Vulnerabilities
July 2026 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 3 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 3,887 vulnerabilities across 16,502 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 74 of 83 · records 14,601 to 14,800 of 16,502
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-64244 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrivers/base/memory: set mem->altmap after successful device registration
CVE-2026-64480 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: ice1712: check snd_ctl_new1() return value
CVE-2026-16768 ↗azl3 gdk-pixbuf2 2.42.10-5 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGdk-pixbuf: out-of-bounds read in ico parser
CVE-2026-47143 ↗azl3 rust 1.90.0-9 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableCapstone has a NULL Pointer Dereference with 3DNow! opcodes
CVE-2026-16461 ↗azl3 rpcbind 1.2.6-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting
CVE-2026-16615 ↗azl3 rest 0.9.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibrest: weak random number generation in pkce implementation
CVE-2026-46917 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1
CVE-2026-60147 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web
CVE-2026-6390 ↗azl3 nano 6.4-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.
CVE-2026-59850 ↗azl3 libssh 0.10.6-9 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: use-after-free via data callbacks on closed channels
CVE-2026-59844 ↗azl3 libssh 0.10.6-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: denial of service via oversized sftp read length
CVE-2026-59845 ↗azl3 libssh 0.10.6-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: denial of service via unchecked proxycommand fork() failure
CVE-2026-59847 ↗azl3 libssh 0.10.6-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: integrity downgrade via openssl aes-gcm tag verification
CVE-2026-59843 ↗azl3 libssh 0.10.6-9 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: denial of service via zero advertised channel packet size
CVE-2026-59848 ↗azl3 libssh 0.10.6-9 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: denial of service via sftp responses with unknown request ids
CVE-2026-10723 ↗azl3 bind 9.20.23-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIncorrect acceptance of NSEC3 records
CVE-2026-10822 ↗azl3 bind 9.20.23-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKey Record using PRIVATEDNS algorithm may lead to unexpected exit
CVE-2026-44210 ↗azl3 kata-containers-cc 3.15.0.aks0-15 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations
CVE-2026-59677 ↗azl3 checkpolicy 3.6-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableProcess Kill Attack Vector in killall() in seunshare
CVE-2026-59676 ↗azl3 checkpolicy 3.6-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLocal File Deletion Attack Vector in rm_rf() in seunshare
CVE-2026-44508 ↗azl3 rsync 3.4.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43618. Reason: This candidate is a duplicate of CVE-2026-43618. Notes: All CVE users should reference CVE-2026-43618 instead of this candidate.
CVE-2026-44510 ↗azl3 rsync 3.4.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43620. Reason: This candidate is a duplicate of CVE-2026-43620. Notes: All CVE users should reference CVE-2026-43620 instead of this candidate.
CVE-2026-44509 ↗azl3 rsync 3.4.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43619. Reason: This candidate is a duplicate of CVE-2026-43619. Notes: All CVE users should reference CVE-2026-43619 instead of this candidate.
CVE-2026-16277 ↗azl3 rpcbind 1.2.6-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()
CVE-2026-15788 ↗azl3 moby-engine 25.0.3-18 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableWCOW cache mount source selector resolves NTFS junctions outside of cache root
CVE-2026-26081 ↗azl3 haproxy 2.9.11-7 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
CVE-2026-15588 ↗azl3 glib 2.78.6-9 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
CVE-2026-63308 ↗azl3 cert-manager 1.12.15-9 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHelm Files.Lines Denial of Service via Empty Chart Files
CVE-2026-50243 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailable'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL
CVE-2026-50252 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePossible cache poisoning attack by mapping source port population per thread
CVE-2026-50251 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableAttacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush
CVE-2026-55991 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRemote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
CVE-2026-55990 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePacket of death for a DNSCrypt misconfigured Unbound
CVE-2026-50046 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePossible heap use-after-free in an error path when a DoT forwarded query is jostled out
CVE-2026-14586 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableAssertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments
CVE-2026-56444 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableDegradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration
CVE-2026-55717 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailable'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash
CVE-2026-44621 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated
CVE-2026-56416 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePossible heap buffer overflow when validator canonicalizes RDATA that contains domain name
CVE-2026-52863 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableMemory corruption could lead to crash and denial of service
CVE-2026-50248 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBOGUS configured primary hostname accepted for XFR in auth/rpz zones
CVE-2026-50045 ↗azl3 unbound 1.25.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailable'max-global-quota' reset by DNSSEC validation restarts
CVE-2026-63136 ↗azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
CVE-2026-63263 ↗azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
CVE-2026-63140 ↗azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableReachable Assertion in Elasticsearch Leading to Denial of Service
CVE-2026-56145 ↗azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
CVE-2026-64190 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: team: fix NULL pointer dereference in team_xmit during mode change
CVE-2026-64205 ↗azl3 kernel 6.6.145.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablei2c: i801: fix hardware state machine corruption in error path
CVE-2026-64187 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfs: fail recovery on a committed log item with no regions
CVE-2026-26199 ↗azl3 hdf5 1.14.6-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBuffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero
CVE-2026-26197 ↗azl3 hdf5 1.14.6-2 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableArray full size, element count, and element size are not checked to make sure they match in H5Odtype.c
CVE-2026-64060 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfs: Fix leak of request in netfs_write_begin() error handling
CVE-2026-63960 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()
CVE-2026-63964 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: typec: ucsi: ccg: reject firmware images without a ':' record header
CVE-2026-63962 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-43823CVSS 6.2Red Hat Hardened Imagesnodejs24-0:24.18.0-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-43823CVSS 6.2Red Hat Hardened Imagesswift-lang-0:6.3.3-0.1.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2025-40237CVSS 5.8Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.39.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23110CVSS 5.5Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.39.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2024-34459CVSS 5.5Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:434630073ec81d616b326e2e33538a3b93ea1f6656ebce21538077ac92e1fc02_amd64Patch ↗Advisory ↗
Red HatCVE-2024-46738CVSS 5.5Red Hat Enterprise Linux AppStream EUS (v.9.6)kernel-64k-debug-debuginfo-0:5.14.0-570.129.1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2024-50076CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v.9.6)kernel-64k-debug-debuginfo-0:5.14.0-570.129.1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-10911CVSS 5.5Red Hat Update Infrastructure 5registry.redhat.io/rhui5/rhua-rhel9@sha256:81f832ed93595aac1fb1e9dc9c7503b2e697316710f5d750d79f81596d8d31da_amd64Patch ↗Advisory ↗
Red HatCVE-2025-5278CVSS 4.4Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:434630073ec81d616b326e2e33538a3b93ea1f6656ebce21538077ac92e1fc02_amd64Patch ↗Advisory ↗
Red HatCVE-2026-15788CVSS 6.3Red Hat Hardened Imagespodman-0:6.0.2-2.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15792CVSS 6.5Red Hat Hardened Imagespodman-0:6.0.2-2.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-41254CVSS 6.1Red Hat Enterprise Linux Server (v. 7 ELS)java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686Patch ↗Advisory ↗
Red HatCVE-2026-41254CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-41254CVSS 6.1Red Hat OpenJDK 11 ELS for RHEL 7java-11-openjdk-1:11.0.32.0.9-1.el7_9.s390xPatch ↗Advisory ↗
Red HatCVE-2026-41254CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)java-17-openjdk-1:17.0.20.0.8-1.1.el8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-41254CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)java-21-openjdk-1:21.0.12.0.8-1.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-41254CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)java-25-openjdk-1:25.0.4.0.7-1.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46917CVSS 5.3Red Hat OpenJDK 11 ELS for RHEL 7java-11-openjdk-1:11.0.32.0.9-1.el7_9.s390xPatch ↗Advisory ↗
Red HatCVE-2026-46917CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)java-17-openjdk-1:17.0.20.0.8-1.1.el8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46917CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)java-21-openjdk-1:21.0.12.0.8-1.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46917CVSS 5.3Red Hat Enterprise Linux AppStream (v. 10)java-25-openjdk-1:25.0.4.0.7-1.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46968CVSS 5.9Red Hat Enterprise Linux Server (v. 7 ELS)java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686Patch ↗Advisory ↗
Red HatCVE-2026-46968CVSS 5.9Red Hat Enterprise Linux AppStream (v. 8)java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46968CVSS 5.9Red Hat OpenJDK 11 ELS for RHEL 7java-11-openjdk-1:11.0.32.0.9-1.el7_9.s390xPatch ↗Advisory ↗
Red HatCVE-2026-46968CVSS 5.9Red Hat Enterprise Linux AppStream (v. 8)java-17-openjdk-1:17.0.20.0.8-1.1.el8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46968CVSS 5.9Red Hat Enterprise Linux AppStream EUS (v. 10.0)java-21-openjdk-1:21.0.12.0.8-1.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46968CVSS 5.9Red Hat Enterprise Linux AppStream (v. 10)java-25-openjdk-1:25.0.4.0.7-1.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47021CVSS 5.3Red Hat Enterprise Linux Server (v. 7 ELS)java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686Patch ↗Advisory ↗
Red HatCVE-2026-47021CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47021CVSS 5.3Red Hat OpenJDK 11 ELS for RHEL 7java-11-openjdk-1:11.0.32.0.9-1.el7_9.s390xPatch ↗Advisory ↗
Red HatCVE-2026-47021CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)java-17-openjdk-1:17.0.20.0.8-1.1.el8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47021CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)java-21-openjdk-1:21.0.12.0.8-1.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47021CVSS 5.3Red Hat Enterprise Linux AppStream (v. 10)java-25-openjdk-1:25.0.4.0.7-1.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47027CVSS 5.3Red Hat Enterprise Linux Server (v. 7 ELS)java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686Patch ↗Advisory ↗
Red HatCVE-2026-47027CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47027CVSS 5.3Red Hat OpenJDK 11 ELS for RHEL 7java-11-openjdk-1:11.0.32.0.9-1.el7_9.s390xPatch ↗Advisory ↗
Red HatCVE-2026-47027CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)java-17-openjdk-1:17.0.20.0.8-1.1.el8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47027CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)java-21-openjdk-1:21.0.12.0.8-1.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47027CVSS 5.3Red Hat Enterprise Linux AppStream (v. 10)java-25-openjdk-1:25.0.4.0.7-1.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-49834CVSS 5.9Red Hat Hardened Imagesspire1.15-0:1.15.2-0.3.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-60147CVSS 6.5Red Hat Enterprise Linux Server (v. 7 ELS)java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686Patch ↗Advisory ↗
Red HatCVE-2026-60147CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-60147CVSS 6.5Red Hat OpenJDK 11 ELS for RHEL 7java-11-openjdk-1:11.0.32.0.9-1.el7_9.s390xPatch ↗Advisory ↗
Red HatCVE-2026-60147CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)java-17-openjdk-1:17.0.20.0.8-1.1.el8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-60147CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)java-21-openjdk-1:21.0.12.0.8-1.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-60147CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)java-25-openjdk-1:25.0.4.0.7-1.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-6238CVSS 6.5Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:434630073ec81d616b326e2e33538a3b93ea1f6656ebce21538077ac92e1fc02_amd64Patch ↗Advisory ↗
Red HatCVE-2026-6238CVSS 6.5Red Hat OpenShift distributed tracing 3.10.2registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64Patch ↗Advisory ↗
Red HatCVE-2026-6472CVSS 5.4Red Hat Update Infrastructure 5registry.redhat.io/rhui5/rhua-rhel9@sha256:81f832ed93595aac1fb1e9dc9c7503b2e697316710f5d750d79f81596d8d31da_amd64Patch ↗Advisory ↗
Red HatCVE-2026-6474CVSS 4.3Red Hat Update Infrastructure 5registry.redhat.io/rhui5/rhua-rhel9@sha256:81f832ed93595aac1fb1e9dc9c7503b2e697316710f5d750d79f81596d8d31da_amd64Patch ↗Advisory ↗
Red HatCVE-2025-47911CVSS 5.3OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2025-47914CVSS 5.3OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2025-58181CVSS 5.3OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2025-58190CVSS 4.3OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2025-64031CVSS 4.7Red Hat Hardened Imagesbsdcat-0:3.8.8-3.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15788CVSS 6.3Red Hat Hardened Imagesbuildah-0:1.44.0-3.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15792CVSS 6.5Red Hat Hardened Imagesbuildah-0:1.44.0-3.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23110CVSS 5.5Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.29.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-25680CVSS 6.5OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2026-3833CVSS 6.5Red Hat Enterprise Linux Server (v. 7 ELS)gnutls-0:3.3.29-9.el7_9.2.i686Patch ↗Advisory ↗
Red HatCVE-2026-39817CVSS 5.9OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2026-39823CVSS 5.4OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2026-39825CVSS 6.5OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2026-39826CVSS 5.4OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2026-39827CVSS 6.5OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2026-40356CVSS 5.9OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2026-42014CVSS 6.6Red Hat Enterprise Linux Server (v. 7 ELS)gnutls-0:3.3.29-9.el7_9.2.i686Patch ↗Advisory ↗
Red HatCVE-2026-42015CVSS 5.3Red Hat Enterprise Linux Server (v. 7 ELS)gnutls-0:3.3.29-9.el7_9.2.i686Patch ↗Advisory ↗
Red HatCVE-2026-42502CVSS 6.1OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2026-42506CVSS 5.4OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2026-46598CVSS 5.3OpenShift API for Data Protection 1.6registry.redhat.io/oadp/oadp-velero-rhel9@sha256:1a9757e2badab0d1ca54c5ac7f058ff7cdb64c1b2837f0f9559f3545eaf5f709_arm64Patch ↗Advisory ↗
Red HatCVE-2026-4893CVSS 6.5Red Hat OpenShift Container Platform 4.19rhcos-aarch64-4.19.9.6.202607151909-0Patch ↗Advisory ↗
Red HatCVE-2026-55956CVSS 6.5Red Hat JBoss Web Server 6.2 on RHEL 10jws6-tomcat-0:10.1.49-15.redhat_00013.1.el10jws.noarchPatch ↗Advisory ↗
Red HatCVE-2026-6238CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)glibc-benchtests-debuginfo-0:2.34-274.el9_8.aarch64Patch ↗Advisory ↗
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.