Patch Day month
August 2026 vulnerabilities
A defender-focused view of 2,516 vulnerabilities across 4,204 returned patch records from 4 vendors. Filter the month to date, or browse the static page trail without JavaScript.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An EPSS percentage is the global 30-day exploitation probability in the wild, not specific to you.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 21 of 22 · records 4,001–4,200 of 4,204
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2024-21243 ↗azl3 mysql 8.0.41-1 on Azure Linux 3.0LowOut-of-band—Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).
CVE-2025-21546 ↗azl3 mysql 8.0.41-1 on Azure Linux 3.0LowOut-of-band—Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).
CVE-2026-64571 ↗azl3 kernel 6.6.145.2-1 on Azure Linux 3.0LowOut-of-band—wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
CVE-2024-21000 ↗azl3 mysql 8.0.41-1 on Azure Linux 3.0LowOut-of-band—Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).
CVE-2026-18839 ↗azl3 rsync 3.4.3-1 on Azure Linux 3.0LowOut-of-band—Popt-devel: popt-static: size_t underflow in singleoptionhelp
CVE-2026-18739 ↗azl3 popt 1.19-1 on Azure Linux 3.0LowOut-of-band—Popt-devel: popt-static: off-by-one in poptstuffargs
CVE-2026-19023 ↗azl3 hdf5 1.14.6-4 on Azure Linux 3.0LowOut-of-band—HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets
CVE-2026-15037 ↗azl3 qtbase 6.6.3-5 on Azure Linux 3.0LowOut-of-band—XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization
CVE-2026-64549 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0LowOut-of-band—Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
CVE-2026-64546 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0LowOut-of-band—drm/edid: fix OOB read in drm_parse_tiled_block()
CVE-2026-64512 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0LowOut-of-band—ACPI: CPPC: Suppress UBSAN warning caused by field misuse
CVE-2026-47059 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0LowOut-of-band—Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java san
CVE-2026-59846 ↗azl3 libssh 0.10.6-8 on Azure Linux 3.0LowOut-of-band—Libssh: libssh: information disclosure via proxycommand %r username expansion
CVE-2026-16517 ↗azl3 libarchive 3.7.7-6 on Azure Linux 3.0LowOut-of-band—Libarchive: libarchive: signed integer overflow in archive_write_zip_header
CVE-2026-56392 ↗azl3 coreutils 9.4-7 on Azure Linux 3.0LowOut-of-band—Heap-based Buffer Overflow in GNU coreutils
CVE-2026-42770 ↗azl3 openssl 3.3.7-3 on Azure Linux 3.0LowOut-of-band—FFC-DH Peer Validation Uses Attacker-Supplied q
CVE-2026-42768 ↗azl3 openssl 3.3.7-1 on Azure Linux 3.0LowOut-of-band—Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
CVE-2026-46044 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0LowOut-of-band—ipmi:ssif: Clean up kthread on errors
CVE-2026-45893 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0LowOut-of-band—apparmor: Fix & Optimize table creation from possibly unaligned memory
CVE-2026-43969 ↗azl3 rabbitmq-server 3.13.7-3 on Azure Linux 3.0LowOut-of-band—Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1
CVE-2026-3832 ↗cbl2 gnutls 3.7.11-6 on CBL Mariner 2.0LowOut-of-band—Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
CVE-2026-34743 ↗azl3 xz 5.4.4-2 on Azure Linux 3.0LowOut-of-band—XZ Utils: Buffer overflow in lzma_index_append()
CVE-2026-35388 ↗cbl2 openssh 8.9p1-9 on CBL Mariner 2.0LowOut-of-band—OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.
CVE-2026-3633 ↗azl3 libsoup 3.4.4-12 on Azure Linux 3.0LowOut-of-band—Libsoup: libsoup: header and http request injection via crlf injection
CVE-2026-3632 ↗azl3 libsoup 3.4.4-12 on Azure Linux 3.0LowOut-of-band—Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames
CVE-2026-3634 ↗cbl2 libsoup 3.0.4-12 on CBL Mariner 2.0LowOut-of-band—Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header
CVE-2026-0989 ↗cbl2 libxml2 2.10.4-9 on CBL Mariner 2.0LowOut-of-band—Libxml2: unbounded relaxng include recursion leading to stack overflow
CVE-2025-13837 ↗cbl2 python3 3.9.19-16 on CBL Mariner 2.0LowOut-of-band—Out-of-memory when loading Plist
CVE-2023-53012 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0LowOut-of-band—thermal: core: call put_device() only after device_register() fails
CVE-2024-36920 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0LowOut-of-band—scsi: mpi3mr: Avoid memcpy field-spanning write WARNING
CVE-2025-46394 ↗azl3 busybox 1.36.1-14 on Azure Linux 3.0LowOut-of-band—In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
CVE-2024-58251 ↗azl3 busybox 1.36.1-17 on Azure Linux 3.0LowOut-of-band—In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
CVE-2024-7598 ↗azl3 kubernetes 1.30.10-9 on Azure Linux 3.0LowOut-of-band—Network restriction bypass via race condition during namespace termination
CVE-2025-7069 ↗cbl2 hdf5 1.14.4-1 on CBL Mariner 2.0LowOut-of-band—HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow
CVE-2025-1180 ↗cbl2 gdb 11.2-6 on CBL Mariner 2.0LowOut-of-band—GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption
CVE-2025-1150 ↗azl3 binutils 2.41-7 on Azure Linux 3.0LowOut-of-band—GNU Binutils ld libbfd.c bfd_malloc memory leak
CVE-2025-29477 ↗cbl2 fluent-bit 3.0.6-2 on CBL Mariner 2.0LowOut-of-band—An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event.
CVE-2025-29478 ↗cbl2 fluent-bit 3.0.6-2 on CBL Mariner 2.0LowOut-of-band—An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.
CVE-2025-2912 ↗cbl2 hdf5 1.14.4-1 on CBL Mariner 2.0LowOut-of-band—HDF5 H5Omessage.c H5O_msg_flush heap-based overflow
CVE-2025-2923 ↗azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0LowOut-of-band—HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow
CVE-2024-42155 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0LowOut-of-band—s390/pkey: Wipe copies of protected- and secure-keys
CVE-2025-29923 ↗azl3 telegraf 1.31.0-10 on Azure Linux 3.0LowOut-of-band—go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment
CVE-2024-50211 ↗azl3 kernel 6.6.64.2-1 on Azure Linux 3.0LowOut-of-band—udf: refactor inode_bmap() to handle error
CVE-2024-47738 ↗azl3 kernel 6.6.56.1-5 on Azure Linux 3.0LowOut-of-band—wifi: mac80211: don't use rate mask for offchannel TX either
CVE-2026-19177 ↗Microsoft Edge (Chromium-based)N/A0%CVE-2026-19177 Insufficient validation of untrusted input in UI
CVE-2026-19169 ↗Microsoft Edge (Chromium-based)N/A0%CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks
CVE-2026-19168 ↗Microsoft Edge (Chromium-based)N/A0%CVE-2026-19168 Inappropriate implementation in V8
CVE-2026-19166 ↗Microsoft Edge (Chromium-based)N/A0%CVE-2026-19166 Use after free in Web Authentication
CVE-2026-19164 ↗Microsoft Edge (Chromium-based)N/A0%CVE-2026-19164 Insufficient validation of untrusted input in Codecs
CVE-2026-19153 ↗Microsoft Edge (Chromium-based)N/A0%CVE-2026-19153 Insufficient validation of untrusted input in Workers
CVE-2026-19152 ↗Microsoft Edge (Chromium-based)N/A0%CVE-2026-19152 Inappropriate implementation in Navigation
CVE-2026-19150 ↗Microsoft Edge (Chromium-based)N/A0%CVE-2026-19150 Inappropriate implementation in V8
CVE-2026-19138 ↗Microsoft Edge (Chromium-based)N/A0%CVE-2026-19138 Heap buffer overflow in CrashReporting
CVE-2024-5814 ↗cbl2 mariadb 10.6.9-6N/AOut-of-band0%Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade
CVE-2026-68398 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0N/A—ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF
CVE-2026-68413 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0N/A—wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
CVE-2026-68428 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0N/A—KVM: x86/mmu: Fix use-after-free on vendor module reload
CVE-2026-61477 ↗azl3 libvirt 10.10.0-2 on Azure Linux 3.0N/A—Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection
CVE-2026-64655 ↗azl3 gh 2.62.0-20 on Azure Linux 3.0N/A—GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching
CVE-2026-64652 ↗azl3 gh 2.62.0-20 on Azure Linux 3.0N/A—GitHub CLI: Partial token disclosure in `gh auth status` output
CVE-2026-54522 ↗azl3 rubygem-msgpack 1.7.2-1 on Azure Linux 3.0N/AOut-of-band—MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure
CVE-2026-54787 ↗azl3 gh 2.62.0-20 on Azure Linux 3.0N/AOut-of-band—sigstore-go fails to check signature timestamps against a signing key's validity period
CVE-2024-3205 ↗azl3 libyaml 0.2.5-3 on Azure Linux 3.0N/AOut-of-band—Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possible to reproduce nor exploit the issue.
CVE-2024-36022 ↗azl3 kernel 6.6.92.2-1 on Azure Linux 3.0N/AOut-of-band—Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-37753 ↗azl3 kernel 6.6.92.2-1 on Azure Linux 3.0N/AOut-of-band—Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-43022 ↗azl3 kernel 6.6.141.1-1 on Azure Linux 3.0N/AOut-of-band—Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
CVE-2024-38620 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—Bluetooth: HCI: Remove HCI_AMP support
CVE-2025-21635 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
CVE-2024-38628 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
CVE-2025-21949 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—LoongArch: Set hugetlb mmap base address aligned with pmd size
CVE-2024-24856 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—NULL pointer deference in acpi_db_convert_to_package of Linux acpi module
CVE-2023-52939 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
CVE-2025-21891 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—ipvlan: ensure network headers are in skb linear part
CVE-2022-49750 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—cpufreq: CPPC: Add u64 casts to avoid overflowing
CVE-2023-53002 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—drm/i915: Fix a memory leak with reused mmap_offset
CVE-2023-53008 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—cifs: fix potential memory leaks in session setup
CVE-2022-49742 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0N/AOut-of-band—f2fs: initialize locks earlier in f2fs_fill_super()
CVE-2025-21961 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—eth: bnxt: fix truesize for mb-xdp-pass case
CVE-2024-39478 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—crypto: starfive - Do not free stack buffer
CVE-2024-56712 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—udmabuf: fix memory leak on last export_udmabuf() error path
CVE-2024-49937 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—wifi: cfg80211: Set correct chandef when starting CAC
CVE-2024-49939 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—wifi: rtw89: avoid to add interface to list twice when SER
CVE-2024-53114 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
CVE-2024-42134 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0N/AOut-of-band—virtio-pci: Check if is_avq is NULL
CVE-2024-49920 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Check null pointers before multiple uses
CVE-2024-49925 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—fbdev: efifb: Register sysfs groups through driver core
CVE-2024-49971 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Increase array size of dummy_boolean
CVE-2024-49945 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—net/ncsi: Disable the ncsi work before freeing the associated structure
CVE-2024-46870 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Disable DMCUB timeout for DCN35
CVE-2024-49972 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Deallocate DML memory if allocation fails
CVE-2024-49885 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—mm, slub: avoid zeroing kmalloc redzone
CVE-2024-53201 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
CVE-2024-49932 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—btrfs: don't readahead the relocation inode on RST
CVE-2023-52485 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Wake DMCUB before sending a command
CVE-2024-49940 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—l2tp: prevent possible tunnel refcount underflow
CVE-2024-53089 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—LoongArch: KVM: Mark hrtimer to expire in hard interrupt context
CVE-2024-47662 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection
CVE-2024-49888 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0N/AOut-of-band—bpf: Fix a sdiv overflow issue
CVE-2025-21682 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—eth: bnxt: always recalculate features after XDP clearing, fix null-deref
CVE-2024-47702 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—bpf: Fail verification for sign-extension of packet data/data_end/data_meta
CVE-2024-57872 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
CVE-2024-53050 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/i915/hdcp: Add encoder check in hdcp2_get_capability
CVE-2024-42107 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—ice: Don't process extts if PTP is disabled
CVE-2024-50090 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—drm/xe/oa: Fix overflow in oa batch buffer
CVE-2024-50091 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—dm vdo: don't refer to dedupe_context after releasing it
CVE-2024-26962 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0N/AOut-of-band—dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape
CVE-2024-53051 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
CVE-2024-27010 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—net/sched: Fix mirred deadlock on device recursion
CVE-2025-21723 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—scsi: mpi3mr: Fix possible crash when setting up bsg fails
CVE-2024-53224 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—RDMA/mlx5: Move events notifier registration to be after device registration
CVE-2024-49970 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Implement bounds check for stream encoder creation in DCN401
CVE-2024-47703 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—bpf, lsm: Add check for BPF LSM return value
CVE-2024-50102 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—x86: fix user address masking non-canonical speculation issue
CVE-2024-37021 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0N/AOut-of-band—fpga: manager: add owner module and take its refcount
CVE-2024-56702 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0N/AOut-of-band—bpf: Mark raw_tp arguments with PTR_MAYBE_NULL
CVE-2025-21672 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0N/AOut-of-band—afs: Fix merge preference rule failure condition
CVE-2024-53056 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
CVE-2024-58012 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
CVE-2024-46823 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—kunit/overflow: Fix UB in overflow_allocation_test
CVE-2024-53084 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/imagination: Break an object reference loop
CVE-2024-49990 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/xe/hdcp: Check GSC structure validity
CVE-2024-46787 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—userfaultfd: fix checks for huge PMDs
CVE-2024-49918 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
CVE-2024-50187 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—drm/vc4: Stop the active perfmon before being destroyed
CVE-2024-46778 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Check UnboundedRequestEnabled's value
CVE-2024-46775 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—drm/amd/display: Validate function returns
CVE-2024-49916 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hw
CVE-2023-4134 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()
CVE-2024-56742 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
CVE-2025-21833 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE
CVE-2024-49908 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
CVE-2024-38625 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—fs/ntfs3: Check 'folio' pointer for NULL
CVE-2024-27079 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—iommu/vt-d: Fix NULL domain on device release
CVE-2024-26775 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—aoe: avoid potential deadlock at set_capacity
CVE-2024-49910 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Add NULL check for function pointer in dcn401_set_output_transfer_func
CVE-2024-50225 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—btrfs: fix error propagation of split bios
CVE-2024-50004 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35
CVE-2024-56557 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-16405CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.13.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16405CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)thunderbird-0:140.13.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-16405CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)thunderbird-0:140.13.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-16405CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)thunderbird-0:140.13.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-16405CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)thunderbird-0:140.13.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47010CVSS 3.7Red Hat Enterprise Linux Supplementary EUS (v. 10.0)java-21-ibm-semeru-certified-jdk-1:21.0.12.0.8-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47010CVSS 3.7Red Hat Enterprise Linux Supplementary (v. 8)java-1.8.0-ibm-1:1.8.0.8.70-1.el8_10.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-47059CVSS 3.7Red Hat Enterprise Linux Supplementary EUS (v. 10.0)java-21-ibm-semeru-certified-jdk-1:21.0.12.0.8-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47059CVSS 3.7Red Hat Enterprise Linux Supplementary (v. 8)java-1.8.0-ibm-1:1.8.0.8.70-1.el8_10.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-53434CVSS 3.7Red Hat JBoss Web Server 7.0 on RHEL 10jws7-tomcat-0:11.0.21-6.redhat_00005.1.el10jws.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55276CVSS 2.3Red Hat JBoss Web Server 7.0 on RHEL 10jws7-tomcat-0:11.0.21-6.redhat_00005.1.el10jws.noarchPatch ↗Advisory ↗
Red HatCVE-2026-16405CVSS 3.4Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.13.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16405CVSS 3.4Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.13.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47010CVSS 3.7Red Hat Hardened Imagesjava-21-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47059CVSS 3.7Red Hat Hardened Imagesjava-21-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16405CVSS 3.4Red Hat Enterprise Linux AppStream (v. 9)firefox-0:140.13.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16405CVSS 3.4Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.13.0-1.el10_2.aarch64Patch ↗Advisory ↗
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.