Patch Day month
August 2026 vulnerabilities
Microsoft reports 1 vulnerability with exploitation detected in the wild this month. This defender-focused view covers 4,090 vulnerabilities across 9,232 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 47 of 47 · records 9,201 to 9,232 of 9,232
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2024-49970 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Implement bounds check for stream encoder creation in DCN401
CVE-2024-47703 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailablebpf, lsm: Add check for BPF LSM return value
CVE-2024-50102 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablex86: fix user address masking non-canonical speculation issue
CVE-2024-37021 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailablefpga: manager: add owner module and take its refcount
CVE-2024-56702 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablebpf: Mark raw_tp arguments with PTR_MAYBE_NULL
CVE-2025-21672 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailableafs: Fix merge preference rule failure condition
CVE-2024-53056 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
CVE-2024-58012 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailableASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
CVE-2024-46823 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailablekunit/overflow: Fix UB in overflow_allocation_test
CVE-2024-53084 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/imagination: Break an object reference loop
CVE-2024-49990 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/xe/hdcp: Check GSC structure validity
CVE-2024-46787 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailableuserfaultfd: fix checks for huge PMDs
CVE-2024-49918 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
CVE-2024-50187 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/vc4: Stop the active perfmon before being destroyed
CVE-2024-46778 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Check UnboundedRequestEnabled's value
CVE-2024-46775 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Validate function returns
CVE-2024-49916 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hw
CVE-2023-4134 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailableKernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()
CVE-2024-56742 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablevfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
CVE-2025-21833 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailableiommu/vt-d: Avoid use of NULL after WARN_ON_ONCE
CVE-2024-49908 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
CVE-2024-38625 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailablefs/ntfs3: Check 'folio' pointer for NULL
CVE-2024-27079 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailableiommu/vt-d: Fix NULL domain on device release
CVE-2024-26775 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailableaoe: avoid potential deadlock at set_capacity
CVE-2024-49910 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Add NULL check for function pointer in dcn401_set_output_transfer_func
CVE-2024-50225 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablebtrfs: fix error propagation of split bios
CVE-2024-50004 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35
CVE-2024-56557 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailableiio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
CVE-2024-50178 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablecpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()
CVE-2024-42139 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailableice: Fix improper extts handling
CVE-2024-47658 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailablecrypto: stm32/cryp - call finalize with bh disabled
CVE-2024-50277 ↗azl3 kernel 6.6.96.1-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledm: fix a crash if blk_alloc_disk fails
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.