Patch Day month
September 2026 vulnerabilities
Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 2,269 vulnerabilities across 4,267 returned patch records from 4 vendors. Filter the month to date, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 14 of 22 · records 2,601 to 2,800 of 4,267
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-78408 ↗azl3 util-linux 2.40.2-5 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableUtil-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
CVE-2026-78410 ↗azl3 util-linux 2.40.2-5 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableUtil-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection
CVE-2026-83613 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablexmldom: Quadratic-time attribute deduplication
CVE-2026-83619 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablexmldom: End-tag Whitespace-Trim Regex ReDoS - quadratic backtracking in the 0.8.x end-tag parser
CVE-2026-80798 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablenfc: llcp: reject PDUs shorter than the LLCP header
CVE-2026-80799 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablenfc: llcp: fix OOB read and u8 offset wrap in TLV parsers
CVE-2026-80909 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: Reject UVD message with invalid number of h265 refs
CVE-2026-80791 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablenvmet-auth: zero the AUTH_RECEIVE response buffer
CVE-2026-80800 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablenfc: llcp: bound the connect_sn TLV walk to the skb
CVE-2026-80823 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablenfc: st21nfca: validate ATR_REQ length against the received frame
CVE-2026-83615 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablexmldom: Quadratic-memory consumption
CVE-2026-83614 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablexmldom: Quadratic-time parsing via the malformed-input recovery path - `parseElementStartPart` re-scan and `normalize()` adjacent-text merge
CVE-2026-83616 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablexmldom: Processing Instruction Target Injection Bypasses requireWellFormed
CVE-2026-83605 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablexmldom: Attribute name injection via setAttribute() bypasses requireWellFormed
CVE-2026-83608 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablexmldom: DocType `name` Injection Bypasses requireWellFormed
CVE-2026-83607 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablexmldom: Element name injection via createElement() bypasses requireWellFormed
CVE-2026-80789 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablenvmet-tcp: bound SGL data length before allocating command buffers
CVE-2026-80837 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablenetfilter: nf_tables: don't queue packet path object notifications
CVE-2026-80788 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablenvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations
CVE-2026-80792 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableipv6: fix use-after-free in ip6_finish_output2()
CVE-2026-80840 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableipv6: seg6: clear IPv4 control block on IPIP decapsulation
CVE-2026-80803 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablenfc: digital: clamp SENSF_RES length to the destination buffer
CVE-2026-33630 ↗azl3 fluent-bit 3.1.10-6 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablec-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP
CVE-2026-85091 ↗azl3 zlib 1.3.2-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablezlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-74990CVSS 7.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74990CVSS 7.5Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74990CVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-75838CVSS 7.3Red Hat Ansible Automation Platform 2.1registry.redhat.io/ansible-automation-platform/automation-portal@sha256:7145c54b94927bc64e9def7a47cb43b7706ee21d41f8dd97a08ea8ff1fcad65e_amd64Patch ↗Advisory ↗
Red HatCVE-2026-75838CVSS 7.3Red Hat Ansible Automation Platform 2.2registry.redhat.io/ansible-automation-platform/automation-portal@sha256:60327d55eb419b955cea0d2d0693d820fe31040a006a38146aa524240528afff_amd64Patch ↗Advisory ↗
Red HatCVE-2026-7867CVSS 7.8Red Hat Enterprise Linux AppStream EUS (v. 10.0)libudisks2-0:2.10.90-5.el10_0.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-84292CVSS 7.5Red Hat Ansible Automation Platform 2.1registry.redhat.io/ansible-automation-platform/automation-portal@sha256:7145c54b94927bc64e9def7a47cb43b7706ee21d41f8dd97a08ea8ff1fcad65e_amd64Patch ↗Advisory ↗
Red HatCVE-2026-84292CVSS 7.5Red Hat Ansible Automation Platform 2.2registry.redhat.io/ansible-automation-platform/automation-portal@sha256:60327d55eb419b955cea0d2d0693d820fe31040a006a38146aa524240528afff_amd64Patch ↗Advisory ↗
Red HatCVE-2026-84394CVSS 7.5Red Hat Ansible Automation Platform 2.1registry.redhat.io/ansible-automation-platform/automation-portal@sha256:7145c54b94927bc64e9def7a47cb43b7706ee21d41f8dd97a08ea8ff1fcad65e_amd64Patch ↗Advisory ↗
Red HatCVE-2026-84394CVSS 7.5Red Hat Ansible Automation Platform 2.2registry.redhat.io/ansible-automation-platform/automation-portal@sha256:60327d55eb419b955cea0d2d0693d820fe31040a006a38146aa524240528afff_amd64Patch ↗Advisory ↗
Red HatCVE-2026-9563CVSS 7.5Red Hat OpenShift AI 2.25registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:637af9f72d46dd9807946c1919bb91228802279a253c266a647898f4862e78ed_amd64Patch ↗Advisory ↗
Red HatCVE-2026-9697CVSS 7.4Red Hat OpenShift AI 2.25registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:14fd90291364ee65883c93d3d3f4c2f64a0f8dbdac25d4a9e72c4cdcd6a354d0_arm64Patch ↗Advisory ↗
Red HatCVE-2025-40064CVSS 7.1Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33810CVSS 8.8Red Hat Enterprise Linux AppStream (v. 10)buildah-2:1.43.1-5.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33818CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)rhc-1:0.3.8-7.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33818CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)aardvark-dns-2:1.10.1-2.module+el8.10.0+24790+ef71b018.aarch64::container-tools:rhel8Patch ↗Advisory ↗
Red HatCVE-2026-33818CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)buildah-2:1.43.1-5.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-42499CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)aardvark-dns-2:1.10.1-2.module+el8.10.0+24790+ef71b018.aarch64::container-tools:rhel8Patch ↗Advisory ↗
Red HatCVE-2026-42499CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)buildah-2:1.43.1-5.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45970CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46185CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-53073CVSS 7.0Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.51.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-53073CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-53391CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-53392CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-53397CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-53399CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56853CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)aardvark-dns-2:1.10.1-2.module+el8.10.0+24790+ef71b018.aarch64::container-tools:rhel8Patch ↗Advisory ↗
Red HatCVE-2026-56853CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)buildah-2:1.43.1-5.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56858CVSS 8.1Red Hat Enterprise Linux AppStream (v. 8)aardvark-dns-2:1.10.1-2.module+el8.10.0+24790+ef71b018.aarch64::container-tools:rhel8Patch ↗Advisory ↗
Red HatCVE-2026-56858CVSS 8.1Red Hat Enterprise Linux AppStream (v. 10)buildah-2:1.43.1-5.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56859CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)aardvark-dns-2:1.10.1-2.module+el8.10.0+24790+ef71b018.aarch64::container-tools:rhel8Patch ↗Advisory ↗
Red HatCVE-2026-56860CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)rhc-1:0.3.8-7.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56860CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)aardvark-dns-2:1.10.1-2.module+el8.10.0+24790+ef71b018.aarch64::container-tools:rhel8Patch ↗Advisory ↗
Red HatCVE-2026-56860CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)buildah-2:1.43.1-5.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56862CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)rhc-1:0.3.8-7.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56862CVSS 7.5Red Hat Enterprise Linux AppStream (v. 8)aardvark-dns-2:1.10.1-2.module+el8.10.0+24790+ef71b018.aarch64::container-tools:rhel8Patch ↗Advisory ↗
Red HatCVE-2026-56862CVSS 7.5Red Hat Enterprise Linux AppStream (v. 10)buildah-2:1.43.1-5.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-63800CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-63808CVSS 7.0Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.51.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-63808CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-63824CVSS 7.0Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.51.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-63824CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-63886CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-63887CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-64002CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-64298CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-64304CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-68145CVSS 7.0Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.51.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-68145CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-68166CVSS 7.3Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-68480CVSS 8.8Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-72069CVSS 7.0Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-72130CVSS 8.8Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.44.1.el9_8.aarch64Patch ↗Advisory ↗
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.