Patch Day month

September 2026 vulnerabilities

Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 2,359 vulnerabilities across 4,532 returned patch records from 4 vendors. Filter the month to date, or browse the static page trail without JavaScript.

4,532all patch recordsClear filters 239criticalShow these records 2Microsoft exploitation detectedShow these records 4Microsoft in the Known Exploited Vulnerabilities catalogShow these records 1,629tracked hereShow these records

Patch records: Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here: Records joined to a vulnerability record in this tracker.
Defender priority: Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely: Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.

Red Hat 2,993 Microsoft 1,240 Android 281 Cisco 18

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

#patch-filter-form, #patch-filter-loading { display: none !important; } Complete-month filters require JavaScript. The responsive records and ordinary page links below remain complete and usable.

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 23 of 23 · records 4,401 to 4,532 of 4,532

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle

CVE-2026-89156 ↗2026-09-12azl3 pcre2 10.42-3 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablePCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.

CVE-2026-89160 ↗2026-09-12azl3 pcre2 10.42-3 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablePCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.

CVE-2026-80918 ↗2026-09-11azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableHID: core: fix number/pointer type confusion on long items

CVE-2026-80920 ↗2026-09-11azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableio_uring: defer eventfd signaling when queued from a wakeup handler

CVE-2026-18540 ↗2026-09-09azl3 nodejs 24.20.0-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableundici vulnerable to downstream response splitting via retry interceptor

CVE-2026-80255 ↗2026-09-08azl3 rust 1.75.0-30 on Azure Linux 3.0LowNot availableMicrosoft rating unavailablesecure cookie attribute bypass with tab

CVE-2026-80230 ↗2026-09-08azl3 curl 8.11.1-11 on Azure Linux 3.0LowNot availableMicrosoft rating unavailableOpenSSL pinning bypass

CVE-2026-13608 ↗2026-09-08azl3 curl 8.11.1-11 on Azure Linux 3.0LowNot availableMicrosoft rating unavailableOpenLDAP SASL authentication bypass

CVE-2026-80231 ↗2026-09-08azl3 cmake 3.30.3-15 on Azure Linux 3.0LowNot availableMicrosoft rating unavailablenative CA store conn reuse

CVE-2026-80784 ↗2026-09-07azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablemptcp: pm: fix memory leak from alloc-during-teardown race

CVE-2026-80827 ↗2026-09-07azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableUSB: serial: option: fix slab OOB read in interrupt URB callback

CVE-2026-80893 ↗2026-09-07azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablemm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()

CVE-2026-80761 ↗2026-09-07azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableBluetooth: ISO: zero the sockaddr before returning it in getname

CVE-2026-80892 ↗2026-09-07azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableerofs: cap LZMA stream pool size

CVE-2026-80910 ↗2026-09-06azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses

CVE-2026-80797 ↗2026-09-06azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablenfc: pn533: purge fragmented skbs during cleanup

CVE-2026-80889 ↗2026-09-06azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablecan: isotp: fix timer drain order, wakeup handling and tx_gen ordering

CVE-2026-86137 ↗2026-09-06azl3 libxml2 2.11.5-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableIn libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.

CVE-2026-80843 ↗2026-09-06azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablexfrm: fix xfrm_state_construct() auth-trunc leak

CVE-2026-86141 ↗2026-09-06azl3 libxml2 2.11.5-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablexmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.

CVE-2026-80744 ↗2026-09-04azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablenetfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path

CVE-2026-18743 ↗2026-09-02azl3 popt 1.19-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablePopt-devel: popt-static: short realloc in poptconfigfiletostring

CVE-2026-76023 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming

CVE-2026-76022 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-76022: Buffer overflow in Network

CVE-2026-76021 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-76021: Use after free in DOM

CVE-2026-76019 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-76019: Incorrect authorization in Workers

CVE-2026-76018 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-76018: Privilege elevation in Import

CVE-2026-76017 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-76017: Use after free in Chromoting

CVE-2026-76039 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-76039: Incorrect reference resolution in Core

CVE-2026-76036 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band1%Microsoft rating unavailableChromium CVE-2026-76036: Buffer overflow in Dawn

CVE-2026-85053 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-85053: Improper resource exposure in CacheStorage

CVE-2026-85052 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-85052: Out of bounds read in CrashReporting

CVE-2026-85051 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-85051: Type confusion in Compositing

CVE-2026-85049 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-85049: Use after free in Skia

CVE-2026-85048 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-85048: Use after free in Compositing

CVE-2026-85045 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-85045: Race condition in V8

CVE-2026-85043 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-85043: Incomplete cleanup in Network

CVE-2026-85042 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-85042: Use after free in DevTools

CVE-2026-84333 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-84333 Use after free in Dawn

CVE-2026-84330 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-84330 UI misrepresentation in FullScreen

CVE-2026-84352 ↗2026-09-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium: CVE-2026-84352 Use after free in WebGL

CVE-2026-84323 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84323 Missing authorization in FileSystem

CVE-2026-84324 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84324 Use after free in Proxy

CVE-2026-84325 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84325 Improper input validation in DataTransfer

CVE-2026-84326 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84326 Uninitialized resource in V8

CVE-2026-84327 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84327 Incorrect authorization in Autofill

CVE-2026-84328 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84328 Missing authorization in FileSystem

CVE-2026-84329 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84329 Confused deputy in CredentialProvider

CVE-2026-84331 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84331 Incorrect authorization in Actor

CVE-2026-84332 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84332 Incorrect authorization in SiteSettings

CVE-2026-84334 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84334 Incorrect authorization in Chromoting

CVE-2026-84335 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84335 Incorrect authorization in TabStrip

CVE-2026-84347 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84347 Use after free in WebRTC

CVE-2026-84348 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84348 Information leak in MediaCapture

CVE-2026-84349 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84349 Use after free in Browser

CVE-2026-84350 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84350 Use after free in TabStrip

CVE-2026-84351 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84351 Buffer overflow in GPU

CVE-2026-84353 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84353 Use after free in Shared Tab Groups

CVE-2026-84354 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84354 Incorrect authorization in FileSystem

CVE-2026-84355 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84355 Incorrect authorization in Navigation

CVE-2026-84356 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84356 UI misrepresentation in FullScreen

CVE-2026-84357 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84357 Improper input validation in Omnibox

CVE-2026-84358 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84358 Improper privilege management in Downloads

CVE-2026-84359 ↗2026-09-08Microsoft Edge (Chromium-based)N/A0%Microsoft rating unavailable1 mentionsChromium: CVE-2026-84359 Information leak in Skia

CVE-2026-80822 ↗2026-09-11azl3 kernel 6.6.150.1-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailablemailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()

CVE-2026-80901 ↗2026-09-11azl3 kernel 6.6.150.1-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailableipvs: fix the checksum validations

CVE-2026-80887 ↗2026-09-11azl3 kernel 6.6.150.1-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/vmwgfx: use check_add_overflow for shader size+offset bound

CVE-2026-80883 ↗2026-09-06azl3 kernel 6.6.150.1-1 on Azure Linux 3.0N/AOut-of-bandNot availableMicrosoft rating unavailabledrm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory

Red HatCVE-2026-59844CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)libssh-debuginfo-0:0.10.4-19.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59844CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)libssh-debuginfo-0:0.9.6-17.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59845CVSS 5.3Red Hat Enterprise Linux AppStream (v. 9)libssh-debuginfo-0:0.10.4-19.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59845CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)libssh-debuginfo-0:0.9.6-17.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59847CVSS 5.9Red Hat Enterprise Linux AppStream (v. 9)libssh-debuginfo-0:0.10.4-19.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59847CVSS 5.9Red Hat Enterprise Linux AppStream (v. 8)libssh-debuginfo-0:0.9.6-17.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59848CVSS 5.3Red Hat Enterprise Linux AppStream (v. 9)libssh-debuginfo-0:0.10.4-19.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59848CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)libssh-debuginfo-0:0.9.6-17.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59850CVSS 4.3Red Hat Enterprise Linux AppStream (v. 9)libssh-debuginfo-0:0.10.4-19.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59850CVSS 4.3Red Hat Enterprise Linux AppStream (v. 8)libssh-debuginfo-0:0.9.6-17.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59888CVSS 6.5Red Hat OpenShift Dev Spaces 3.30registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64Patch ↗Advisory ↗

Red HatCVE-2026-64276CVSS 6.4Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.50.1.el10_2.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-64277CVSS 6.4Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.50.1.el10_2.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-69153CVSS 5.3Red Hat OpenShift Container Platform 4.22registry.redhat.io/openshift4/ose-console-rhel9@sha256:2606e2856430c12efdf947977a070de13c3f93d3f304608c411ed57b6de0c6c7_amd64Patch ↗Advisory ↗

Red HatCVE-2026-69153CVSS 5.3Red Hat OpenShift Dev Spaces 3.30registry.redhat.io/devspaces/openvsx-rhel9@sha256:560dd6062c5240e73ec60ecc13d402009b01e81ed452b6314c3817a2d116d575_amd64Patch ↗Advisory ↗

Red HatCVE-2026-7260CVSS 5.5Red Hat Enterprise Linux AppStream (v. 9)apcu-panel-0:5.1.23-1.module+el9.7.0+24111+199d2cc4.noarch::php:8.2Patch ↗Advisory ↗

Red HatCVE-2026-7260CVSS 5.5Red Hat Enterprise Linux AppStream (v. 8)apcu-panel-0:5.1.18-1.module+el8.10.0+22485+a3539972.noarch::php:7.4Patch ↗Advisory ↗

Red HatCVE-2026-59083trackedCVSS 3.7Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat9-1:9.0.120-1.el10_0.noarchPatch ↗Advisory ↗

Red HatCVE-2026-59084trackedCVSS 3.8Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat9-1:9.0.120-1.el10_0.noarchPatch ↗Advisory ↗

Red HatCVE-2026-66785trackedCVSS 2.5Red Hat Advanced Cluster Management for Kubernetes 2.17registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64Patch ↗Advisory ↗

Red HatCVE-2026-66788trackedCVSS 3.7Red Hat Advanced Cluster Management for Kubernetes 2.17registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64Patch ↗Advisory ↗

Red HatCVE-2026-18540CVSS 3.7Red Hat Hardened Imagesnodejs26-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-85498CVSS 3.5Red Hat Hardened Imagespolkit-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-18540CVSS 3.7Red Hat Hardened Imagesgrafana12-4-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-28378CVSS 3.1Red Hat Hardened Imagesgrafana12-4-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-41992CVSS 3.6Red Hat Enterprise Linux BaseOS (v. 8)gzip-0:1.9-15.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-41992CVSS 3.6Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:7840142734dad76221aa6846ab6e8aacc913a8017e4c5c956d574f78b8dfa98d_amd64Patch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)thunderbird-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)thunderbird-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)thunderbird-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)thunderbird-0:140.14.0-1.el9_2.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)firefox-0:140.14.0-1.el9_2.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)firefox-0:140.14.0-1.el9_2.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-85008CVSS 3.7Red Hat Hardened Imagesgrafana12-4-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.14.0-1.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.14.0-1.el10_2.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.14.0-1.el8_10.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗

Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗

Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗

Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗

Red HatCVE-2026-86137CVSS 2.9Red Hat Hardened Imageslibxml2-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-86141CVSS 2.9Red Hat Hardened Imageslibxml2-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-54891CVSS 3.7Red Hat Hardened Imageserlang27-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-65183CVSS 2.5Red Hat Hardened Imagestomcat10-main@noarchPatch ↗Advisory ↗

Red HatCVE-2026-66422CVSS 2.7Red Hat Hardened Imagestomcat10-main@noarchPatch ↗Advisory ↗

Red HatCVE-2026-82562CVSS 3.7Red Hat Hardened Imagesgrafana13-2-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2026-82562CVSS 3.7Red Hat Hardened Imagesgrafana13-1-main@aarch64Patch ↗Advisory ↗

Red HatCVE-2025-59436CVSS 3.2Red Hat Ceph Storage 8.1registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64Patch ↗Advisory ↗

Red HatCVE-2026-59846CVSS 3.9Red Hat Enterprise Linux AppStream (v. 9)libssh-debuginfo-0:0.10.4-19.el9_8.aarch64Patch ↗Advisory ↗

Red HatCVE-2026-59846CVSS 3.9Red Hat Enterprise Linux AppStream (v. 8)libssh-debuginfo-0:0.9.6-17.el8_10.aarch64Patch ↗Advisory ↗