CYBERSECURITYTRACKER
TRACKING7,183 stories in this site build1,510 vulnerability news stories in this site build
Vulnerabilities

July 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 3 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 3,179 vulnerabilities across 7,361 returned patch records from 3 vendors. Filter the complete month, or browse the static page trail without JavaScript.

7,361all patch recordsClear filters210criticalShow these records3Microsoft exploitation detectedShow these records6Microsoft in the Known Exploited Vulnerabilities catalogShow these records2,256tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Red Hat 5,188Microsoft 2,157Cisco 16

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 7 of 37 · records 1,201 to 1,400 of 7,361

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-58536 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation More LikelyKB5099536KB5099538
and 4 moreKB5099539KB5099540KB5101649KB5101650
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-58537 ↗Windows Server 2025 (Server Core installation)Important0%Microsoft rates: Exploitation Less LikelyKB5099536KB5101649
and 1 moreKB5101650
Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability
CVE-2026-58538 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5099536KB5099538
and 4 moreKB5099539KB5099540KB5101649KB5101650
Windows Bluetooth Service Elevation of Privilege Vulnerability
CVE-2026-58539 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5099444KB5099445
and 7 moreKB5099535KB5099536KB5099538KB5099539KB5099540KB5101649KB5101650
Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-58540 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5099444KB5099445
and 7 moreKB5099535KB5099536KB5099538KB5099539KB5099540KB5101649KB5101650
Windows Installer Elevation of Privilege Vulnerability
CVE-2026-58541 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5099535KB5099536
and 5 moreKB5099538KB5099539KB5099540KB5101649KB5101650
Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-58543 ↗Windows Server 2025 (Server Core installation)Important0%Microsoft rates: Exploitation Less LikelyKB5099536KB5101649
and 1 moreKB5101650
Universal Print Management Service Elevation of Privilege Vulnerability
CVE-2026-58544 ↗Windows Server 2025 (Server Core installation)Important0%Microsoft rates: Exploitation Less LikelyKB5099536KB5101649
and 1 moreKB5101650
Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-58545 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5099444KB5099445
and 7 moreKB5099535KB5099536KB5099538KB5099539KB5099540KB5101649KB5101650
Windows Kernel Security Feature Bypass Vulnerability
CVE-2026-58546 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5099444KB5099445
and 7 moreKB5099535KB5099536KB5099538KB5099539KB5099540KB5101649KB5101650
Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-58547 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5099536KB5099538
and 4 moreKB5099539KB5099540KB5101649KB5101650
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
CVE-2026-58594 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5099444KB5099445
and 7 moreKB5099535KB5099536KB5099538KB5099539KB5099540KB5101649KB5101650
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-58595 ↗Microsoft Bing Search for iOSImportant1%Microsoft rates: Exploitation Less LikelyMicrosoft Bing App for IOS Spoofing Vulnerability
CVE-2026-58601 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5099414KB5099535
and 6 moreKB5099536KB5099538KB5099539KB5099540KB5101649KB5101650
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
CVE-2026-58602 ↗Windows Server 2025 (Server Core installation)Important0%Microsoft rates: Exploitation UnlikelyKB5099536KB5101649
and 1 moreKB5101650
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2026-58609 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5099444KB5099445
and 7 moreKB5099535KB5099536KB5099538KB5099539KB5099540KB5101649KB5101650
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2026-58610 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5099535KB5099536
and 5 moreKB5099538KB5099539KB5099540KB5101649KB5101650
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2026-58613 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5099536KB5099538
and 4 moreKB5099539KB5099540KB5101649KB5101650
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-58614 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5099444KB5099445
and 7 moreKB5099535KB5099536KB5099538KB5099539KB5099540KB5101649KB5101650
Windows Kernel Security Feature Bypass Vulnerability
CVE-2026-58617 ↗Microsoft 365 Copilot for iOSImportant1%Microsoft rates: Exploitation Less LikelyM365 Copilot for iOS Elevation of Privilege Vulnerability
CVE-2026-58618 ↗Office Online ServerImportant0%Microsoft rates: Exploitation Less LikelyKB5002884KB5002886Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-58619 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5099535KB5099536
and 5 moreKB5099538KB5099539KB5099540KB5101649KB5101650
Windows Sensor Data Service Elevation of Privilege Vulnerability
CVE-2026-58626 ↗Windows Server 2022Important1%Microsoft rates: Exploitation UnlikelyKB5099536KB5099539
and 3 moreKB5099540KB5101649KB5101650
Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2026-58627 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5099444KB5099445
and 4 moreKB5099535KB5099536KB5099538KB5099540
Windows DHCP Server Denial of Service Vulnerability
CVE-2026-58628 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5099536KB5099538
and 4 moreKB5099539KB5099540KB5101649KB5101650
Windows Wireless Network Manager Elevation of Privilege Vulnerability
CVE-2026-58629 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5099414KB5099444
and 8 moreKB5099445KB5099535KB5099536KB5099538KB5099539KB5099540KB5101649KB5101650
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-58631 ↗Windows Admin CenterImportant0%Microsoft rates: Exploitation More LikelyWindows Admin Center (WAC) Remote Code Execution Vulnerability
CVE-2026-58632 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5099535KB5099536
and 5 moreKB5099538KB5099539KB5099540KB5101649KB5101650
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2026-58633 ↗Windows 11 version 26H1 for x64-based SystemsImportant0%Microsoft rates: Exploitation More LikelyKB5101649Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-58634 ↗Windows 11 version 26H1 for x64-based SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5101649Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-58635 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5099536KB5099538
and 4 moreKB5099539KB5099540KB5101649KB5101650
Windows Narrator Braille Elevation of Privilege Vulnerability
CVE-2026-58636 ↗Microsoft PC ManagerImportant0%Microsoft rates: Exploitation Less LikelyMicrosoft PC Manager Elevation of Privilege Vulnerability
CVE-2026-58637 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation UnlikelyKB5099444KB5099445
and 7 moreKB5099535KB5099536KB5099538KB5099539KB5099540KB5101649KB5101650
Windows Client-Side Caching Elevation of Privilege Vulnerability
CVE-2026-58638 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation More LikelyKB5099444KB5099445
and 7 moreKB5099535KB5099536KB5099538KB5099539KB5099540KB5101649KB5101650
Windows Boot Loader Security Feature Bypass Vulnerability
CVE-2026-58640 ↗Windows 10 Version 1809 for 32-bit SystemsImportant0%Microsoft rates: Exploitation Less LikelyKB5099414KB5099444
and 8 moreKB5099445KB5099535KB5099536KB5099538KB5099539KB5099540KB5101649KB5101650
Windows NTFS Remote Code Execution Vulnerability
CVE-2026-58647 ↗Power BI Report ServerImportant0%Microsoft rates: Exploitation UnlikelyMicrosoft PowerBI Report Server Spoofing Vulnerability
CVE-2026-59874 ↗azl3 tar 1.35-2 on Azure Linux 3.0ImportantOut-of-band0%Microsoft rating unavailablenode-tar: Negative tar entry size causes infinite loop in archive replace
CVE-2026-15308 ↗azl3 python3 3.12.9-13 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableIncremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
CVE-2026-58281 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-58596 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation More LikelyMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2026-59869 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablejs-yaml: YAML merge-key chains can force quadratic CPU consumption
CVE-2026-59922 ↗azl3 python-mistune 3.3.0-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableMistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)
CVE-2026-59925 ↗azl3 python-mistune 3.3.0-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableinline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs
CVE-2026-59928 ↗azl3 python-mistune 3.3.0-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableMistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions
CVE-2026-14739 ↗azl3 perl-DBI 1.643-5 on Azure Linux 3.0ImportantOut-of-band0%Microsoft rating unavailableDBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders
CVE-2026-55999 ↗azl3 wayland 1.22.0-1 on Azure Linux 3.0ImportantOut-of-band0%Microsoft rating unavailablexorg-server / xwayland glamor font atlas Heap Buffer Overflow
CVE-2026-56002 ↗azl3 libXfont2 2.0.6-1 on Azure Linux 3.0ImportantOut-of-band0%Microsoft rating unavailablelibXfont2 PCF Font Parsing Heap Buffer Overflow
CVE-2026-56003 ↗azl3 libXfont2 2.0.6-1 on Azure Linux 3.0ImportantOut-of-band0%Microsoft rating unavailablelibXfont2 computeProps Property Buffer Heap Buffer Overflow
CVE-2026-56001 ↗azl3 libXfont2 2.0.6-1 on Azure Linux 3.0ImportantOut-of-band0%Microsoft rating unavailablelibXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
CVE-2026-60002 ↗azl3 openssh 9.8p1-8 on Azure Linux 3.0ImportantOut-of-band0%Microsoft rating unavailablessh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)
CVE-2026-58525 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2026-8924 ↗azl3 curl 8.11.1-9 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailabletrailing dot domain super cookie
CVE-2026-9079 ↗azl3 curl 8.11.1-9 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablestale proxy password leak
CVE-2026-56645 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation Less LikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-56646 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-57974 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-57975 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-57977 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-57981 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-57983 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2026-57984 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-57985 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-57986 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-57987 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-57988 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-57992 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-57993 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-58276 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-58278 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-58282 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-58283 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-58284 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-58285 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-58286 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-58287 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-58288 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-58289 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band2%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-58290 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-58291 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2026-58292 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-58293 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-58294 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-58295 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2026-58296 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge for Android Information Disclosure Vulnerability
CVE-2026-58297 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge for Android Information Disclosure Vulnerability
CVE-2026-58298 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-58299 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge for Android Remote Code Execution Vulnerability
CVE-2026-58300 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge for Android Information Disclosure Vulnerability
CVE-2026-58522 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge for Android Information Disclosure Vulnerability
CVE-2026-58523 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge for Android Security Feature Bypass Vulnerability
CVE-2026-58524 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band0%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-57991 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band1%Microsoft rates: Exploitation UnlikelyMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2026-9546 ↗azl3 rust 1.75.0-30 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablesending old referer
CVE-2026-11352 ↗azl3 rust 1.75.0-30 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableQUIC zero-length UDP datagrams busy-loop
CVE-2026-11586 ↗azl3 rust 1.75.0-30 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableWS Auto-PONG memory exhaustion
CVE-2026-55950 ↗azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableDTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions
CVE-2026-59251 ↗azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableDenial of service via exponential certificate policy tree growth in path validation
CVE-2026-64556 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableperf/core: Detach event groups during remove_on_exec

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-13676trackedCVSS 7.5Red Hat OpenShift Container Platform 4.21registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4ec2dacca725fa0f323d93446cfd87951e2e62197b92894b3317bb8b0b8ad77b_amd64Patch ↗Advisory ↗
Red HatCVE-2026-13676trackedCVSS 7.5Red Hat OpenShift Container Platform 4.22registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:2e1b6ad8fab0e89a0f85ff993962f75310edccf9793ea4a92996d41c486fb07f_s390xPatch ↗Advisory ↗
Red HatCVE-2026-13676trackedCVSS 7.5Red Hat OpenShift Container Platform 4.20registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:09fd07194daeaf21adcee891326d6dd7655d5693b84903c7583045766c1c5126_amd64Patch ↗Advisory ↗
Red HatCVE-2026-15308trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)python-unversioned-command-0:3.12.13-2.el10_2.1.noarchPatch ↗Advisory ↗
Red HatCVE-2026-15308trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)platform-python-0:3.6.8-77.el8_10.i686Patch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat JBoss Web Server 7.0 on RHEL 10jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws.noarchPatch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat JBoss Web Server 7.0.0Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-53266trackedCVSS 7.5Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.143.1.rt7.484.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-53266trackedCVSS 7.5Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.143.1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-54059trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)python-pillow-0:5.1.1-22.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-54060trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)python-pillow-0:5.1.1-22.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-55379trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)python-pillow-0:5.1.1-22.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-55380trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)python-pillow-0:5.1.1-22.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat Enterprise Linux Server (v. 7 ELS)tomcat-0:7.0.76-18.el7_9.noarchPatch ↗Advisory ↗
Red HatCVE-2026-39822trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 9)buildah-2:1.43.1-4.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-39822trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 10)buildah-2:1.43.1-4.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-39822trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 10)podman-7:5.8.2-5.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-39822trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 9)podman-6:5.8.2-5.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-39822trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 8)delve-0:1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8Patch ↗Advisory ↗
Red HatCVE-2026-55999trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)xorg-x11-server-0:1.20.11-34.el9_8.3.srcPatch ↗Advisory ↗
Red HatCVE-2026-55999trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)xorg-x11-server-0:1.20.11-28.el8_10.3.srcPatch ↗Advisory ↗
Red HatCVE-2026-55999trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)xorg-x11-server-Xwayland-0:21.1.3-20.el8_10.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55999trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)xorg-x11-server-Xwayland-0:24.1.9-4.el10_2.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55999trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)xorg-x11-server-Xwayland-0:24.1.9-4.el9_8.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Hardened Imagesnodejs22-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Hardened Imagesrust-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15308trackedCVSS 7.5Red Hat Hardened Imagespython3-14-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15308trackedCVSS 7.5Red Hat Hardened Imagespython3-13-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15308trackedCVSS 7.5Red Hat Hardened Imagespython3-12-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15308trackedCVSS 7.5Red Hat Hardened Imagespython3-11-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59725trackedCVSS 7.5Red Hat Hardened Imagesdotnet8-0-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Hardened Imagesnodejs25-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59869trackedCVSS 7.5Red Hat Hardened Imagesdotnet8-0-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2614trackedCVSS 7.5Red Hat OpenShift AI 3.3registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:2300bbd398742940737a7ac3bc337a81c3300ee3a362e246acf94ea543e5186a_amd64Patch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.87-2.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.87-2.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2026-39822trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 9)go-toolset-0:1.26.5-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-39822trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 10)go-toolset-0:1.26.5-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-43284trackedCVSS 7.8Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202606250942-0Patch ↗Advisory ↗
Red HatCVE-2026-46300trackedCVSS 7.8Red Hat OpenShift Container Platform 4.17rhcos-aarch64-417.94.202606250942-0Patch ↗Advisory ↗
Red HatCVE-2026-59886trackedCVSS 7.5Red Hat Hardened Imagesmariadb11-8-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-60002trackedCVSS 7.7Red Hat Hardened Imagesopenssh-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Enterprise Linux AppStream E4S (v.9.2)389-ds-base-0:2.2.4-19.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Directory Server 12.2 E4S for RHEL 9389-ds-base-0:2.2.7-16.module+el9dsrv+24460+990bd826.src::redhat-ds:12Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Directory Server 13.2registry.redhat.io/dirsrv/dirsrv-container-rhel10@sha256:aa1714d2a0202b523ea7ac400776122c1dbff3d17c184ae3e944460225fa8db3_amd64Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Enterprise Linux AppStream EUS (v. 10.0)389-ds-base-0:3.0.6-19.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Enterprise Linux AppStream EUS (v.9.6)389-ds-base-0:2.6.1-22.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat-1:10.1.36-2.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)tomcat-1:10.1.49-3.el10_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat9-1:9.0.87-6.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)tomcat9-1:9.0.117-2.el10_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.87-2.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.87-4.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.87-2.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-34486trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)tomcat-1:9.0.117-2.el9_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-39822trackedCVSS 7.8Red Hat Hardened Imagesgolang1-26-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-39822trackedCVSS 7.8Red Hat Hardened Imagesgolang1-25-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50559trackedCVSS 7.5Red Hat OpenShift Dev Spaces 3.29registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:141f17d12c748c7ab9e94cfd9db7e2492d3063e7478249d6430ac0d8fcfb8875_s390xPatch ↗Advisory ↗
Red HatCVE-2026-53266trackedCVSS 7.5Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.23.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-9165trackedCVSS 7.7Red Hat Advanced Cluster Security for Kubernetes 4.10registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:065e6e08945d72964d3b73022b8a6cdaed69ac283cdd7ae462bfd54d835ecb79_s390xPatch ↗Advisory ↗
Red HatCVE-2025-10263trackedCVSS 8.4Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.140.1.rt7.481.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2025-10263trackedCVSS 8.4Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.140.1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Enterprise Linux AppStream (v. 9)389-ds-base-0:2.8.0-8.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Enterprise Linux AppStream (v. 10)389-ds-base-0:3.2.0-8.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Enterprise Linux AppStream E4S (v.8.8)389-ds-base-0:1.4.3.35-19.module+el8.8.0+24470+25f37233.ppc64le::389-ds:1.4Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Enterprise Linux AppStream E4S (v.9.4)389-ds-base-0:2.4.5-26.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Directory Server 11.9 for RHEL 8389-ds-base-0:1.4.3.39-25.module+el8dsrv+24463+e272972e.src::redhat-ds:11Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Enterprise Linux AppStream (v. 8)389-ds-base-0:1.4.3.39-25.module+el8.10.0+24462+1b66c107.aarch64::389-ds:1.4Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Enterprise Linux AppStream AUS (v.8.6)389-ds-base-0:1.4.3.34-10.module+el8.6.0+24464+c3b0cd7a.src::389-ds:1.4Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Directory Server 11.5 E4S for RHEL 8389-ds-base-0:1.4.3.34-7.module+el8dsrv+24471+245dd8e2.src::redhat-ds:11Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Enterprise Linux Server (v. 7 ELS)389-ds-base-0:1.3.11.1-13.el7_9.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Enterprise Linux AppStream AUS (v.8.4)389-ds-base-0:1.4.3.34-5.module+el8.4.0+24472+7ce5ce41.src::389-ds:1.4Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Directory Server 11.7 E4S for RHEL 8389-ds-base-0:1.4.3.34-16.module+el8dsrv+24461+e76d504b.src::redhat-ds:11Patch ↗Advisory ↗
Red HatCVE-2026-11610trackedCVSS 8.8Red Hat Directory Server 12.4 E4S for RHEL 9389-ds-base-0:2.4.5-24.module+el9dsrv+24459+87716c2d.src::redhat-ds:12Patch ↗Advisory ↗
Red HatCVE-2026-9165trackedCVSS 7.7Red Hat Advanced Cluster Security for Kubernetes 4.11registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9@sha256:41fd9a9bc849f2c7c6439532bd537c34384b88be30b37629c5e271e0e4be7db4_arm64Patch ↗Advisory ↗
Red HatCVE-2026-9165trackedCVSS 7.7Red Hat Advanced Cluster Security 4.9registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:48f1df601e96894b983b79cda2c10e1706b21056a3637b92a4b0e0c1f4cf0a19_arm64Patch ↗Advisory ↗
Red HatCVE-2025-10263trackedCVSS 8.4Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.22.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-53362trackedCVSS 7.8Red Hat Enterprise Linux AppStream EUS (v. 10.0)kernel-64k-debug-debuginfo-0:6.12.0-55.86.1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-13149trackedCVSS 7.5Red Hat Hardened Imagesnodejs22-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2025-10263trackedCVSS 8.4Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.30.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50559trackedCVSS 7.5Streams for Apache Kafka 2.9.4Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-53362trackedCVSS 7.8Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.30.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-53362trackedCVSS 7.8NVIDIA for RHEL 10kernel-0:6.12.0-231.14.el10nv.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8925trackedCVSS 8.1Red Hat Hardened Imagesrust-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8927trackedCVSS 7.5Red Hat Hardened Imagesrust-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-9079trackedCVSS 7.5Red Hat Hardened Imagesrust-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-13149trackedCVSS 7.5Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-2614trackedCVSS 7.5Red Hat OpenShift AI 3.4registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9@sha256:67f33c237a039e394728af16da3722bff7b5e47e4a46cd7e79da8d0f029f0a31_arm64Patch ↗Advisory ↗
Red HatCVE-2026-34182trackedCVSS 7.4Red Hat Insights proxy 1.5registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:ab22b39e57764b0b91cf5576c7a59ce8b0eb9174d957b54fe95daf16580f0720_amd64Patch ↗Advisory ↗
Red HatCVE-2026-46300trackedCVSS 7.8Red Hat OpenShift Container Platform 4.14rhcos-aarch64-414.92.202606231112-0Patch ↗Advisory ↗
Red HatCVE-2026-49477trackedCVSS 7.5Red Hat Hardened Imagespython-rpds-py-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-1519CVSS 7.5Red Hat OpenShift Container Platform 4.15rhcos-aarch64-415.92.202607210244-0Patch ↗Advisory ↗
Red HatCVE-2026-31692CVSS 7.1Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.150.1.rt7.491.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-31692CVSS 7.1Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.150.1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-31787CVSS 7.3Red Hat Enterprise Linux AppStream E4S (v.9.4)bpftool-debuginfo-0:7.3.0-427.141.1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32280CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)osbuild-composer-0:101.5-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32282CVSS 7.8Red Hat Enterprise Linux AppStream (v. 8)osbuild-composer-0:101.5-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32283CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)osbuild-composer-0:101.5-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33554CVSS 8.8Red Hat Enterprise Linux Server (v. 7 ELS)freeipmi-0:1.5.7-3.el7_9.1.i686Patch ↗Advisory ↗
Red HatCVE-2026-34986CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)osbuild-composer-0:101.5-1.el8_10.aarch64Patch ↗Advisory ↗

Glossary

Open in glossary