CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Patch Day month

September 2026 vulnerabilities

Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 2,269 vulnerabilities across 4,267 returned patch records from 4 vendors. Filter the month to date, or browse the static page trail without JavaScript.

4,267all patch recordsClear filters229criticalShow these records2Microsoft exploitation detectedShow these records4Microsoft in the Known Exploited Vulnerabilities catalogShow these records1,579tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 20 of 22 · records 3,801 to 4,000 of 4,267

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-84233 ↗azl3 rpm 4.18.2-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames
CVE-2026-83611 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content
CVE-2026-83610 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
CVE-2026-56855 ↗azl3 kubevirt 1.7.1-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePrevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
CVE-2026-84303 ↗azl3 grpc 1.62.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion
CVE-2026-80888 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/vmwgfx: drop dma_buf reference on foreign-fd prime import
CVE-2026-80808 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext4: stop retrying saturated xattr cache entries
CVE-2026-80772 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()
CVE-2026-80806 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext4: don't enable DAX on new encrypted files
CVE-2026-80768 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: ft260: fix stack-use-after-return write in I2C read race
CVE-2026-80763 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: hci_event: validate LE Set CIG Parameters response
CVE-2026-80780 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: pidff: fix OOB write when hid->inputs is empty
CVE-2026-80890 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesctp: reject stale cookies with mismatched verification tags
CVE-2026-80861 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: xhci: bail out of setup if the controller is inaccessible
CVE-2026-80819 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept
CVE-2026-80905 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: tap: fix wrong transport_header when sending VLAN-tagged frame
CVE-2026-80771 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: nintendo: register input device after capabilities are set
CVE-2026-80829 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()
CVE-2026-80863 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/rxe: Fix OOB in free_rd_atomic_resources()
CVE-2026-80765 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: hyperv: validate initial device info bounds
CVE-2026-80826 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUSB: c67x00: fix use-after-free in c67x00_add_iso_urb()
CVE-2026-80782 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: magicmouse: do not keep a stale msc->input if no input is claimed
CVE-2026-80770 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: nintendo: stop device IO before hid_hw_stop on probe failure
CVE-2026-80847 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletcp: clamp route advmss to TCP_MIN_MSS
CVE-2026-80790 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenvmet-fc: fix invalid free in LS IOD error path
CVE-2026-80764 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: hci_event: fix LE list UAF on reset
CVE-2026-80833 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: sun8i-ss - Remove crypto_rng interface
CVE-2026-80851 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablegtp: serialize PDP context updates
CVE-2026-80832 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: qce - fix CCM AAD buffer underallocation
CVE-2026-80848 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfrm: espintcp: fix UAF during close
CVE-2026-80836 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: virtio - bound the akcipher result length
CVE-2026-80767 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: sensor: custom: Fix use-after-free in enable_sensor
CVE-2026-6554 ↗azl3 libpcap 1.10.6-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableinfinte loop in libpcap before 1.10.7
CVE-2026-31912 ↗azl3 libpcap 1.10.6-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableOOBR in libpcap before 1.10.7
CVE-2026-6244 ↗azl3 libpcap 1.10.6-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledivision by zero in libpcap before 1.10.7
CVE-2026-18313 ↗azl3 libpcap 1.10.6-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablerpcapd memory leak in libpcap before 1.10.7
CVE-2026-31911 ↗azl3 libpcap 1.10.6-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableabort() in libpcap before 1.10.7 on an invalid BPF opcode
CVE-2026-18238 ↗azl3 libpcap 1.10.6-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableOOBR in rpcap client in libpcap before 1.10.7
CVE-2026-80793 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipv4: reject undersized MTUs in ip_do_fragment()
CVE-2026-80852 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletls: device: fix out-of-bounds write in tls_append_frag()
CVE-2026-80854 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: gadget: f_tcm: keep port count until LUN teardown completes
CVE-2026-80824 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: usbfs: fix use-after-free of usb_device in usbdev_release()
CVE-2026-80842 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: bridge: mcast: fix use-after-free of a master VLAN's multicast context
CVE-2026-80904 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/tls: Fail tls_sw_splice_read() after a failed async decrypt
CVE-2026-80801 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenfc: microread: validate target discovery payload lengths
CVE-2026-80864 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp
CVE-2026-80805 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfs: validate attr entry pointer before field access
CVE-2026-80766 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: uclogic: fix use-after-free of inrange_timer on remove
CVE-2026-80807 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenilfs2: reject invalid block index in GC ioctl
CVE-2026-80796 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenfc: nci: add data_len bound checks to activation parameter extractors
CVE-2026-80794 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenfc: nci: fix uninit-value in the RF discover/activated NTF handlers
CVE-2026-80783 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()
CVE-2026-80872 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: hda/tas2781: Cancel async firmware request at unbind
CVE-2026-80762 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: hci_sync: Fix accept list UAF during suspend
CVE-2026-80891 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: s390: pci: Validate AIBV and AISB before pinning guest pages
CVE-2026-80855 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefuse: fix invalidate lock leak on open O_TRUNC DAX failure
CVE-2026-80802 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenfc: fdp: bound the device-reported read length and fix an skb leak
CVE-2026-80828 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: usb-audio: Complete cleanup after system-resume errors
CVE-2026-80809 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableocfs2: fix missing metadata reservation for large xattrs
CVE-2026-80866 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletipc: avoid busy looping in tipc_exit_net()
CVE-2026-80913 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableselinux: require every boolean value to be defined
CVE-2026-80902 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
CVE-2026-80820 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfs: don't livelock in scrub on a circular unlinked list
CVE-2026-80912 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableselinux: reject an unclaimed class value in security_get_classes()
CVE-2026-80785 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefbdev: serialize mode sysfs access with lock_fb_info()
CVE-2026-80846 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfrm: drop ESP-in-TCP packets with no ingress device
CVE-2026-86142 ↗azl3 libxml2 2.11.5-10 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.
CVE-2026-86139 ↗azl3 libxml2 2.11.5-10 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.
CVE-2026-80856 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefuse: fix invalidate lock leak on setattr writeback failure
CVE-2026-86138 ↗azl3 libxml2 2.11.5-10 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.
CVE-2026-80841 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/packet: defer vmalloc TX_RING free until skbs finish
CVE-2026-86143 ↗azl3 libxml2 2.11.5-10 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.
CVE-2026-80834 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: sun8i-ce - Remove crypto_rng interface
CVE-2026-86144 ↗azl3 libxml2 2.11.5-10 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableIn xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET flag, if (without it) a custom resource loader accesses the internet and triggers XML external entity injection, SSRF, or a denial of service (e.g., for an attacker-controlled internet resource that is intentionally slow).
CVE-2026-80844 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexfrm: ah6: validate routing header segments_left
CVE-2026-80830 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: core: Add lock to usb_wakeup_notification()
CVE-2026-80831 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: mxs-dcp - fix source scatterlist length access

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-74962CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74962CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74962CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74962CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74962CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.14.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74962CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.14.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74962CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.14.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74962CVSS 6.1Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-74962CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74962CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74962CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.14.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.14.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.14.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74963CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74964CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74964CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74964CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74964CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74964CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74964CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74964CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.14.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74964CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.14.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74964CVSS 6.1Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-74964CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74965CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74965CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74965CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74965CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74965CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74965CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74965CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.14.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74965CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.14.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74965CVSS 6.1Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-74965CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74965CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74967CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74967CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74967CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74967CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74967CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74967CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74967CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.14.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74967CVSS 6.1Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-74969CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74969CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74969CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74969CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74969CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74969CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74969CVSS 6.1Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.14.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.14.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.14.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74971CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.14.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.14.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.14.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74972CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.14.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.14.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.14.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74973CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.14.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.14.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.14.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74974CVSS 6.1Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-76957CVSS 4.9Red Hat Hardened Imagesexpat-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-78701CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)389-ds-base-0:2.8.0-10.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-78701CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)389-ds-base-0:3.2.0-10.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-78701CVSS 6.5Red Hat Directory Server 13.2registry.redhat.io/dirsrv/dirsrv-container-rhel10@sha256:d69a0f6a61eb3bd773e4b49be6b6093dd413e7a3a24b30df31d804031f3b5889_amd64Patch ↗Advisory ↗
Red HatCVE-2026-8595CVSS 5.7Red Hat Hardened Imagesgrafana12-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-8609CVSS 5.3Red Hat Hardened Imagesgrafana12-4-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-86138CVSS 6.9Red Hat Hardened Imageslibxml2-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-86139CVSS 6.9Red Hat Hardened Imageslibxml2-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-86142CVSS 6.9Red Hat Hardened Imageslibxml2-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-86143CVSS 6.9Red Hat Hardened Imageslibxml2-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-86144CVSS 5.6Red Hat Hardened Imageslibxml2-main@aarch64Patch ↗Advisory ↗

Glossary