CYBERSECURITYTRACKER
TRACKING7,931 stories in this site build1,728 vulnerability news stories in this site build
Vulnerabilities

July 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 3 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 3,887 vulnerabilities across 16,502 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.

16,502all patch recordsClear filters743criticalShow these records3Microsoft exploitation detectedShow these records6Microsoft in the Known Exploited Vulnerabilities catalogShow these records14,592tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 73 of 83 · records 14,401 to 14,600 of 16,502

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-54887 ↗azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableDTLS server cookie bypass during startup window due to empty initial cookie secret
CVE-2026-58470 ↗azl3 wget 2.1.0-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing
CVE-2026-58471 ↗azl3 wget 2.1.0-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c
CVE-2026-58472 ↗azl3 wget 2.1.0-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding
CVE-2026-64542 ↗azl3 kernel 6.6.145.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipv6: ndisc: fix NULL deref in accept_untracked_na()
CVE-2026-55970 ↗azl3 thrift 0.15.0-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()
CVE-2026-66053 ↗azl3 thrift 0.15.0-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache Thrift: Python TSSLSocket Hostname Matcher Import
CVE-2026-16729 ↗azl3 nodejs 24.18.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableundici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
CVE-2026-15157 ↗azl3 nodejs 24.18.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableundici vulnerable to CRLF Injection via blob-like body 'type' property
CVE-2026-44943 ↗azl3 iscsi-initiator-utils 2.1.9-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableremote limited file-write as root via discovery in open-iscsi
CVE-2026-58040 ↗azl3 nodejs 24.17.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableAn incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934). This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.
CVE-2026-56850 ↗azl3 nodejs 24.17.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableA flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.
CVE-2026-13346 ↗azl3 python-virtualenv 20.36.1-5 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepip absolute path traversal during download from malicious package indexes
CVE-2026-54332 ↗azl3 telegraf 1.31.0-28 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS
CVE-2026-65624 ↗azl3 rabbitmq-server 3.13.7-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableCowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion
CVE-2026-25800 ↗azl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablequinn-proto has remote memory exhaustion from unbounded out-of-order stream reassembly
CVE-2026-55737 ↗azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHeap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder
CVE-2026-42792 ↗azl3 erlang 26.2.5.21-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableepmd permanent DoS via EMFILE on accept(2) in erts
CVE-2026-15003 ↗azl3 gdb 13.2-10 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBinutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service
CVE-2026-16554 ↗azl3 apparmor 3.1.7-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInteger Overflow Leading to Heap Buffer Overflow in cJSON
CVE-2026-7260 ↗azl3 php 8.3.31-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableStack overflow in phar with circular symlinks
CVE-2026-56390 ↗azl3 bison 3.8.2-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableArbitrary Output Location Change in GNU Bison
CVE-2026-56389 ↗azl3 bison 3.8.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableArbitrary Command Execution in GNU Bison
CVE-2026-63144 ↗azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUncontrolled Recursion in Elasticsearch Leading to Denial of Service
CVE-2026-66337 ↗azl3 libsoup 3.4.4-16 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()
CVE-2026-66339 ↗azl3 libsoup 3.4.4-16 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels
CVE-2026-66338 ↗azl3 libsoup 3.4.4-16 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()
CVE-2026-56391 ↗azl3 coreutils 9.4-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableOut‑of‑bounds Read in GNU coreutils
CVE-2026-58023 ↗azl3 thrift 0.15.0-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableApache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path
CVE-2026-64544 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
CVE-2026-64297 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemodule: decompress: check return value of module_extend_max_pages()
CVE-2026-64486 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: cmipci: check snd_ctl_new1() return value
CVE-2026-64331 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusbip: vudc: fix NULL deref in vep_dequeue()
CVE-2026-64493 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiio: pressure: mpl115: fix runtime PM leak on read error
CVE-2026-64465 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: xhci: Fix sleep in atomic context in xhci_free_streams()
CVE-2026-64458 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/damon/ops-common: handle extreme intervals in damon_hot_score()
CVE-2026-64511 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableACPI: NFIT: core: Fix possible NULL pointer dereference
CVE-2026-64275 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInput: elan_i2c - prevent division by zero and arithmetic underflow
CVE-2026-64332 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUSB: ulpi: fix memory leak on registration failure
CVE-2026-64370 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableposix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
CVE-2026-64373 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecpufreq: Fix hotplug-suspend race during reboot
CVE-2026-64371 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableproc: protect ptrace_may_access() with exec_update_lock (part 1)
CVE-2026-64487 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
CVE-2026-64345 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: gadget: f_printer: take kref only for successful open
CVE-2026-64409 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
CVE-2026-64306 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: drbg - Fix returning success on failure in CTR_DRBG
CVE-2026-64338 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUSB: misc: uss720: unregister parport on probe failure
CVE-2026-64507 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablex86/bugs: Enable IBPB flush on BPF JIT allocation
CVE-2026-64525 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit
CVE-2026-64425 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableio_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
CVE-2026-64360 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablehfs/hfsplus: zero-initialize buffer in hfs_bnode_read
CVE-2026-64462 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCI: altera: Fix resource leaks on probe failure
CVE-2026-64489 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: ymfpci: check snd_ctl_new1() return value
CVE-2026-64474 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablevfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
CVE-2026-64326 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableblock: skip sync_blockdev() on surprise removal in bdev_mark_dead()
CVE-2026-64482 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: gus: check snd_ctl_new1() return value
CVE-2026-64350 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
CVE-2026-64478 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: usb-audio: avoid kobject path lookup in DualSense match
CVE-2026-64500 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiio: adc: lpc32xx: Initialize completion before requesting IRQ
CVE-2026-64484 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: es1938: check snd_ctl_new1() return value
CVE-2026-64488 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: aoa: check snd_ctl_new1() return value
CVE-2026-64351 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
CVE-2026-64429 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegpio: eic-sprd: use raw_spinlock_t in the irq startup path
CVE-2026-64250 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLoongArch: Report dying CPU to RCU in stop_this_cpu()
CVE-2026-64241 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegpio: rockchip: teardown bugs and resource leaks
CVE-2026-64248 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableMIPS: smp: report dying CPU to RCU in stop_this_cpu()

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-49476trackedCVSS 5.9Red Hat Hardened Imagespython-rpds-py-0:2026.6.3-1.hum1@srcPatch ↗Advisory ↗
Red HatCVE-2026-54370trackedCVSS 6.3Red Hat Hardened Imagesacl-0:2.4.0-0.1.hum1@aarch64Patch ↗Advisory ↗
SuseCVE-2026-5450trackedCVSS 5.9SUSE Liberty Linux 7 LTSSglibc-0:2.17-326.el7_9.6.i686no patch linkAdvisory ↗
Red HatCVE-2026-5450trackedCVSS 5.0Red Hat Insights proxy 1.5registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:ab22b39e57764b0b91cf5576c7a59ce8b0eb9174d957b54fe95daf16580f0720_amd64Patch ↗Advisory ↗
Red HatCVE-2026-5450trackedCVSS 5.0Red Hat Enterprise Linux Server (v. 7 ELS)glibc-0:2.17-326.el7_9.6.i686Patch ↗Advisory ↗
SuseCVE-2026-55199trackedCVSS 5.9SUSE Linux Micro 6.0libssh2-1-0:1.11.0-3.1.aarch64no patch linkAdvisory ↗
Red HatCVE-2026-6475trackedCVSS 6.7Red Hat Enterprise Linux AppStream E4S (v.8.8)pg_repack-0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le::postgresql:12Patch ↗Advisory ↗
Red HatCVE-2026-6475trackedCVSS 6.7Red Hat Enterprise Linux AppStream AUS (v.8.4)pgaudit-0:1.4.0-6.module+el8.4.0+11288+c193d6d7.src::postgresql:12Patch ↗Advisory ↗
Red HatCVE-2026-6475trackedCVSS 6.7Red Hat Enterprise Linux AppStream AUS (v.8.4)pgaudit-0:1.5.0-1.module+el8.4.0+8873+b821c30a.src::postgresql:13Patch ↗Advisory ↗
Red HatCVE-2026-7383trackedCVSS 5.5Red Hat Insights proxy 1.5registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:ab22b39e57764b0b91cf5576c7a59ce8b0eb9174d957b54fe95daf16580f0720_amd64Patch ↗Advisory ↗
Red HatCVE-2026-9076trackedCVSS 5.9Red Hat Insights proxy 1.5registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:ab22b39e57764b0b91cf5576c7a59ce8b0eb9174d957b54fe95daf16580f0720_amd64Patch ↗Advisory ↗
Red HatCVE-2025-68211CVSS 5.5Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.42.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-14355CVSS 5.6Red Hat Enterprise Linux AppStream (v. 9)apcu-panel-0:5.1.23-1.module+el9.8.0+24343+756b4fcd.noarch::php:8.3Patch ↗Advisory ↗
Red HatCVE-2026-57455CVSS 4.7Red Hat Enterprise Linux AppStream (v. 10)vim-X11-2:9.1.083-9.el10_2.12.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-57455CVSS 4.7Red Hat Enterprise Linux AppStream (v. 8)vim-X11-2:8.0.1763-31.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59856CVSS 5.3Red Hat Enterprise Linux AppStream (v. 10)vim-common-2:9.1.083-9.el10_2.12.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59858CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)vim-common-2:9.1.083-9.el10_2.12.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59858CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)vim-common-2:8.0.1763-31.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-9149CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)libsolv-debuginfo-0:0.7.29-8.el10_0.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-9150CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)libsolv-debuginfo-0:0.7.29-8.el10_0.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-13346CVSS 5.9Red Hat Hardened Imagespython-pip-0:26.2-0.1.hum1@srcPatch ↗Advisory ↗
Red HatCVE-2026-14355CVSS 5.6Red Hat Enterprise Linux AppStream (v. 8)apcu-panel-0:5.1.23-1.module+el8.10.0+20770+a5eca186.noarch::php:8.2Patch ↗Advisory ↗
Red HatCVE-2026-14355CVSS 5.6Red Hat Enterprise Linux AppStream (v. 8)apcu-panel-0:5.1.18-1.module+el8.10.0+22485+a3539972.noarch::php:7.4Patch ↗Advisory ↗
Red HatCVE-2026-14643CVSS 5.9Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15157CVSS 4.2Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16728CVSS 4.8Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16729CVSS 4.8Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-41254CVSS 6.1Temurin Build of OpenJDK 25.0.4Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-41889CVSS 5.9Red Hat Advanced Cluster Security 4.9registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2361878517379a3ac144549d4240785758b46ef5b01421edbb2df9d63452c1d1_amd64Patch ↗Advisory ↗
Red HatCVE-2026-41889CVSS 5.9Red Hat Advanced Cluster Security for Kubernetes 4.10registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:2cd067c86c7d3297a4f9324b31950e844e699ab2375ffcf1547a814e5831b3ee_arm64Patch ↗Advisory ↗
Red HatCVE-2026-46917CVSS 5.3Temurin Build of OpenJDK 25.0.4Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-46968CVSS 5.9Temurin Build of OpenJDK 25.0.4Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-47021CVSS 5.3Temurin Build of OpenJDK 25.0.4Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-47027CVSS 5.3Temurin Build of OpenJDK 25.0.4Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-53669CVSS 5.4Red Hat Hardened Imagesprometheus3-13-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-53669CVSS 5.4Red Hat Hardened Imagesprometheus3-5-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55653CVSS 4.3Red Hat Enterprise Linux AppStream (v. 8)openssh-askpass-0:8.0p1-30.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55653CVSS 4.3Red Hat Enterprise Linux AppStream (v. 10)openssh-askpass-0:9.9p1-25.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55655CVSS 5.0Red Hat Enterprise Linux AppStream (v. 8)openssh-askpass-0:8.0p1-30.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55655CVSS 5.0Red Hat Enterprise Linux AppStream (v. 10)openssh-askpass-0:9.9p1-25.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56850CVSS 4.1Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58039CVSS 4.4Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58040CVSS 6.3Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58041CVSS 5.3Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58042CVSS 5.9Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58044CVSS 4.8Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58045CVSS 6.2Red Hat Hardened Imagesnodejs24-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59898CVSS 5.3Red Hat build of Quarkus 3.33.2.SP3Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-59900CVSS 6.5Red Hat build of Quarkus 3.33.2.SP3Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-59921CVSS 5.7Red Hat build of Quarkus 3.33.2.SP3Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-59996CVSS 4.6Red Hat Enterprise Linux AppStream (v. 10)openssh-askpass-0:9.9p1-25.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-60147CVSS 6.5Temurin Build of OpenJDK 25.0.4Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-62995CVSS 4.3Red Hat Hardened Imagesjaeger-0:2.20.0-0.8.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6357CVSS 5.8Red Hat Hardened Imagespython-pip-0:26.2-0.1.hum1@srcPatch ↗Advisory ↗
Red HatCVE-2026-14355CVSS 5.6Red Hat Enterprise Linux AppStream (v. 10)php-0:8.3.32-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-14643CVSS 5.9Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15157CVSS 4.2Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15370CVSS 6.7Red Hat Hardened Imageslibssh-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16728CVSS 4.8Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16729CVSS 4.8Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32591CVSS 5.2Red Hat Quay 3.18registry.redhat.io/quay/quay-rhel9@sha256:14e7fd727c1dc74e19001952176a8354cbc97ec5b4643a4815b6ffbc6d76e224_s390xPatch ↗Advisory ↗
Red HatCVE-2026-4360CVSS 5.0Red Hat Hardened Imagespython3-14-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4360CVSS 5.0Red Hat Hardened Imagespython3-10-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4360CVSS 5.0Red Hat Hardened Imagespython3-11-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4360CVSS 5.0Red Hat Hardened Imagespython3-13-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4360CVSS 5.0Red Hat Hardened Imagespython3-12-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45149CVSS 6.5Red Hat OpenShift Dev Spaces 3.29registry.redhat.io/devspaces/code-rhel9@sha256:5daf10b66f5fbfb11269df3bce4857506e29ed397919aa24e7fb3f248a98e3cd_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-49834CVSS 5.9Red Hat Hardened Imagesspire1-14-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-49834CVSS 5.9Red Hat Hardened Imagestrivy-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-52718CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)gstreamer1-plugins-bad-free-0:1.24.11-3.el10_0.4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55653CVSS 4.3Red Hat Enterprise Linux AppStream (v. 9)openssh-askpass-0:9.9p1-9.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55655CVSS 5.0Red Hat Enterprise Linux AppStream (v. 9)openssh-askpass-0:9.9p1-9.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56392CVSS 4.4Red Hat Enterprise Linux BaseOS (v. 8)coreutils-0:8.30-20.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56850CVSS 4.1Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56850CVSS 4.1Red Hat Hardened Imagesnodejs22-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-57455CVSS 4.7Red Hat Enterprise Linux AppStream (v. 9)vim-X11-2:8.2.2637-26.el9_8.13.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58039CVSS 4.4Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58039CVSS 4.4Red Hat Hardened Imagesnodejs22-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58040CVSS 6.3Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58040CVSS 6.3Red Hat Hardened Imagesnodejs22-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58041CVSS 5.3Red Hat Hardened Imagesnodejs22-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58042CVSS 5.9Red Hat Hardened Imagesnodejs22-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58044CVSS 4.8Red Hat Hardened Imagesnodejs22-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-58045CVSS 6.2Red Hat Hardened Imagesnodejs22-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59856CVSS 5.3Red Hat Enterprise Linux AppStream (v. 9)vim-common-2:8.2.2637-26.el9_8.13.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59858CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)vim-common-2:8.2.2637-26.el9_8.13.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59898CVSS 5.3Red Hat build of Quarkus 3.27.4.SP3Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-59900CVSS 6.5Red Hat build of Quarkus 3.27.4.SP3Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-59921CVSS 5.7Red Hat build of Quarkus 3.27.4.SP3Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-59996CVSS 4.6Red Hat Enterprise Linux AppStream (v. 9)openssh-askpass-0:9.9p1-9.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6860CVSS 5.3Cryostat 4 on RHEL 9cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64Patch ↗Advisory ↗
Red HatCVE-2026-15003CVSS 5.6Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16615CVSS 6.8Red Hat Enterprise Linux AppStream (v. 10)rest-0:0.9.1-11.el10_2.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23002CVSS 4.7Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.31.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33007CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)httpd-0:2.4.63-1.el10_0.4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-4367CVSS 5.5Red Hat Hardened ImageslibXpm-0:3.5.19-4.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46086CVSS 5.5Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.40.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-52718CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.2)gstreamer1-plugins-bad-free-0:1.18.4-9.el9_2.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-52718CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v.9.6)gstreamer1-plugins-bad-free-0:1.22.12-5.el9_6.4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-52718CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.4)gstreamer1-plugins-bad-free-0:1.22.1-6.el9_4.4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-7260CVSS 5.5Red Hat Hardened Imagesphp-0:8.5.9-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90801CVSS 5.3Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90802CVSS 5.0Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90803CVSS 6.6Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90804CVSS 4.8Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90828CVSS 5.3Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90829CVSS 6.6Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90830CVSS 5.5Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90831CVSS 6.6Red Hat Hardened Imagesbinutils-0:2.46.1-1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-94287CVSS 5.5Red Hat Hardened ImageslibXpm-0:3.5.19-4.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2025-5278CVSS 4.4Red Hat Discovery 2registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64Patch ↗Advisory ↗
Red HatCVE-2026-15788CVSS 6.3Red Hat Hardened Imagestrivy-0:0.72.0-0.1.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15792CVSS 6.5Red Hat Hardened Imagestrivy-0:0.72.0-0.1.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46917CVSS 5.3Red Hat Hardened Imagesjava-25-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46968CVSS 5.9Red Hat Hardened Imagesjava-25-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47021CVSS 5.3Red Hat Hardened Imagesjava-25-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47027CVSS 5.3Red Hat Hardened Imagesjava-25-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.9.2)tigervnc-0:1.12.0-14.el9_2.15.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux AppStream AUS (v.8.4)tigervnc-0:1.11.0-8.el8_4.16.srcPatch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.8.8)tigervnc-0:1.12.0-15.el8_8.18.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux AppStream EUS (v.9.6)tigervnc-0:1.14.1-11.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.9.4)tigervnc-0:1.13.1-8.el9_4.10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux AppStream AUS (v.8.6)tigervnc-0:1.12.0-6.el8_6.18.srcPatch ↗Advisory ↗
Red HatCVE-2026-50262CVSS 5.5Red Hat Enterprise Linux Server (v. 7 ELS)tigervnc-0:1.8.0-36.el7_9.5.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.9.2)tigervnc-0:1.12.0-14.el9_2.15.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux AppStream AUS (v.8.4)tigervnc-0:1.11.0-8.el8_4.16.srcPatch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.8.8)tigervnc-0:1.12.0-15.el8_8.18.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux AppStream EUS (v.9.6)tigervnc-0:1.14.1-11.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux AppStream E4S (v.9.4)tigervnc-0:1.13.1-8.el9_4.10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux AppStream AUS (v.8.6)tigervnc-0:1.12.0-6.el8_6.18.srcPatch ↗Advisory ↗
Red HatCVE-2026-50263CVSS 5.5Red Hat Enterprise Linux Server (v. 7 ELS)tigervnc-0:1.8.0-36.el7_9.5.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-56391CVSS 6.1Red Hat Hardened Imagescoreutils-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-60147CVSS 6.5Red Hat Hardened Imagesjava-25-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6238CVSS 6.5Red Hat Discovery 2registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64Patch ↗Advisory ↗

Glossary