Vulnerabilities
July 2026 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 3 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 3,199 vulnerabilities across 7,398 returned patch records from 3 vendors. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 26 of 37 · records 5,001 to 5,200 of 7,398
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2024-14040 ↗azl3 kernel 6.6.145.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: nexthop: Increase weight to u16
CVE-2026-64297 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemodule: decompress: check return value of module_extend_max_pages()
CVE-2026-64486 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: cmipci: check snd_ctl_new1() return value
CVE-2026-64331 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusbip: vudc: fix NULL deref in vep_dequeue()
CVE-2026-64493 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiio: pressure: mpl115: fix runtime PM leak on read error
CVE-2026-64276 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInput: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
CVE-2026-64352 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebpf: Allow LPM map access from sleepable BPF programs
CVE-2026-64465 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: xhci: Fix sleep in atomic context in xhci_free_streams()
CVE-2026-64458 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/damon/ops-common: handle extreme intervals in damon_hot_score()
CVE-2026-64511 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableACPI: NFIT: core: Fix possible NULL pointer dereference
CVE-2026-64275 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInput: elan_i2c - prevent division by zero and arithmetic underflow
CVE-2026-64364 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: multitouch: fix out-of-bounds bit access on mt_io_flags
CVE-2026-64287 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
CVE-2026-64332 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUSB: ulpi: fix memory leak on registration failure
CVE-2026-64370 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableposix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
CVE-2026-64363 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: appleir: fix UAF on pending key_up_timer in remove()
CVE-2026-64373 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecpufreq: Fix hotplug-suspend race during reboot
CVE-2026-64371 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableproc: protect ptrace_may_access() with exec_update_lock (part 1)
CVE-2026-64406 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: fix UAF in bt_accept_dequeue()
CVE-2026-64487 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
CVE-2026-64390 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableksmbd: track the connection owning a byte-range lock
CVE-2026-64412 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: ebtables: module names must be null-terminated
CVE-2026-64345 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: gadget: f_printer: take kref only for successful open
CVE-2026-64409 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
CVE-2026-64306 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: drbg - Fix returning success on failure in CTR_DRBG
CVE-2026-64279 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablei2c: core: fix adapter deregistration race
CVE-2026-64338 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUSB: misc: uss720: unregister parport on probe failure
CVE-2026-64507 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablex86/bugs: Enable IBPB flush on BPF JIT allocation
CVE-2026-64525 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit
CVE-2026-64374 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
CVE-2026-64348 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: free iso schedules on failed submit
CVE-2026-64425 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableio_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
CVE-2026-64408 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: bnep: pin L2CAP connection during netdev registration
CVE-2026-64360 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablehfs/hfsplus: zero-initialize buffer in hfs_bnode_read
CVE-2026-64462 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCI: altera: Fix resource leaks on probe failure
CVE-2026-64277 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInput: synaptics-rmi4 - bound the F3A keymap to the GPIO count
CVE-2026-64489 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: ymfpci: check snd_ctl_new1() return value
CVE-2026-64400 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableksmbd: prevent path traversal bypass by restricting caseless retry
CVE-2026-64368 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/slab: do not limit zeroing to orig_size when only red zoning is enabled
CVE-2026-64474 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablevfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
CVE-2026-64326 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableblock: skip sync_blockdev() on surprise removal in bdev_mark_dead()
CVE-2026-64424 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetpoll: fix a use-after-free on shutdown path
CVE-2026-64388 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmb/client: fix chown/chgrp with SMB3 POSIX Extensions
CVE-2026-64346 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: gadget: udc: Fix use-after-free in gadget_match_driver
CVE-2026-64482 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: gus: check snd_ctl_new1() return value
CVE-2026-64324 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableudf: validate free block extents against the partition length
CVE-2026-64350 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
CVE-2026-64381 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmb: client: Fix next buffer leak in receive_encrypted_standard()
CVE-2026-64398 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableksmbd: add a permission check for FSCTL_SET_ZERO_DATA
CVE-2026-64478 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: usb-audio: avoid kobject path lookup in DualSense match
CVE-2026-64500 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiio: adc: lpc32xx: Initialize completion before requesting IRQ
CVE-2026-64317 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableisofs: bound Rock Ridge symlink components to the SL record
CVE-2026-64484 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: es1938: check snd_ctl_new1() return value
CVE-2026-64299 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletracing: Prevent out-of-bounds read in glob matching
CVE-2026-64323 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableudf: validate VAT header length against the VAT inode size
CVE-2026-64318 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepartitions: aix: bound the pp_count scan to the ppe array
CVE-2026-64271 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInput: touchwin - reset the packet index on every complete packet
CVE-2026-64488 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: aoa: check snd_ctl_new1() return value
CVE-2026-64272 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInput: mms114 - fix touch indexing for MMS134S and MMS136
CVE-2026-64351 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
CVE-2026-64429 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegpio: eic-sprd: use raw_spinlock_t in the irq startup path
CVE-2026-64250 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLoongArch: Report dying CPU to RCU in stop_this_cpu()
CVE-2026-64241 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegpio: rockchip: teardown bugs and resource leaks
CVE-2026-64248 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableMIPS: smp: report dying CPU to RCU in stop_this_cpu()
CVE-2026-64433 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
CVE-2026-64247 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: x86: hyper-v: Bound the bank index when querying sparse banks
CVE-2026-64396 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
CVE-2026-64244 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrivers/base/memory: set mem->altmap after successful device registration
CVE-2026-64480 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: ice1712: check snd_ctl_new1() return value
CVE-2026-64378 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
CVE-2026-64237 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInput: elan_i2c - validate firmware size before use
CVE-2026-16768 ↗azl3 gdk-pixbuf2 2.42.10-5 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGdk-pixbuf: out-of-bounds read in ico parser
CVE-2026-47143 ↗azl3 rust 1.90.0-9 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableCapstone has a NULL Pointer Dereference with 3DNow! opcodes
CVE-2026-16461 ↗azl3 rpcbind 1.2.6-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting
CVE-2026-16615 ↗azl3 rest 0.9.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibrest: weak random number generation in pkce implementation
CVE-2026-46917 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1
CVE-2026-47063 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients ru
CVE-2026-60147 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web
CVE-2026-6390 ↗azl3 nano 6.4-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.
CVE-2026-59850 ↗azl3 libssh 0.10.6-9 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: use-after-free via data callbacks on closed channels
CVE-2026-59844 ↗azl3 libssh 0.10.6-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: denial of service via oversized sftp read length
CVE-2026-59845 ↗azl3 libssh 0.10.6-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: denial of service via unchecked proxycommand fork() failure
CVE-2026-59847 ↗azl3 libssh 0.10.6-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: integrity downgrade via openssl aes-gcm tag verification
CVE-2026-59843 ↗azl3 libssh 0.10.6-9 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: denial of service via zero advertised channel packet size
CVE-2026-59848 ↗azl3 libssh 0.10.6-9 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: denial of service via sftp responses with unknown request ids
CVE-2026-46600 ↗azl3 golang 1.25.11-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableParsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage
CVE-2026-10723 ↗azl3 bind 9.20.23-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIncorrect acceptance of NSEC3 records
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-45149CVSS 6.5Red Hat OpenShift Dev Spaces 3.29registry.redhat.io/devspaces/code-rhel9@sha256:5daf10b66f5fbfb11269df3bce4857506e29ed397919aa24e7fb3f248a98e3cd_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-46599CVSS 6.5Cryostat 4 on RHEL 9cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64Patch ↗Advisory ↗
Red HatCVE-2026-50151CVSS 5.9Red Hat Advanced Cluster Management for Kubernetes 2.13registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64Patch ↗Advisory ↗
Red HatCVE-2026-52718CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)gstreamer1-plugins-bad-free-0:1.24.11-3.el10_0.4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55653CVSS 4.3Red Hat Enterprise Linux AppStream (v. 9)openssh-askpass-0:9.9p1-9.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55655CVSS 5.0Red Hat Enterprise Linux AppStream (v. 9)openssh-askpass-0:9.9p1-9.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56392CVSS 4.4Red Hat Enterprise Linux BaseOS (v. 8)coreutils-0:8.30-20.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-57455CVSS 4.7Red Hat Enterprise Linux AppStream (v. 9)vim-X11-2:8.2.2637-26.el9_8.13.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59856CVSS 5.3Red Hat Enterprise Linux AppStream (v. 9)vim-common-2:8.2.2637-26.el9_8.13.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59858CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)vim-common-2:8.2.2637-26.el9_8.13.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59996CVSS 4.6Red Hat Enterprise Linux AppStream (v. 9)openssh-askpass-0:9.9p1-9.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6860CVSS 5.3Cryostat 4 on RHEL 9cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64Patch ↗Advisory ↗
Red HatCVE-2024-42516CVSS 6.8Red Hat Enterprise Linux AppStream EUS (v. 10.0)httpd-0:2.4.63-1.el10_0.4.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-39797CVSS 5.3Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.31.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15003CVSS 5.6Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16358CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16358CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16371CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16371CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16374CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16374CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16375CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16375CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16377CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16377CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16379CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16379CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16381CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16381CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16383CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16383CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16387CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16387CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16390CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16390CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16391CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16391CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16396CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)firefox-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16396CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)firefox-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16615CVSS 6.8Red Hat Enterprise Linux AppStream (v. 10)rest-0:0.9.1-11.el10_2.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23002CVSS 4.7Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.31.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33007CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)httpd-0:2.4.63-1.el10_0.4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33748CVSS 6.5multicluster engine for Kubernetes 2.10registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64Patch ↗Advisory ↗
Red HatCVE-2026-35469CVSS 6.5Red Hat OpenShift Container Platform 4.22registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:3d1db053cfa866f8504454e9604c6331fc61971c19455a63769de3b037aa25aa_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-35469CVSS 6.5Red Hat OpenShift Container Platform 4.21registry.redhat.io/openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:79ee908aead1b620c0592ca974cf08373fcda210530ffc0ef39432614c01343e_amd64Patch ↗Advisory ↗
Red HatCVE-2026-44431CVSS 5.9Red Hat Enterprise Linux High Availability AUS (v.8.4)resource-agents-0:4.1.1-90.el8_4.26.srcPatch ↗Advisory ↗
Red HatCVE-2026-44431CVSS 5.9Red Hat Enterprise Linux High Availability EUS EXTENSION (v.8.6)resource-agents-0:4.9.0-16.el8_6.23.srcPatch ↗Advisory ↗
Red HatCVE-2026-46086CVSS 5.5Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.40.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-52718CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.2)gstreamer1-plugins-bad-free-0:1.18.4-9.el9_2.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-52718CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v.9.6)gstreamer1-plugins-bad-free-0:1.22.12-5.el9_6.4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-52718CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.4)gstreamer1-plugins-bad-free-0:1.22.1-6.el9_4.4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-53059CVSS 6.3Red Hat Enterprise Linux BaseOS AUS (v.8.4)bpftool-0:4.18.0-305.200.1.el8_4.x86_64Patch ↗Advisory ↗
Red HatCVE-2026-53281CVSS 5.5Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.40.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-53281CVSS 5.5Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.31.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90801CVSS 5.3Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90802CVSS 5.0Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90803CVSS 6.6Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90804CVSS 4.8Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90828CVSS 5.3Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90829CVSS 6.6Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90830CVSS 5.5Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90831CVSS 6.6Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2025-5278CVSS 4.4Red Hat Discovery 2registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64Patch ↗Advisory ↗
Red HatCVE-2026-15788CVSS 6.3Red Hat Hardened Imagestrivy-0:0.72.0-0.1.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15792CVSS 6.5Red Hat Hardened Imagestrivy-0:0.72.0-0.1.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AI 3.3registry.redhat.io/rhelai3/disk-image-cuda-rhel9@sha256:6d71c4c0d5afba08b44378c833d6d330191383c62f70f428e8984a033c714988_amd64Patch ↗Advisory ↗
Red HatCVE-2026-33748CVSS 6.5multicluster engine for Kubernetes 2.10registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64Patch ↗Advisory ↗
Red HatCVE-2026-43279CVSS 5.8Red Hat Enterprise Linux for Real Time (v. 7 ELS)kernel-rt-0:3.10.0-1160.157.1.rt56.1309.el7.srcPatch ↗Advisory ↗
Red HatCVE-2026-46917CVSS 5.3Red Hat Hardened Imagesjava-25-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46968CVSS 5.9Red Hat Hardened Imagesjava-25-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47021CVSS 5.3Red Hat Hardened Imagesjava-25-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47027CVSS 5.3Red Hat Hardened Imagesjava-25-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.9.2)tigervnc-0:1.12.0-14.el9_2.15.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux AppStream AUS (v.8.4)tigervnc-0:1.11.0-8.el8_4.16.srcPatch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.8.8)tigervnc-0:1.12.0-15.el8_8.18.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux AppStream EUS (v.9.6)tigervnc-0:1.14.1-11.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.9.4)tigervnc-0:1.13.1-8.el9_4.10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux AppStream AUS (v.8.6)tigervnc-0:1.12.0-6.el8_6.18.srcPatch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux Server (v. 7 ELS)tigervnc-0:1.8.0-36.el7_9.5.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.9.2)tigervnc-0:1.12.0-14.el9_2.15.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux AppStream AUS (v.8.4)tigervnc-0:1.11.0-8.el8_4.16.srcPatch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.8.8)tigervnc-0:1.12.0-15.el8_8.18.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux AppStream EUS (v.9.6)tigervnc-0:1.14.1-11.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.9.4)tigervnc-0:1.13.1-8.el9_4.10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux AppStream AUS (v.8.6)tigervnc-0:1.12.0-6.el8_6.18.srcPatch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux Server (v. 7 ELS)tigervnc-0:1.8.0-36.el7_9.5.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-5435CVSS 5.9Red Hat Discovery 2registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64Patch ↗Advisory ↗
Red HatCVE-2026-54370CVSS 6.3Red Hat Discovery 2registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64Patch ↗Advisory ↗
Red HatCVE-2026-5450CVSS 5.0Red Hat Discovery 2registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64Patch ↗Advisory ↗
Red HatCVE-2026-5928CVSS 5.0Red Hat Discovery 2registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64Patch ↗Advisory ↗
Red HatCVE-2026-60147CVSS 6.5Red Hat Hardened Imagesjava-25-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6238CVSS 6.5Red Hat Discovery 2registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64Patch ↗Advisory ↗
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.