CYBERSECURITYTRACKER
TRACKING7,931 stories in this site build1,728 vulnerability news stories in this site build
Vulnerabilities

August 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 1 vulnerability with exploitation detected in the wild this month. This defender-focused view covers 6,845 vulnerabilities across 17,509 returned patch records from 5 vendors. Filter the complete month, or browse the static page trail without JavaScript.

17,509all patch recordsClear filters2,377criticalShow these records1Microsoft exploitation detectedShow these records3Microsoft in the Known Exploited Vulnerabilities catalogShow these records14,331tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Suse 8,046Red Hat 6,562Microsoft 2,854Cisco 46Android 1

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 86 of 88 · records 17,001 to 17,200 of 17,509

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-68403 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0LowNot availableMicrosoft rating unavailablewifi: brcmfmac: initialize SDIO data work before cleanup
CVE-2026-68355 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0LowNot availableMicrosoft rating unavailablewifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
CVE-2026-68312 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowNot availableMicrosoft rating unavailablecifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths
CVE-2026-68238 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowNot availableMicrosoft rating unavailabledrm/amdgpu: Release VFCT ACPI table reference
CVE-2026-68256 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0LowNot availableMicrosoft rating unavailabledrm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference
CVE-2026-68288 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowNot availableMicrosoft rating unavailablenet: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD
CVE-2026-68171 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0LowNot availableMicrosoft rating unavailablearm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
CVE-2026-68363 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0LowNot availableMicrosoft rating unavailablewifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
CVE-2026-68244 ↗azl3 kernel 6.6.143.1-1 on Azure Linux 3.0LowNot availableMicrosoft rating unavailabledrm/i915/gem: Do not leak siblings[] on proto context error
CVE-2026-61477 ↗azl3 libvirt 10.10.0-2 on Azure Linux 3.0LowNot availableMicrosoft rating unavailableLibvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection
CVE-2026-64655 ↗azl3 gh 2.62.0-20 on Azure Linux 3.0LowNot availableMicrosoft rating unavailableGitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching
CVE-2026-64652 ↗azl3 gh 2.62.0-20 on Azure Linux 3.0LowNot availableMicrosoft rating unavailableGitHub CLI: Partial token disclosure in `gh auth status` output
CVE-2024-21243 ↗azl3 mysql 8.0.41-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).
CVE-2025-21546 ↗azl3 mysql 8.0.41-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).
CVE-2026-64571 ↗azl3 kernel 6.6.145.2-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablewifi: p54: validate RX frame length in p54_rx_eeprom_readback()
CVE-2024-21000 ↗azl3 mysql 8.0.41-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).
CVE-2024-21244 ↗azl3 mysql 8.0.41-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailable
CVE-2026-18839 ↗azl3 rsync 3.4.3-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablePopt-devel: popt-static: size_t underflow in singleoptionhelp
CVE-2026-18739 ↗azl3 popt 1.19-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablePopt-devel: popt-static: off-by-one in poptstuffargs
CVE-2026-19023 ↗azl3 hdf5 1.14.6-4 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableHDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets
CVE-2026-58039 ↗azl3 nodejs 24.17.0-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailable
CVE-2026-56847 ↗azl3 nodejs 24.17.0-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailable
CVE-2026-6879 ↗azl3 tensorflow 2.16.1-11 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailable
CVE-2026-15037 ↗azl3 qtbase 6.6.3-5 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableXML injection vulnerability in QDom comment, CDATA and processing-instruction serialization
CVE-2026-64549 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableBluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
CVE-2026-64512 ↗azl3 kernel 6.6.144.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableACPI: CPPC: Suppress UBSAN warning caused by field misuse
CVE-2026-47059 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java san
CVE-2026-59846 ↗azl3 libssh 0.10.6-8 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableLibssh: libssh: information disclosure via proxycommand %r username expansion
CVE-2026-16517 ↗azl3 libarchive 3.7.7-6 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableLibarchive: libarchive: signed integer overflow in archive_write_zip_header
CVE-2026-56392 ↗azl3 coreutils 9.4-7 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableHeap-based Buffer Overflow in GNU coreutils
CVE-2026-42770 ↗azl3 openssl 3.3.7-3 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableFFC-DH Peer Validation Uses Attacker-Supplied q
CVE-2026-42768 ↗azl3 openssl 3.3.7-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableMulti-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
CVE-2026-46044 ↗azl3 kernel 6.6.139.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableipmi:ssif: Clean up kthread on errors
CVE-2026-43969 ↗azl3 rabbitmq-server 3.13.7-3 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableCookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1
CVE-2026-3832 ↗cbl2 gnutls 3.7.11-6 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableGnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
CVE-2026-34743 ↗azl3 xz 5.4.4-2 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableXZ Utils: Buffer overflow in lzma_index_append()
CVE-2026-35388 ↗cbl2 openssh 8.9p1-9 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableOpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.
CVE-2026-3633 ↗azl3 libsoup 3.4.4-12 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableLibsoup: libsoup: header and http request injection via crlf injection
CVE-2026-3632 ↗azl3 libsoup 3.4.4-12 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableLibsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames
CVE-2026-3634 ↗cbl2 libsoup 3.0.4-12 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableLibsoup: libsoup: http header injection and response splitting via crlf injection in content-type header
CVE-2026-0989 ↗cbl2 libxml2 2.10.4-9 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableLibxml2: unbounded relaxng include recursion leading to stack overflow
CVE-2025-13837 ↗cbl2 python3 3.9.19-16 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableOut-of-memory when loading Plist
CVE-2023-53012 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailablethermal: core: call put_device() only after device_register() fails
CVE-2024-36920 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailablescsi: mpi3mr: Avoid memcpy field-spanning write WARNING
CVE-2025-46394 ↗azl3 busybox 1.36.1-14 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableIn tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
CVE-2024-58251 ↗azl3 busybox 1.36.1-17 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableIn netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
CVE-2024-7598 ↗azl3 kubernetes 1.30.10-9 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableNetwork restriction bypass via race condition during namespace termination
CVE-2025-7069 ↗cbl2 hdf5 1.14.4-1 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableHDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow
CVE-2025-1180 ↗cbl2 gdb 11.2-6 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableGNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption
CVE-2025-1150 ↗azl3 binutils 2.41-7 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableGNU Binutils ld libbfd.c bfd_malloc memory leak
CVE-2025-29477 ↗cbl2 fluent-bit 3.0.6-2 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableAn issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event.
CVE-2025-29478 ↗cbl2 fluent-bit 3.0.6-2 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableAn issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.
CVE-2025-2912 ↗cbl2 hdf5 1.14.4-1 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableHDF5 H5Omessage.c H5O_msg_flush heap-based overflow
CVE-2025-2923 ↗azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableHDF5 H5Fint.c H5F_addr_encode_len heap-based overflow
CVE-2024-42155 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailables390/pkey: Wipe copies of protected- and secure-keys
CVE-2025-29923 ↗azl3 telegraf 1.31.0-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablego-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment
CVE-2024-50211 ↗azl3 kernel 6.6.64.2-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableudf: refactor inode_bmap() to handle error
CVE-2024-47738 ↗azl3 kernel 6.6.56.1-5 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablewifi: mac80211: don't use rate mask for offchannel TX either
CVE-2026-78891 ↗Microsoft Edge (Chromium-based)N/AOut-of-band1%Microsoft rating unavailableChromium: CVE-2026-78891 Buffer overflow in WebRTC
CVE-2026-78892 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78892 Incorrect authorization in Chromoting
CVE-2026-78893 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78893 Information leak in QUIC
CVE-2026-78894 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78894 Race condition in Payments
CVE-2026-78895 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78895 Information leak in Paint
CVE-2026-78896 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78896 Information leak in StorageAccessAPI
CVE-2026-78897 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78897 Missing authorization in BrowserTag
CVE-2026-78898 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78898 Incorrect authorization in Downloads
CVE-2026-78899 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78899 Use after free in V8
CVE-2026-78900 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78900 Improper input validation in Media
CVE-2026-78901 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78901 Race condition in V8
CVE-2026-78903 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78903 Incomplete cleanup in SiteIsolation
CVE-2026-78904 ↗Microsoft Edge (Chromium-based)N/AOut-of-band1%Microsoft rating unavailableChromium: CVE-2026-78904 Type confusion in ANGLE
CVE-2026-78905 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78905 Type confusion in ANGLE
CVE-2026-78906 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78906 Race condition in ANGLE
CVE-2026-78907 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78907 Incorrect authorization in WebProtect
CVE-2026-78908 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78908 Information leak in Canvas
CVE-2026-78909 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78909 Use after free in Views
CVE-2026-78910 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78910 Buffer overflow in V8
CVE-2026-78911 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78911 Incorrect authorization in USB
CVE-2026-78912 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78912 UI misrepresentation in Browser
CVE-2026-78913 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78913 Use after free in Chromoting
CVE-2026-78914 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78914 Uninitialized resource in Skia
CVE-2026-78915 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78915 Race condition in Enterprise
CVE-2026-78934 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78934 Race condition in ReadAloud
CVE-2026-78938 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78938 Type confusion in V8
CVE-2026-78939 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78939 Use after free in Chromecast
CVE-2026-78940 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78940 Improper initialization in Network
CVE-2026-78941 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78941 Information leak in Core
CVE-2026-78942 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78942 Incorrect reference resolution in Loader
CVE-2026-78943 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78943 Improper input validation in Editing
CVE-2026-78944 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78944 Use after free in DevTools
CVE-2026-78945 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78945 Use after free in Views
CVE-2026-78946 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78946 Incorrect authorization in Select
CVE-2026-78947 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78947 Incomplete cleanup in Chromium
CVE-2026-78948 ↗Microsoft Edge (Chromium-based)N/AOut-of-band1%Microsoft rating unavailableChromium: CVE-2026-78948 Buffer overflow in WebGL
CVE-2026-78950 ↗Microsoft Edge (Chromium-based)N/AOut-of-band1%Microsoft rating unavailableChromium: CVE-2026-78950 Integer overflow in WebRTC
CVE-2026-78951 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78951 Use after free in ServiceWorker
CVE-2026-78952 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78952 Out of bounds write in Crashpad
CVE-2026-78953 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78953 Missing authorization in SiteIsolation
CVE-2026-78954 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78954 Incorrect authorization in Extensions
CVE-2026-78955 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78955 Observable discrepancy in PerformanceAPIs
CVE-2026-78956 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78956 Type confusion in V8
CVE-2026-78958 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78958 Uninitialized resource in Skia
CVE-2026-78959 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78959 Improper handling of case sensitivity in FileSystem
CVE-2026-78960 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78960 Information leak in Extensions
CVE-2026-78961 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78961 Incorrect authorization in Core
CVE-2026-78962 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78962 Uninitialized resource in WebXR
CVE-2026-78963 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78963 Improper input validation in Media
CVE-2026-78964 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78964 Use after free in Sync
CVE-2026-78965 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78965 Uninitialized resource in ANGLE
CVE-2026-78966 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78966 Externally controlled reference in QUIC
CVE-2026-78967 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78967 Missing authorization in BFCache
CVE-2026-78968 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78968 Missing authorization in Core
CVE-2026-78969 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78969 Uninitialized resource in Video
CVE-2026-78974 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78974 UI misrepresentation in Linux Toolkit Theming
CVE-2026-78975 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78975 Incorrect authorization in DOM
CVE-2026-78976 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78976 Improper input validation in StorageAccessAPI
CVE-2026-78977 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78977 Uninitialized resource in GPU
CVE-2026-78978 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78978 Out of bounds read in ANGLE
CVE-2026-78979 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78979 Race condition in Core
CVE-2026-78980 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78980 Improper input validation in ReaderMode
CVE-2026-78983 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78983 Use after free in Views
CVE-2026-78984 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78984 Uninitialized resource in GPU
CVE-2026-78985 ↗Microsoft Edge (Chromium-based)N/AOut-of-band1%Microsoft rating unavailableChromium: CVE-2026-78985 Incorrect reference resolution in FileSystem
CVE-2026-78986 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78986 Uninitialized resource in GPU
CVE-2026-78987 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78987 Information leak in Canvas
CVE-2026-78989 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78989 Out of bounds read in ANGLE
CVE-2026-78990 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78990 Use after free in Compositing
CVE-2026-78991 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78991 Race condition in WebProtect
CVE-2026-78999 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-78999 Improper privilege management in Navigation
CVE-2026-79000 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79000 Improper input validation in DeviceBoundSessionCredentials
CVE-2026-79001 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79001 Information leak in Bluetooth
CVE-2026-79002 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79002 Incorrect authorization in SiteIsolation
CVE-2026-79003 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79003 Incorrect authorization in Device
CVE-2026-79004 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79004 Out of bounds read in Media
CVE-2026-79005 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79005 Incorrect authorization in StorageAccessAPI
CVE-2026-79006 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79006 Protection mechanism failure in HttpsUpgrades
CVE-2026-79007 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79007 Uninitialized resource in GPU
CVE-2026-79009 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79009 UI misrepresentation in UI
CVE-2026-79010 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79010 Operation on a resource after expiration or release in Network
CVE-2026-79011 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79011 UI misrepresentation in Browser
CVE-2026-79012 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79012 Use after free in Safebrowsing
CVE-2026-79013 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79013 Improper input validation in Sync
CVE-2026-79014 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79014 Race condition in Autofill
CVE-2026-79015 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79015 Improper input validation in ServiceWorker
CVE-2026-79016 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79016 Observable discrepancy in SVG
CVE-2026-79017 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79017 Race condition in Extensions
CVE-2026-79018 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79018 Information leak in FoldableAPIs
CVE-2026-79019 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79019 Out of bounds write in ANGLE
CVE-2026-79020 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79020 Out of bounds read in Skia
CVE-2026-79021 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79021 Missing authorization in InterestGroups
CVE-2026-79022 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79022 UI misrepresentation in Transactions Platform
CVE-2026-79023 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79023 Incorrect authorization in Editing
CVE-2026-79024 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79024 Information leak in ServiceWorker
CVE-2026-79025 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79025 Improper input validation in Workers
CVE-2026-79026 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79026 Use after free in Extensions
CVE-2026-79027 ↗Microsoft Edge (Chromium-based)N/AOut-of-band1%Microsoft rating unavailableChromium: CVE-2026-79027 Use after free in WebRTC
CVE-2026-79028 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79028 Observable discrepancy in Network
CVE-2026-79030 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79030 Observable discrepancy in Autofill
CVE-2026-79031 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79031 Improper resource exposure in Preload
CVE-2026-79032 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79032 Improper input validation in Network
CVE-2026-79033 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79033 Insufficient control flow management in DevTools
CVE-2026-79034 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79034 Information leak in CORS
CVE-2026-79038 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79038 Incorrect authorization in WebProtect
CVE-2026-79040 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79040 Uninitialized resource in GPU
CVE-2026-79041 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79041 Missing authorization in Browser
CVE-2026-79042 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79042 Missing authorization in Payments
CVE-2026-79043 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79043 Out of bounds write in ANGLE
CVE-2026-79045 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79045 Type confusion in V8
CVE-2026-79047 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79047 Use after free in Views
CVE-2026-79048 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79048 Out of bounds write in ANGLE
CVE-2026-79049 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79049 Incorrect reference resolution in Passwords
CVE-2026-79050 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79050 Incorrect authorization in Network
CVE-2026-79051 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79051 Incorrect authorization in Loader
CVE-2026-79052 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79052 Use after free in Aura
CVE-2026-79053 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79053 Missing authorization in Lighthouse
CVE-2026-79054 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79054 Use after free in Chromecast
CVE-2026-79055 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79055 Information leak in Sharing
CVE-2026-79056 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79056 Use after free in ServiceWorker
CVE-2026-79058 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79058 Missing authorization in Passwords
CVE-2026-79059 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79059 Information leak in BFCache
CVE-2026-79060 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79060 Incorrect authorization in StorageAccessAPI
CVE-2026-79064 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79064 Use after free in Network
CVE-2026-79065 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79065 Improper input validation in Network
CVE-2026-79066 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79066 Improper input validation in Navigation
CVE-2026-79067 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-79067 Missing authorization in Network

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2025-6170CVSS 2.5Red Hat Insights proxy 1.5registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:296963717d1d077fc4a37a323ab0a34843b0b5d3eeaa15af0a5ca07b83dcd2c1_arm64Patch ↗Advisory ↗
Red HatCVE-2025-71072CVSS 2.5Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.46.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47010CVSS 3.7Red Hat Hardened Imagesjava-25-openjdk-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47010CVSS 3.7Red Hat Enterprise Linux Supplementary EUS (v. 10.0)java-21-ibm-semeru-certified-jdk-1:21.0.12.0.8-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47010CVSS 3.7Red Hat Enterprise Linux Supplementary (v. 8)java-1.8.0-ibm-1:1.8.0.8.70-1.el8_10.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-47059CVSS 3.7Red Hat Hardened Imagesjava-25-openjdk-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47059CVSS 3.7Red Hat Enterprise Linux Supplementary EUS (v. 10.0)java-21-ibm-semeru-certified-jdk-1:21.0.12.0.8-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47059CVSS 3.7Red Hat Enterprise Linux Supplementary (v. 8)java-1.8.0-ibm-1:1.8.0.8.70-1.el8_10.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-67316CVSS 3.7Red Hat Hardened Imagesgrafana13.1-0:13.1.1-0.5.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47010CVSS 3.7Red Hat Hardened Imagesjava-21-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47010CVSS 3.7Red Hat Hardened Imagesjava-21-openjdk-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47059CVSS 3.7Red Hat Hardened Imagesjava-21-openjdk-portable-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-47059CVSS 3.7Red Hat Hardened Imagesjava-21-openjdk-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-40469CVSS 2.8Red Hat Hardened Imagesgawk-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-67316CVSS 3.7Red Hat Hardened Imagesgrafana13.1-0:13.1.1-0.5.hum1@aarch64Patch ↗Advisory ↗

Glossary

Open in glossary