-of-band—Loop with Unreachable Exit Condition in GNU patch

CVE-2026-59818 ↗2026-07-10azl3 etcd 3.5.30-2 on Azure Linux 3.0ModerateOut-of-band—etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation

CVE-2026-54908 ↗2026-07-09azl3 telegraf 1.31.0-23 on Azure Linux 3.0ModerateOut-of-band—Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

CVE-2026-38969 ↗2026-07-09azl3 ruby 3.3.5-8 on Azure Linux 3.0ModerateOut-of-band—ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggling.

CVE-2026-38968 ↗2026-07-09azl3 ntopng 5.2.1-6 on Azure Linux 3.0CriticalOut-of-band—ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.

CVE-2026-14191 ↗2026-07-09azl3 clamav 1.5.2-3 on Azure Linux 3.0ImportantOut-of-band—WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader

CVE-2026-56000 ↗2026-07-09azl3 wayland 1.22.0-1 on Azure Linux 3.0CriticalOut-of-band0%xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

CVE-2026-55999 ↗2026-07-09azl3 wayland 1.22.0-1 on Azure Linux 3.0ImportantOut-of-band0%xorg-server / xwayland glamor font atlas Heap Buffer Overflow

CVE-2026-56002 ↗2026-07-09azl3 libXfont2 2.0.6-1 on Azure Linux 3.0ImportantOut-of-band0%libXfont2 PCF Font Parsing Heap Buffer Overflow

CVE-2026-56003 ↗2026-07-09azl3 libXfont2 2.0.6-1 on Azure Linux 3.0ImportantOut-of-band0%libXfont2 computeProps Property Buffer Heap Buffer Overflow

CVE-2026-56001 ↗2026-07-09azl3 libXfont2 2.0.6-1 on Azure Linux 3.0ImportantOut-of-band0%libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

CVE-2026-60002 ↗2026-07-09azl3 openssh 9.8p1-8 on Azure Linux 3.0ImportantOut-of-band0%ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVE-2026-59999 ↗2026-07-09azl3 openssh 9.8p1-8 on Azure Linux 3.0ModerateOut-of-band—In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

CVE-2026-60000 ↗2026-07-09azl3 openssh 9.8p1-8 on Azure Linux 3.0LowOut-of-band—sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.

CVE-2026-60001 ↗2026-07-09azl3 openssh 9.8p1-8 on Azure Linux 3.0ModerateOut-of-band—sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

CVE-2026-59995 ↗2026-07-09azl3 openssh 9.8p1-8 on Azure Linux 3.0ModerateOut-of-band—sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

CVE-2026-59996 ↗2026-07-09azl3 openssh 9.8p1-8 on Azure Linux 3.0ModerateOut-of-band—scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

CVE-2026-59997 ↗2026-07-09azl3 openssh 9.8p1-8 on Azure Linux 3.0ModerateOut-of-band—internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory

Red HatCVE-2026-11525CVSS 3.7Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-12151CVSS 7.5Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-48801CVSS 7.5Red Hat Hardened Imagesrust-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-5078CVSS 5.3Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-53550CVSS 5.3Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Hardened Imagesrust-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-6733CVSS 3.7Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-6734CVSS 7.5Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-9678CVSS 5.9Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-9679CVSS 5.9Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-9697CVSS 7.4Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2025-4330CVSS 7.3Red Hat Hardened Imagespython3-12-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-12151CVSS 7.5Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-15308trackedCVSS 7.5Red Hat Hardened Imagespython3-14-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-15308trackedCVSS 7.5Red Hat Hardened Imagespython3-13-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-15308trackedCVSS 7.5Red Hat Hardened Imagespython3-12-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-15308trackedCVSS 7.5Red Hat Hardened Imagespython3-11-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-39243CVSS 6.1Red Hat Hardened Imagesdotnet8-0-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-39245CVSS 6.2Red Hat Hardened Imagesdotnet8-0-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-53550CVSS 5.3Red Hat Hardened Imagesnodejs25-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59083trackedCVSS 3.7Red Hat Hardened Imagestomcat10-main@noarchPatch ↗Advisory ↗

Red HatCVE-2026-59084trackedCVSS 3.8Red Hat Hardened Imagestomcat10-main@noarchPatch ↗Advisory ↗

Red HatCVE-2026-59725trackedCVSS 7.5Red Hat Hardened Imagesdotnet8-0-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Hardened Imagesnodejs25-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Hardened Imagesdotnet8-0-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59890CVSS 6.1Red Hat Hardened Imagespython-setuptools-main@noarchPatch ↗Advisory ↗

Red HatCVE-2026-6733CVSS 3.7Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-9679CVSS 5.9Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2024-25621CVSS 7.7Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2024-40635CVSS 4.6Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2024-45310CVSS 3.6Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2025-13465CVSS 8.2Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:16c6bd2a7614a02ea8d728d26ddead6ad9c1405a9581005f9d0dbcf81f0f996b_amd64Patch ↗Advisory ↗

Red HatCVE-2025-15284CVSS 7.5Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:16c6bd2a7614a02ea8d728d26ddead6ad9c1405a9581005f9d0dbcf81f0f996b_amd64Patch ↗Advisory ↗

Red HatCVE-2025-21613CVSS 8.1Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2025-21614CVSS 7.5Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2025-22870CVSS 4.4Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2025-40909CVSS 5.9Red Hat Enterprise Linux AppStream AUS (v.8.6)perl-4:5.32.1-471.module+el8.6.0+24484+7827d5b5.1.src::perl:5.32Patch ↗Advisory ↗

Red HatCVE-2025-47911CVSS 5.3Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2025-52881CVSS 8.2Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2025-54410CVSS 3.3Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2025-58058CVSS 5.3Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2025-61726CVSS 7.5Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:52867117af093329b0714bb63104d723ac8a00ffdb4a24393292dadd07a17a92_amd64Patch ↗Advisory ↗

Red HatCVE-2025-64329CVSS 6.5Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2025-66506CVSS 7.5Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2025-69223CVSS 7.5Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-ta-lmes-job-rhel9@sha256:4e5be5292b6f2f0a21ea8d1c0056a8362ba4f56b3dc70d192309169706d0023a_s390xPatch ↗Advisory ↗

Red HatCVE-2025-71319CVSS 7.5Red Hat Trusted Artifact Signer 1.4registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64Patch ↗Advisory ↗

Red HatCVE-2025-8766CVSS 6.4Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2026-1462CVSS 7.8Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:1b88511ef80ea5522de6519dc44c0204ae832b5faf0e331af170247bd7d7d288_arm64Patch ↗Advisory ↗

Red HatCVE-2026-22029CVSS 8.0Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:16c6bd2a7614a02ea8d728d26ddead6ad9c1405a9581005f9d0dbcf81f0f996b_amd64Patch ↗Advisory ↗

Red HatCVE-2026-22772CVSS 5.8Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2026-23490CVSS 7.5Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:3e9425a273d938180db8c2d12c3d6b02f3bacf05cb34549992c9e611922a232d_arm64Patch ↗Advisory ↗

Red HatCVE-2026-23831CVSS 5.3Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2026-24117CVSS 5.3Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2026-24400CVSS 6.1Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16—Patch ↗Advisory ↗

Red HatCVE-2026-25679CVSS 7.5Red Hat OpenShift Container Platform 4.17containernetworking-plugins-1:1.4.0-9.rhaos4.17.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-25680CVSS 6.5Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2026-25681CVSS 8.1Red Hat Enterprise Linux AppStream (v. 10)podman-7:5.8.2-4.el10_2.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-25681CVSS 8.1Red Hat Enterprise Linux AppStream (v. 9)podman-6:5.8.2-4.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-25681CVSS 8.1Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2026-25934CVSS 4.3Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2026-2614CVSS 7.5Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:2300bbd398742940737a7ac3bc337a81c3300ee3a362e246acf94ea543e5186a_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27136CVSS 8.1Red Hat Enterprise Linux AppStream (v. 10)podman-7:5.8.2-4.el10_2.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-27136CVSS 8.1Red Hat Enterprise Linux AppStream (v. 9)podman-6:5.8.2-4.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-27136CVSS 8.1Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2026-27140CVSS 9.0Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:0c3fa899ccfc2afcf1fe3dafe5accca04007c6f2a0a890907453bd12ba2fe265_s390xPatch ↗Advisory ↗

Red HatCVE-2026-27141CVSS 5.3Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2026-27143CVSS 8.1Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:1842cea1adc06eb90eaa2812ae160901bd1a4354d3da8a1c608ab9dc3ba333df_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27144CVSS 8.1Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:1842cea1adc06eb90eaa2812ae160901bd1a4354d3da8a1c608ab9dc3ba333df_amd64Patch ↗Advisory ↗

Red HatCVE-2026-27145CVSS 7.5Red Hat Trusted Artifact Signer 1.4conforma-cli-stack-v1-4@amd64Patch ↗Advisory ↗

Red HatCVE-2026-27893CVSS 8.8Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:a5dc659cd3af310c063f2734ddfba749b58a2a1366c983b2fbd677ed8cd97100_s390xPatch ↗Advisory ↗

Red HatCVE-2026-27903CVSS 5.9Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2026-28356CVSS 7.5Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:a5dc659cd3af310c063f2734ddfba749b58a2a1366c983b2fbd677ed8cd97100_s390xPatch ↗Advisory ↗

Red HatCVE-2026-28684CVSS 7.1Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:7b5d9229b556e775c92ea99f5e1741c9231c00830063a3193cf18e0dabf2daa6_s390xPatch ↗Advisory ↗

Red HatCVE-2026-29063CVSS 8.8Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-console@sha256:cbadb8ad4ea98db734bf9196792de05ae41e4ea1bcbc9345d9e29e339d8ea127_amd64Patch ↗Advisory ↗

Red HatCVE-2026-29063CVSS 8.8Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-console-rhel9@sha256:39cf4a0eb7182fe53aacfbd3e8ca3e6ab04326ab693aed106637a4c5cbe438fc_amd64Patch ↗Advisory ↗

Red HatCVE-2026-29063CVSS 8.8Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:16c6bd2a7614a02ea8d728d26ddead6ad9c1405a9581005f9d0dbcf81f0f996b_amd64Patch ↗Advisory ↗

Red HatCVE-2026-29146CVSS 7.5Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.87-2.el8_8.noarchPatch ↗Advisory ↗

Red HatCVE-2026-29146CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.87-2.el8_10.noarchPatch ↗Advisory ↗

Red HatCVE-2026-30922CVSS 7.5Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64Patch ↗Advisory ↗

Red HatCVE-2026-31958CVSS 5.3Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:3e9425a273d938180db8c2d12c3d6b02f3bacf05cb34549992c9e611922a232d_arm64Patch ↗Advisory ↗

Red HatCVE-2026-32280CVSS 7.5Red Hat OpenShift Container Platform 4.17containernetworking-plugins-1:1.4.0-9.rhaos4.17.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-32597CVSS 7.5Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:7b5d9229b556e775c92ea99f5e1741c9231c00830063a3193cf18e0dabf2daa6_s390xPatch ↗Advisory ↗

Red HatCVE-2026-32640CVSS 7.5Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-trustyai-nemo-guardrails-server-rhel9@sha256:1bd8ef0344f81b51c980bd013c566c25641da1b1005e2a72161389d4aef589e8_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.12registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:1e2a6a5f70bf563a0e8aaf0b0f7e290a8ff9f672b0de42837734487a8868ebd7_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.17ose-azure-acr-image-credential-provider-0:4.17.0-202606171749.p2.g5bcfbfd.assembly.stream.el8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:1842cea1adc06eb90eaa2812ae160901bd1a4354d3da8a1c608ab9dc3ba333df_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift Container Platform 4.17registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:16975a72332dcdb234effb7ae718eaa5d58586cfd6ae2ca9efc6f0a4e8b88572_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33186CVSS 9.1Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:16a1ace0003e1105c767d39218bc3029e5390f22a3af4c9cd9bb316e5d45d4db_ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-33231CVSS 7.5Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-trustyai-nemo-guardrails-server-rhel9@sha256:1bd8ef0344f81b51c980bd013c566c25641da1b1005e2a72161389d4aef589e8_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33236CVSS 8.1Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-trustyai-nemo-guardrails-server-rhel9@sha256:1bd8ef0344f81b51c980bd013c566c25641da1b1005e2a72161389d4aef589e8_amd64Patch ↗Advisory ↗

Red HatCVE-2026-33245CVSS 4.2Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:3a33448671868e7f6eb540a9adf1d0b544064f8494c6acdbaac2e6c9f49c4482_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33540CVSS 3.1Red Hat Openshift Data Foundation 4.22registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:022f660bb0be440e9d99abf8815ede618710a390d315ccc79e9812a1c0f9ae02_arm64Patch ↗Advisory ↗

Red HatCVE-2026-33699CVSS 6.5Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:3e9425a273d938180db8c2d12c3d6b02f3bacf05cb34549992c9e611922a232d_arm64Patch ↗Advisory ↗