Vulnerabilities
August 2026 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 1 vulnerability with exploitation detected in the wild this month. This defender-focused view covers 6,966 vulnerabilities across 19,043 returned patch records from 5 vendors. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 96 of 96 · records 19,001 to 19,043 of 19,043
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2024-47702 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablebpf: Fail verification for sign-extension of packet data/data_end/data_meta
CVE-2024-57872 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablescsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
CVE-2024-53050 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/i915/hdcp: Add encoder check in hdcp2_get_capability
CVE-2024-42107 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailableice: Don't process extts if PTP is disabled
CVE-2024-50090 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/xe/oa: Fix overflow in oa batch buffer
CVE-2024-50091 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailabledm vdo: don't refer to dedupe_context after releasing it
CVE-2024-26962 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape
CVE-2024-53051 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
CVE-2024-27010 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablenet/sched: Fix mirred deadlock on device recursion
CVE-2025-21723 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablescsi: mpi3mr: Fix possible crash when setting up bsg fails
CVE-2024-53224 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailableRDMA/mlx5: Move events notifier registration to be after device registration
CVE-2024-49970 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Implement bounds check for stream encoder creation in DCN401
CVE-2024-47703 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailablebpf, lsm: Add check for BPF LSM return value
CVE-2024-50102 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablex86: fix user address masking non-canonical speculation issue
CVE-2024-37021 ↗cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailablefpga: manager: add owner module and take its refcount
CVE-2024-56702 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablebpf: Mark raw_tp arguments with PTR_MAYBE_NULL
CVE-2025-21672 ↗azl3 kernel 6.6.112.1-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailableafs: Fix merge preference rule failure condition
CVE-2024-53056 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
CVE-2024-58012 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailableASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
CVE-2024-46823 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailablekunit/overflow: Fix UB in overflow_allocation_test
CVE-2024-53084 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/imagination: Break an object reference loop
CVE-2024-49990 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/xe/hdcp: Check GSC structure validity
CVE-2024-46787 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailableuserfaultfd: fix checks for huge PMDs
CVE-2024-49918 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
CVE-2024-50187 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/vc4: Stop the active perfmon before being destroyed
CVE-2024-46778 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Check UnboundedRequestEnabled's value
CVE-2024-46775 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Validate function returns
CVE-2024-49916 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hw
CVE-2023-4134 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailableKernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()
CVE-2024-56742 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablevfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
CVE-2025-21833 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailableiommu/vt-d: Avoid use of NULL after WARN_ON_ONCE
CVE-2024-49908 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
CVE-2024-38625 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailablefs/ntfs3: Check 'folio' pointer for NULL
CVE-2024-27079 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailableiommu/vt-d: Fix NULL domain on device release
CVE-2024-26775 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailableaoe: avoid potential deadlock at set_capacity
CVE-2024-49910 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: Add NULL check for function pointer in dcn401_set_output_transfer_func
CVE-2024-50225 ↗azl3 kernel 6.6.96.2-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablebtrfs: fix error propagation of split bios
CVE-2024-50004 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35
CVE-2024-56557 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailableiio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
CVE-2024-50178 ↗azl3 kernel 6.6.96.2-2 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablecpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()
CVE-2024-42139 ↗azl3 kernel 6.6.104.2-4 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailableice: Fix improper extts handling
CVE-2024-47658 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0N/AOut-of-bandNot availableMicrosoft rating unavailablecrypto: stm32/cryp - call finalize with bh disabled
CVE-2024-50277 ↗azl3 kernel 6.6.96.1-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledm: fix a crash if blk_alloc_disk fails
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.