Vulnerabilities
July 2026 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 3 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 3,198 vulnerabilities across 7,397 returned patch records from 3 vendors. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 25 of 37 · records 4,801 to 5,000 of 7,397
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-64452 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailable6lowpan: fix NHC entry use-after-free on error path
CVE-2026-64438 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablecrypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
CVE-2026-64443 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablestaging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
CVE-2026-64422 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablenet: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
CVE-2026-64434 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailableBluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
CVE-2026-64269 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailableRDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
CVE-2026-64387 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablesmb: client: fix query directory replay double-free
CVE-2026-64397 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailableksmbd: serialize QUERY_DIRECTORY requests per file
CVE-2026-64450 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailabletipc: fix out-of-bounds read in broadcast Gap ACK blocks
CVE-2026-64523 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablenet/handshake: Take a long-lived file reference at submit
CVE-2026-64444 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablestaging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
CVE-2026-64430 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailableNTB: epf: Avoid calling pci_irq_vector() from hardirq context
CVE-2026-64441 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablestaging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
CVE-2026-64529 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablecrypto: qat - remove unused character device and IOCTLs
CVE-2026-12617 ↗azl3 bind 9.20.23-1 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailableRecord ordering based unexpected exit with CNAME or DNAME
CVE-2026-11622 ↗azl3 bind 9.20.23-1 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailablePotential memory usage beyond configured limits
CVE-2026-11721 ↗azl3 bind 9.20.23-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailableCache poisoning possible with label count discrepancy, RRSIG, and wildcards
CVE-2026-11331 ↗azl3 bind 9.20.23-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablePotential wildcard CNAME RPZ policy bypass
CVE-2026-11605 ↗azl3 bind 9.20.23-1 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailableUnnecessary validation of DNSSEC signed records
CVE-2026-13204 ↗azl3 bind 9.20.23-1 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailableUnexpected exit in certain situations with NSEC and NSEC3 both present
CVE-2026-12080 ↗azl3 qemu 9.1.0-11 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailableQemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys
CVE-2026-32665 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailableRemote DNS-over-QUIC denial of service due to `quic-size` budget bypass
CVE-2026-40691 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablePacket of death for DNSCrypt over TCP
CVE-2026-44690 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailableCross-zone wildcard cache poisoning via RRSIG.labels manipulation
CVE-2026-55973 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailable'dns-error-reporting: yes' leads to stack buffer overflow
CVE-2026-64160 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablenetfs: Fix potential for tearing in ->remote_i_size and ->zero_point
CVE-2026-62828 ↗Microsoft Edge for AndroidModerateOut-of-band0%Microsoft rates: Exploitation Less LikelyMicrosoft Edge for Android (Chromium-based) Tampering Vulnerability
CVE-2026-13221 ↗azl3 perl 5.38.2-512 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablePerl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk
CVE-2026-55145 ↗Microsoft CopilotModerate1%Microsoft rates: N/AOutlook Copilot Tampering Vulnerability
CVE-2026-56181 ↗Windows Server 2025 (Server Core installation)Moderate0%Microsoft rates: Exploitation Less LikelyKB5099536KB5101649Windows Network Address Translation (NAT) Spoofing Vulnerability
and 1 more
KB5101650CVE-2026-56000 ↗azl3 xorg-x11-server-Xwayland 24.1.12-1 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablexorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()
CVE-2026-8925 ↗azl3 mysql 8.0.46-1 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailableSASL double-free
CVE-2026-8926 ↗azl3 curl 8.11.1-9 on Azure Linux 3.0ModerateOut-of-band0%Microsoft rating unavailablepassword leak with netrc and user in URL
CVE-2026-10536 ↗azl3 curl 8.11.1-9 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailableHTTP/2 stream-dependency tree UAF
CVE-2026-11856 ↗azl3 curl 8.11.1-9 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailablecross-origin Digest auth state leak
CVE-2026-8927 ↗azl3 cmake 3.30.3-14 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailableenv-set cross-proxy Digest auth state leak
CVE-2026-45488 ↗Microsoft Edge (Chromium-based)ModerateOut-of-band0%Microsoft rates: N/AMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-45489 ↗Microsoft Edge (Chromium-based)ModerateOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-55945 ↗Microsoft Edge (Chromium-based)ModerateOut-of-band0%Microsoft rating unavailableMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2026-54887 ↗azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableDTLS server cookie bypass during startup window due to empty initial cookie secret
CVE-2026-58470 ↗azl3 wget 2.1.0-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing
CVE-2026-58471 ↗azl3 wget 2.1.0-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c
CVE-2026-58472 ↗azl3 wget 2.1.0-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding
CVE-2026-64539 ↗azl3 kernel 6.6.145.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: eir: Fix stack OOB write when prepending the Flags AD
CVE-2026-64542 ↗azl3 kernel 6.6.145.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipv6: ndisc: fix NULL deref in accept_untracked_na()
CVE-2026-55970 ↗azl3 thrift 0.15.0-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()
CVE-2026-66053 ↗azl3 thrift 0.15.0-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache Thrift: Python TSSLSocket Hostname Matcher Import
CVE-2026-16729 ↗azl3 nodejs 24.18.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableundici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
CVE-2026-15157 ↗azl3 nodejs 24.18.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableundici vulnerable to CRLF Injection via blob-like body 'type' property
CVE-2026-44943 ↗azl3 iscsi-initiator-utils 2.1.9-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableremote limited file-write as root via discovery in open-iscsi
CVE-2026-58040 ↗azl3 nodejs 24.17.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableAn incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934).
This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.
CVE-2026-56850 ↗azl3 nodejs 24.17.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableA flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates.
This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.
CVE-2026-13346 ↗azl3 python-virtualenv 20.36.1-5 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepip absolute path traversal during download from malicious package indexes
CVE-2026-54332 ↗azl3 telegraf 1.31.0-28 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS
CVE-2026-65624 ↗azl3 rabbitmq-server 3.13.7-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableCowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion
CVE-2025-63913 ↗azl3 qemu 9.1.0-11 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableAn issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function #2 or the 'Find and configure a matching counter' function of SBI PMU extension.
CVE-2026-25800 ↗azl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablequinn-proto has remote memory exhaustion from unbounded out-of-order stream reassembly
CVE-2026-55737 ↗azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHeap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder
CVE-2026-42792 ↗azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableepmd permanent DoS via EMFILE on accept(2) in erts
CVE-2026-15003 ↗azl3 gdb 13.2-10 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBinutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service
CVE-2026-16554 ↗azl3 apparmor 3.1.7-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInteger Overflow Leading to Heap Buffer Overflow in cJSON
CVE-2026-7260 ↗azl3 php 8.3.31-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableStack overflow in phar with circular symlinks
CVE-2026-64557 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
CVE-2026-56390 ↗azl3 bison 3.8.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableArbitrary Output Location Change in GNU Bison
CVE-2026-56389 ↗azl3 bison 3.8.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableArbitrary Command Execution in GNU Bison
CVE-2026-63144 ↗azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUncontrolled Recursion in Elasticsearch Leading to Denial of Service
CVE-2026-66337 ↗azl3 libsoup 3.4.4-16 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()
CVE-2026-66339 ↗azl3 libsoup 3.4.4-16 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels
CVE-2026-66338 ↗azl3 libsoup 3.4.4-16 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()
CVE-2026-56391 ↗azl3 coreutils 9.4-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableOut‑of‑bounds Read in GNU coreutils
CVE-2026-58023 ↗azl3 thrift 0.15.0-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path
CVE-2026-64544 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
CVE-2026-64547 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: usb: net1080: validate packet_len before pad-byte access in rx_fixup
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-46331trackedCVSS 6.7Red Hat OpenShift Container Platform 4.13rhcos-x86_64-413.92.202607141229-0Patch ↗Advisory ↗
Red HatCVE-2026-48710trackedCVSS 6.5Red Hat Satellite 6.17registry.redhat.io/satellite/iop-advisor-engine-rhel9@sha256:4b6fce95a23d5cc33982fb8da817650d29785db4940dbcf321d4c4afca39911e_amd64Patch ↗Advisory ↗
Red HatCVE-2026-48710trackedCVSS 6.5Red Hat Migration Toolkit for Applications 8.2registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64Patch ↗Advisory ↗
Red HatCVE-2026-50659trackedCVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)aspnetcore-runtime-8.0-0:8.0.29-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50659trackedCVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)aspnetcore-runtime-8.0-0:8.0.29-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50659trackedCVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)aspnetcore-runtime-9.0-0:9.0.18-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50659trackedCVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)aspnetcore-runtime-9.0-0:9.0.18-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50659trackedCVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)aspnetcore-runtime-10.0-0:10.0.10-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50659trackedCVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)aspnetcore-runtime-10.0-0:10.0.10-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50659trackedCVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)aspnetcore-runtime-9.0-0:9.0.18-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50659trackedCVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)aspnetcore-runtime-10.0-0:10.0.10-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50659trackedCVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)aspnetcore-runtime-8.0-0:8.0.29-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-13221trackedCVSS 5.9Red Hat Hardened Imagesperl-0:5.42.2-524.3.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59884trackedCVSS 5.9Red Hat Hardened Imagesjaeger-0:2.19.0-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56000trackedCVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56000trackedCVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)xorg-x11-server-Xwayland-0:24.1.9-4.el9_8.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46331trackedCVSS 6.7Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202606251120-0Patch ↗Advisory ↗
Red HatCVE-2026-46331trackedCVSS 6.7Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202606250942-0Patch ↗Advisory ↗
Red HatCVE-2026-48710trackedCVSS 6.5Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-46331trackedCVSS 6.7Red Hat OpenShift Container Platform 4.15rhcos-aarch64-415.92.202606200237-0Patch ↗Advisory ↗
Red HatCVE-2026-11564trackedCVSS 6.5Red Hat Hardened Imagescargo-0:1.96.1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-11856trackedCVSS 6.5Red Hat Hardened Imagescargo-0:1.96.1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46331trackedCVSS 6.7Red Hat OpenShift Container Platform 4.19rhcos-aarch64-4.19.9.6.202606241344-0Patch ↗Advisory ↗
Red HatCVE-2026-8924trackedCVSS 6.5Red Hat Hardened Imagescargo-0:1.96.1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8926trackedCVSS 4.8Red Hat Hardened Imagescargo-0:1.96.1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46331trackedCVSS 6.7Red Hat OpenShift Container Platform 4.14rhcos-aarch64-414.92.202606231112-0Patch ↗Advisory ↗
Red HatCVE-2026-46331trackedCVSS 6.7Red Hat OpenShift Container Platform 4.16rhcos-aarch64-416.94.202606230218-0Patch ↗Advisory ↗
Red HatCVE-2026-46331trackedCVSS 6.7Red Hat OpenShift Container Platform 4.18rhcos-aarch64-418.94.202606221349-0Patch ↗Advisory ↗
Red HatCVE-2026-48710trackedCVSS 6.5Red Hat OpenShift AI 3.4registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:32afbf8b52e28bc73f7c8e2068e2d616ed2a777930076732894f9cc30f69bd8f_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-48710trackedCVSS 6.5Red Hat Satellite 6.19registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:0239eafa03209b4a08d699af3cd7d42e14af4b9143bb985f415aa277a3e50a10_amd64Patch ↗Advisory ↗
Red HatCVE-2026-48710trackedCVSS 6.5Red Hat Satellite 6.19registry.redhat.io/satellite/iop-host-inventory-rhel9@sha256:b75188c693e2e7309c250b0c3a6dc7be5f65f581886e24da980cde7ed5991ed8_amd64Patch ↗Advisory ↗
Red HatCVE-2026-49476trackedCVSS 5.9Red Hat Hardened Imagespython-rpds-py-0:2026.6.3-1.hum1@srcPatch ↗Advisory ↗
Red HatCVE-2025-40026CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.9.4)bpftool-debuginfo-0:7.3.0-427.141.1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40026CVSS 5.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)kernel-64k-debug-debuginfo-0:6.12.0-55.94.1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40026CVSS 5.5Red Hat Enterprise Linux AppStream EUS (v.9.6)kernel-64k-debug-debuginfo-0:5.14.0-570.131.1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-68211CVSS 5.5Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.42.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-14355CVSS 5.6Red Hat Enterprise Linux AppStream (v. 9)apcu-panel-0:5.1.23-1.module+el9.8.0+24343+756b4fcd.noarch::php:8.3Patch ↗Advisory ↗
Red HatCVE-2026-31790CVSS 5.9Red Hat OpenShift Container Platform 4.15rhcos-aarch64-415.92.202607210244-0Patch ↗Advisory ↗
Red HatCVE-2026-31790CVSS 5.9Red Hat OpenShift Container Platform 4.14rhcos-aarch64-414.92.202607210313-0Patch ↗Advisory ↗
Red HatCVE-2026-46113CVSS 5.8Red Hat Enterprise Linux BaseOS AUS (v.8.6)bpftool-0:4.18.0-372.204.1.el8_6.x86_64Patch ↗Advisory ↗
Red HatCVE-2026-46303CVSS 5.5Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.42.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-5450CVSS 5.0Red Hat OpenShift Container Platform 4.15rhcos-aarch64-415.92.202607210244-0Patch ↗Advisory ↗
Red HatCVE-2026-5450CVSS 5.0Red Hat OpenShift Container Platform 4.14rhcos-aarch64-414.92.202607210313-0Patch ↗Advisory ↗
Red HatCVE-2026-57455CVSS 4.7Red Hat Enterprise Linux AppStream (v. 10)vim-X11-2:9.1.083-9.el10_2.12.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-57455CVSS 4.7Red Hat Enterprise Linux AppStream (v. 8)vim-X11-2:8.0.1763-31.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59856CVSS 5.3Red Hat Enterprise Linux AppStream (v. 10)vim-common-2:9.1.083-9.el10_2.12.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59858CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)vim-common-2:9.1.083-9.el10_2.12.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59858CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)vim-common-2:8.0.1763-31.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-9149CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)libsolv-debuginfo-0:0.7.29-8.el10_0.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-9150CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)libsolv-debuginfo-0:0.7.29-8.el10_0.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-14355CVSS 5.6Red Hat Enterprise Linux AppStream (v. 8)apcu-panel-0:5.1.23-1.module+el8.10.0+20770+a5eca186.noarch::php:8.2Patch ↗Advisory ↗
Red HatCVE-2026-14355CVSS 5.6Red Hat Enterprise Linux AppStream (v. 8)apcu-panel-0:5.1.18-1.module+el8.10.0+22485+a3539972.noarch::php:7.4Patch ↗Advisory ↗
Red HatCVE-2026-35469CVSS 6.5Red Hat OpenShift Container Platform 4.15registry.redhat.io/openshift4/ose-openshift-apiserver-rhel9@sha256:04c569f5f7e6c6dfd7691281802ee8cf6301b12b7b6a6c3daf629cfce99889cb_arm64Patch ↗Advisory ↗
Red HatCVE-2026-35469CVSS 6.5Red Hat OpenShift Container Platform 4.14registry.redhat.io/openshift4/ose-openshift-apiserver-rhel8@sha256:5ad443a50f1d4735ee9f42cab703b6233fa7b163a5c264e05893503b07d74512_arm64Patch ↗Advisory ↗
Red HatCVE-2026-39833CVSS 5.5Red Hat Trusted Artifact Signer 1.4conforma-cli-stack-v1-4-1.4.3@amd64Patch ↗Advisory ↗
Red HatCVE-2026-41889CVSS 5.9Red Hat Advanced Cluster Security 4.9registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64Patch ↗Advisory ↗
Red HatCVE-2026-41889CVSS 5.9Red Hat Advanced Cluster Security for Kubernetes 4.10registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64Patch ↗Advisory ↗
Red HatCVE-2026-43279CVSS 5.8Red Hat Enterprise Linux BaseOS AUS (v.8.4)bpftool-0:4.18.0-305.199.1.el8_4.x86_64Patch ↗Advisory ↗
Red HatCVE-2026-49478CVSS 6.5Red Hat Advanced Cluster Security 4.9registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64Patch ↗Advisory ↗
Red HatCVE-2026-49478CVSS 6.5Red Hat Advanced Cluster Security for Kubernetes 4.10registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64Patch ↗Advisory ↗
Red HatCVE-2026-50163CVSS 5.9Red Hat Advanced Cluster Security 4.9registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64Patch ↗Advisory ↗
Red HatCVE-2026-50163CVSS 5.9Red Hat Advanced Cluster Security for Kubernetes 4.10registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64Patch ↗Advisory ↗
Red HatCVE-2026-55653CVSS 4.3Red Hat Enterprise Linux AppStream (v. 8)openssh-askpass-0:8.0p1-30.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55653CVSS 4.3Red Hat Enterprise Linux AppStream (v. 10)openssh-askpass-0:9.9p1-25.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55655CVSS 5.0Red Hat Enterprise Linux AppStream (v. 8)openssh-askpass-0:8.0p1-30.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55655CVSS 5.0Red Hat Enterprise Linux AppStream (v. 10)openssh-askpass-0:9.9p1-25.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59996CVSS 4.6Red Hat Enterprise Linux AppStream (v. 10)openssh-askpass-0:9.9p1-25.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-62995CVSS 4.3Red Hat Hardened Imagesjaeger-0:2.20.0-0.8.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40026CVSS 5.5Red Hat Enterprise Linux BaseOS E4S (v.8.8)bpftool-0:4.18.0-477.156.1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-14355CVSS 5.6Red Hat Enterprise Linux AppStream (v. 10)php-0:8.3.32-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-31790CVSS 5.9Red Hat OpenShift Container Platform 4.19rhcos-aarch64-4.19.9.6.202607220857-0Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.4)go-toolset-0:1.25.9-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.4)grafana-0:9.2.10-27.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.4)grafana-pcp-0:5.1.1-8.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.2)go-toolset-0:1.25.9-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.2)grafana-pcp-0:5.1.1-5.el9_2.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.2)grafana-0:9.0.9-12.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.4)osbuild-composer-0:101.3-4.el9_4.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Logging Subsystem for Red Hat OpenShift 6.2registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390xPatch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.2)osbuild-composer-0:76.1-6.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32591CVSS 5.2Red Hat Quay 3.18registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390xPatch ↗Advisory ↗
Red HatCVE-2026-33245CVSS 4.2Red Hat OpenShift Dev Spaces 3.29registry.redhat.io/devspaces/dashboard-rhel9@sha256:35e473eed97efe209e4b0f064e9b4d7441b0391f3d66634b1267d1f942a53bae_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-42342CVSS 6.5Red Hat OpenShift Dev Spaces 3.29registry.redhat.io/devspaces/dashboard-rhel9@sha256:35e473eed97efe209e4b0f064e9b4d7441b0391f3d66634b1267d1f942a53bae_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-45149CVSS 6.5Red Hat OpenShift Dev Spaces 3.29registry.redhat.io/devspaces/code-rhel9@sha256:5daf10b66f5fbfb11269df3bce4857506e29ed397919aa24e7fb3f248a98e3cd_ppc64lePatch ↗Advisory ↗
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.