Patch Day month
August 2026 vulnerabilities
A defender-focused view of 2,931 vulnerabilities across 5,692 returned patch records from 4 vendors. Filter the month to date, or browse the static page trail without JavaScript.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An EPSS percentage is the global 30-day exploitation probability in the wild, not specific to you.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 29 of 29 · records 5,601–5,692 of 5,692
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-19138 ↗Microsoft Edge (Chromium-based)N/A0%CVE-2026-19138 Heap buffer overflow in CrashReporting
CVE-2024-5814 ↗cbl2 mariadb 10.6.9-6N/AOut-of-band0%Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade
CVE-2026-54522 ↗azl3 rubygem-msgpack 1.7.2-1 on Azure Linux 3.0N/AOut-of-band—MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure
CVE-2026-54787 ↗azl3 gh 2.62.0-20 on Azure Linux 3.0N/AOut-of-band—sigstore-go fails to check signature timestamps against a signing key's validity period
CVE-2024-3205 ↗azl3 libyaml 0.2.5-3 on Azure Linux 3.0N/AOut-of-band—Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possible to reproduce nor exploit the issue.
CVE-2024-36022 ↗azl3 kernel 6.6.92.2-1 on Azure Linux 3.0N/AOut-of-band—Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-37753 ↗azl3 kernel 6.6.92.2-1 on Azure Linux 3.0N/AOut-of-band—Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-43022 ↗azl3 kernel 6.6.141.1-1 on Azure Linux 3.0N/AOut-of-band—Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
CVE-2024-38620 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—Bluetooth: HCI: Remove HCI_AMP support
CVE-2025-21635 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
CVE-2024-38628 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
CVE-2025-21949 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—LoongArch: Set hugetlb mmap base address aligned with pmd size
CVE-2024-24856 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—NULL pointer deference in acpi_db_convert_to_package of Linux acpi module
CVE-2023-52939 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()
CVE-2025-21891 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—ipvlan: ensure network headers are in skb linear part
CVE-2022-49750 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—cpufreq: CPPC: Add u64 casts to avoid overflowing
CVE-2023-53002 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—drm/i915: Fix a memory leak with reused mmap_offset
CVE-2023-53008 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—cifs: fix potential memory leaks in session setup
CVE-2022-49742 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0N/AOut-of-band—f2fs: initialize locks earlier in f2fs_fill_super()
CVE-2025-21961 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—eth: bnxt: fix truesize for mb-xdp-pass case
CVE-2024-39478 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—crypto: starfive - Do not free stack buffer
CVE-2024-56712 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—udmabuf: fix memory leak on last export_udmabuf() error path
CVE-2024-49937 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—wifi: cfg80211: Set correct chandef when starting CAC
CVE-2024-49939 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—wifi: rtw89: avoid to add interface to list twice when SER
CVE-2024-53114 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
CVE-2024-42134 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0N/AOut-of-band—virtio-pci: Check if is_avq is NULL
CVE-2024-49920 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Check null pointers before multiple uses
CVE-2024-49925 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—fbdev: efifb: Register sysfs groups through driver core
CVE-2024-49971 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Increase array size of dummy_boolean
CVE-2024-49945 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—net/ncsi: Disable the ncsi work before freeing the associated structure
CVE-2024-46870 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Disable DMCUB timeout for DCN35
CVE-2024-49972 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Deallocate DML memory if allocation fails
CVE-2024-49885 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—mm, slub: avoid zeroing kmalloc redzone
CVE-2024-53201 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
CVE-2024-49932 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—btrfs: don't readahead the relocation inode on RST
CVE-2023-52485 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Wake DMCUB before sending a command
CVE-2024-49940 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—l2tp: prevent possible tunnel refcount underflow
CVE-2024-53089 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—LoongArch: KVM: Mark hrtimer to expire in hard interrupt context
CVE-2024-47662 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection
CVE-2024-49888 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0N/AOut-of-band—bpf: Fix a sdiv overflow issue
CVE-2025-21682 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—eth: bnxt: always recalculate features after XDP clearing, fix null-deref
CVE-2024-47702 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—bpf: Fail verification for sign-extension of packet data/data_end/data_meta
CVE-2024-57872 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
CVE-2024-53050 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/i915/hdcp: Add encoder check in hdcp2_get_capability
CVE-2024-42107 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—ice: Don't process extts if PTP is disabled
CVE-2024-50090 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—drm/xe/oa: Fix overflow in oa batch buffer
CVE-2024-50091 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—dm vdo: don't refer to dedupe_context after releasing it
CVE-2024-26962 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0N/AOut-of-band—dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape
CVE-2024-53051 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
CVE-2024-27010 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—net/sched: Fix mirred deadlock on device recursion
CVE-2025-21723 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—scsi: mpi3mr: Fix possible crash when setting up bsg fails
CVE-2024-53224 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—RDMA/mlx5: Move events notifier registration to be after device registration
CVE-2024-49970 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Implement bounds check for stream encoder creation in DCN401
CVE-2024-47703 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—bpf, lsm: Add check for BPF LSM return value
CVE-2024-50102 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—x86: fix user address masking non-canonical speculation issue
CVE-2024-37021 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0N/AOut-of-band—fpga: manager: add owner module and take its refcount
CVE-2024-56702 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0N/AOut-of-band—bpf: Mark raw_tp arguments with PTR_MAYBE_NULL
CVE-2025-21672 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0N/AOut-of-band—afs: Fix merge preference rule failure condition
CVE-2024-53056 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
CVE-2024-58012 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
CVE-2024-46823 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—kunit/overflow: Fix UB in overflow_allocation_test
CVE-2024-53084 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/imagination: Break an object reference loop
CVE-2024-49990 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/xe/hdcp: Check GSC structure validity
CVE-2024-46787 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—userfaultfd: fix checks for huge PMDs
CVE-2024-49918 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
CVE-2024-50187 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—drm/vc4: Stop the active perfmon before being destroyed
CVE-2024-46778 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Check UnboundedRequestEnabled's value
CVE-2024-46775 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—drm/amd/display: Validate function returns
CVE-2024-49916 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hw
CVE-2023-4134 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()
CVE-2024-56742 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
CVE-2025-21833 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE
CVE-2024-49908 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
CVE-2024-38625 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—fs/ntfs3: Check 'folio' pointer for NULL
CVE-2024-27079 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—iommu/vt-d: Fix NULL domain on device release
CVE-2024-26775 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—aoe: avoid potential deadlock at set_capacity
CVE-2024-49910 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Add NULL check for function pointer in dcn401_set_output_transfer_func
CVE-2024-50225 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-band—btrfs: fix error propagation of split bios
CVE-2024-50004 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35
CVE-2024-56557 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-band—iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
CVE-2024-50178 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-band—cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()
CVE-2024-42139 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0N/AOut-of-band—ice: Fix improper extts handling
CVE-2024-47658 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-band—crypto: stm32/cryp - call finalize with bh disabled
CVE-2024-50277 ↗azl3 kernel 6.6.96.1-1 on Azure Linux 3.0N/AOut-of-band—dm: fix a crash if blk_alloc_disk fails
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.