CYBERSECURITYTRACKER
TRACKING7,324 stories in this site build1,532 vulnerability news stories in this site build
Vulnerabilities

September 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 3,551 vulnerabilities across 7,669 returned patch records from 4 vendors. Filter the month to date, or browse the static page trail without JavaScript.

7,669all patch recordsClear filters335criticalShow these records2Microsoft exploitation detectedShow these records4Microsoft in the Known Exploited Vulnerabilities catalogShow these records2,539tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 33 of 39 · records 6,401 to 6,600 of 7,669

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-89539 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSUNRPC: reject duplicate CREDS_VALUE options
CVE-2026-80980 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/smc: stop killed, freed and out_of_sync sharing a byte
CVE-2026-89544 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSUNRPC: fix gssx_dec_option_array error path bugs
CVE-2026-89481 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenvme-tcp: fix host memory disclosure on R2T for a read command
CVE-2026-89531 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesvcrdma: Reject connection when transport allocation fails
CVE-2026-80999 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO
CVE-2026-18090 ↗azl3 gdk-pixbuf2 2.42.10-5 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block
CVE-2026-87875 ↗azl3 cups 2.4.19-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableCups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound
CVE-2026-89699 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenfsd: validate symlink target length in NFSv4 CREATE
CVE-2026-89709 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelockd, nfsd: RCU-protect nlmsvc_ops dispatch
CVE-2026-80947 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop
CVE-2026-89756 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/migrate: report RCU-tasks quiescent states in migrate_pages_batch()
CVE-2026-89642 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecifs: call pagecache_isize_extended() in cifs_setsize() when extending
CVE-2026-89564 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableip: orphan prefetched skbs before multicast forwarding
CVE-2026-80931 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablew1: ds28e17: reject an oversize length on an I2C block read
CVE-2026-89448 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiommu/vt-d: Force requesting ACS when tboot is enabled
CVE-2026-89487 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableopenvswitch: only skb_tx_error() a packet we are about to drop
CVE-2026-81005 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipmi: si: Fix NULL pointer dereference after failed registration
CVE-2026-89604 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableefivarfs: Rate limit statfs() handler
CVE-2026-89657 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelibceph: validate OSD extent maps before cursor advance
CVE-2026-89567 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablejbd2: bound shrinker scans by examined checkpoint buffers
CVE-2026-89729 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature
CVE-2026-89753 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()
CVE-2026-89469 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepower: supply: lp8727: fix use-after-free in lp8727_release_irq()
CVE-2026-89573 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledm array: reject an array block whose value size is not the caller's
CVE-2026-80994 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: openvswitch: fix flow mask use-after-free on flow deletion
CVE-2026-80952 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablei3c: master: Fix info leak and UAF in device unregister path
CVE-2026-89625 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind
CVE-2026-81002 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexdp: fix zero-copy frame layout
CVE-2026-89762 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableapparmor: fix cred UAF caused by begin_current_label_crit_section()
CVE-2026-89598 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefbdev: ssd1307fb: defer I2C transfers from damage callbacks
CVE-2026-89540 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesunrpc: init gssp_lock before publishing proc entry
CVE-2026-89550 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSUNRPC: svcauth_gss: enforce krb5 token minimum length
CVE-2026-89746 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletracing: Fix use-after-free with same-name named triggers
CVE-2026-89632 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()
CVE-2026-89740 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableserial: imx: serialize imx_uart_ports[] lifetime
CVE-2026-89548 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSUNRPC: always drain cache_cleaner before destroying a cache_detail
CVE-2026-89741 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRevert "media: v4l2-dev: fix error handling in __video_register_device()"
CVE-2026-80991 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: ravb: serialize PTP clock teardown
CVE-2026-89569 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableBluetooth: RFCOMM: serialize security confirmation handling
CVE-2026-89742 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablerapidio: mport_cdev: fix use-after-free in dma_req_free()
CVE-2026-89755 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/migrate_device: clear stale mapping after freeing swapcache
CVE-2026-89510 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/cxgb4: Cancel reg_work before freeing device on remove
CVE-2026-89726 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()
CVE-2026-89476 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesctp: fix stream->outcnt underflow on duplicate RECONF responses
CVE-2026-89547 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSUNRPC: Check svc pool percpu counter allocation
CVE-2026-89537 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2
CVE-2026-80979 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/smc: unregister the connection before draining the rx tasklet
CVE-2026-89538 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSUNRPC: Reject krb5 v2 wrap tokens with oversized ec field
CVE-2026-89611 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablentfs: validate non-resident attribute offsets
CVE-2026-89158 ↗azl3 pcre2 10.42-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.
CVE-2026-89157 ↗azl3 rust 1.96.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.
CVE-2026-78135 ↗azl3 strongswan 5.9.14-10 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelibcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.
CVE-2026-78129 ↗azl3 strongswan 5.9.14-10 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablestrongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
CVE-2026-89092 ↗azl3 glibc 2.38-21 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableStack overflow in nscd due to unbounded alloca use
CVE-2026-80917 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
CVE-2026-80923 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexhci: dbgtty: Fix unregister on tty_register_driver() failure
CVE-2026-80925 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablevlan: fix skb_under_panic and races when toggling HW VLAN offload
CVE-2026-18149 ↗azl3 nodejs 24.18.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableundici vulnerable to Denial of Service via orphaned RetryHandler response body
CVE-2026-85769 ↗azl3 libtpms 0.9.6-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize
CVE-2026-85534 ↗azl3 libsoup 3.4.4-16 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read
CVE-2026-71224 ↗azl3 gfs2-utils 3.5.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk
CVE-2026-71219 ↗azl3 gfs2-utils 3.5.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal
CVE-2026-71222 ↗azl3 gfs2-utils 3.5.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableGfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-87910CVSS 5.7Red Hat Hardened Imagespython-unversioned-command-0:3.14.7-1.2.hum1@noarch@public-hummingbird-aarch64-rpmsPatch ↗Advisory ↗
Red HatCVE-2026-87910CVSS 5.7Red Hat Hardened Imagespython3.10-0:3.10.21-1.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-87910CVSS 5.7Red Hat Hardened Imagespython3.11-0:3.11.16-1.3.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-87910CVSS 5.7Red Hat Hardened Imagespython3.13-0:3.13.15-1.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-87910CVSS 5.7Red Hat Hardened Imagespython3.12-0:3.12.14-1.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-89157CVSS 5.7Red Hat Hardened Imagespcre2-0:10.48-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-89158CVSS 6.5Red Hat Hardened Imagespcre2-0:10.48-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-9076CVSS 5.9Red Hat Hardened Imagesbootupd-0:0.3.2-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90771CVSS 5.9Red Hat Hardened Imagesgrafana13.1-0:13.1.3-0.9.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90771CVSS 5.9Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.4.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90771CVSS 5.9Red Hat Hardened Imagesgrafana12.4-0:12.4.10-0.3.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-9669CVSS 5.9Red Hat Hardened Imagespython-unversioned-command-0:3.14.7-1.2.hum1@noarch@public-hummingbird-aarch64-rpmsPatch ↗Advisory ↗
Red HatCVE-2024-42516CVSS 6.8Red Hat Enterprise Linux AppStream E4S (v.9.2)httpd-0:2.4.53-11.el9_2.15.srcPatch ↗Advisory ↗
Red HatCVE-2025-22866CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)osbuild-composer-0:101.5-3.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-57847CVSS 6.4Red Hat Ansible Automation Platform 2.7registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:0ac29c4d6fdab1566a2072b03beba03ee03672c11dc5302b5e60d27205c551bc_amd64Patch ↗Advisory ↗
Red HatCVE-2025-68745CVSS 4.7Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.47.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-18369CVSS 5.8Red Hat Certificate System 10.4 EUS for RHEL 8idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.noarch::redhat-pki:10Patch ↗Advisory ↗
Red HatCVE-2026-2340CVSS 6.5Red Hat OpenShift Container Platform 4.14rhcos-aarch64-414.92.202609011250-0Patch ↗Advisory ↗
Red HatCVE-2026-23466CVSS 5.5Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.47.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-29167CVSS 4.6Red Hat Enterprise Linux AppStream E4S (v.9.2)httpd-0:2.4.53-11.el9_2.15.srcPatch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AppStream (v. 8)osbuild-composer-0:101.5-3.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AppStream EUS (v. 10.0)git-lfs-0:3.6.1-2.el10_0.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AppStream EUS (v.9.6)git-lfs-0:3.6.1-2.el9_6.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32281CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.9.2)git-lfs-0:3.2.0-2.el9_2.10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33007CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.2)httpd-0:2.4.53-11.el9_2.15.srcPatch ↗Advisory ↗
Red HatCVE-2026-3833CVSS 6.5Red Hat OpenShift Container Platform 4.14rhcos-aarch64-414.92.202609011250-0Patch ↗Advisory ↗
Red HatCVE-2026-42498CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat9-1:9.0.120-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-42498CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat-1:10.1.49-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-42502CVSS 6.1Red Hat Enterprise Linux AppStream (v. 9)image-builder-0:52.1-2.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-42502CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)image-builder-0:52.1-2.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-43368CVSS 5.5Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.47.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-43512CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat9-1:9.0.120-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43512CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat-1:10.1.49-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43513CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat9-1:9.0.120-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43513CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat-1:10.1.49-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43515CVSS 5.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat9-1:9.0.120-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43515CVSS 5.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat-1:10.1.49-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43951CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.2)httpd-0:2.4.53-11.el9_2.15.srcPatch ↗Advisory ↗
Red HatCVE-2026-53196CVSS 6.8Red Hat Enterprise Linux AppStream EUS (v. 10.0)kernel-64k-debug-debuginfo-0:6.12.0-55.104.1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-53789CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)rsync-daemon-0:3.2.7-1.el9_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-53789CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)rsync-daemon-0:3.5.0-3.el10_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-63073CVSS 5.9Red Hat Enterprise Linux AppStream (v. 10)openssl-debuginfo-1:3.5.8-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-63073CVSS 5.9Red Hat Enterprise Linux AppStream (v. 9)openssl-debuginfo-1:3.5.8-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-68406CVSS 5.5Red Hat Enterprise Linux AppStream (v. 9)kernel-64k-debug-debuginfo-0:5.14.0-687.47.1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-69153CVSS 5.3Red Hat Ansible Automation Platform 2.7registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:9ac5e5385f153f9609c213b40932dac31b9095781f8ad1ce41c5af571ddf2aa4_arm64Patch ↗Advisory ↗
Red HatCVE-2026-70453CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)rsync-daemon-0:3.2.7-1.el9_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-70453CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)rsync-daemon-0:3.5.0-3.el10_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-70454CVSS 6.8Red Hat Enterprise Linux AppStream (v. 9)rsync-daemon-0:3.2.7-1.el9_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-70454CVSS 6.8Red Hat Enterprise Linux AppStream (v. 10)rsync-daemon-0:3.5.0-3.el10_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-70457CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)rsync-daemon-0:3.2.7-1.el9_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-70457CVSS 6.5Red Hat Enterprise Linux AppStream (v. 10)rsync-daemon-0:3.5.0-3.el10_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-71225CVSS 6.5Red Hat Enterprise Linux BaseOS (v. 9)libkcapi-0:1.4.0-3.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71225CVSS 6.5Red Hat Enterprise Linux BaseOS (v. 8)libkcapi-0:1.4.0-3.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71225CVSS 6.5Red Hat Enterprise Linux BaseOS (v. 10)libkcapi-0:1.5.1-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71227CVSS 5.1Red Hat Enterprise Linux BaseOS (v. 9)libkcapi-0:1.4.0-3.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71227CVSS 5.1Red Hat Enterprise Linux BaseOS (v. 8)libkcapi-0:1.4.0-3.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71227CVSS 5.1Red Hat Enterprise Linux BaseOS (v. 10)libkcapi-0:1.5.1-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-90781CVSS 6.1Red Hat Hardened Imagesalsa-lib-0:1.2.16.1-2.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2024-5535CVSS 5.9Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)openssl-0:1.0.1e-61.el6_10.1.i686Patch ↗Advisory ↗
Red HatCVE-2026-39817CVSS 5.9Red Hat Hardened Imagesgolang1.27-0:1.27.1-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-39819CVSS 4.4Red Hat Hardened Imagesgolang1.27-0:1.27.1-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-39827CVSS 6.5Red Hat Hardened Imagesgolang1.27-0:1.27.1-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-39834CVSS 6.5Red Hat Hardened Imagesgolang1.27-0:1.27.1-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-42500CVSS 6.5Red Hat Hardened Imagesgolang1.27-0:1.27.1-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-42502CVSS 6.1Red Hat Enterprise Linux AppStream (v. 10)osbuild-composer-0:165.1-5.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-42502CVSS 6.1Red Hat Hardened Imagesgolang1.27-0:1.27.1-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-46598CVSS 5.3Red Hat Hardened Imagesgolang1.27-0:1.27.1-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-85024CVSS 5.9Red Hat Hardened Imagesnodejs26-0:26.8.2-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-87875CVSS 4.3Red Hat Hardened Imagescups-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2024-42516CVSS 6.8Red Hat Enterprise Linux AppStream E4S (v.9.4)httpd-0:2.4.57-11.el9_4.5.srcPatch ↗Advisory ↗
Red HatCVE-2025-49506CVSS 5.9Red Hat Enterprise Linux AppStream (v. 9)apr-util-0:1.6.1-23.el9_8.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-49506CVSS 5.9Red Hat Enterprise Linux AppStream (v. 10)apr-util-0:1.6.3-23.el10_2.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-57847CVSS 6.4Red Hat Ansible Automation Platform 2.16registry.redhat.io/ansible-automation-platform/ee-minimal-rhel9@sha256:010515c2961a0678ac9d9cc8433d070eafee3a42cbd912cc33b2a90cf4bdfeab_arm64Patch ↗Advisory ↗
Red HatCVE-2025-57847CVSS 6.4Red Hat Ansible Automation Platform 2.16registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8@sha256:90c278932cf4f671c619847f62d488aba35910fc6c32a2b8534555b142c04eb5_ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-57847CVSS 6.4Red Hat Ansible Automation Platform 2.18registry.redhat.io/ansible-automation-platform/ee-minimal-rhel9@sha256:44d9d7510af0d0130cf10e13b8050ec52ae79ebc9ca61a40cdb9c53e972937f6_arm64Patch ↗Advisory ↗
Red HatCVE-2025-57847CVSS 6.4Red Hat Ansible Automation Platform 2.18registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8@sha256:303597f4880d58e47e7f02468bf8aea911cb268c4ab0ea7fd4b124e5d38d38ff_ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-68745CVSS 4.7Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.162.1.rt7.503.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2025-68745CVSS 4.7Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.162.1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-9230CVSS 5.6Red Hat OpenShift Container Platform 4.16rhcos-aarch64-416.94.202609011112-0Patch ↗Advisory ↗
Red HatCVE-2026-0636CVSS 6.5Red Hat AMQ Broker 7.14.1Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-10051CVSS 5.3Red Hat AMQ Broker 7.14.1Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-10051CVSS 5.3Red Hat AMQ Broker 7.13.6Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-10723CVSS 6.8Red Hat OpenShift Container Platform 4.16rhcos-aarch64-416.94.202609011112-0Patch ↗Advisory ↗
Red HatCVE-2026-15789CVSS 6.5Red Hat Hardened Imagestrivy-0:0.74.0-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15792CVSS 6.5Logging Subsystem for Red Hat OpenShift 6.6registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:7a67cfa1080e9907b11e848e57248585fe9abc116c52c27219da2a0bcb14dd48_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-15792CVSS 6.5Red Hat Quay 3.12registry.redhat.io/quay/quay-rhel8@sha256:17ec4316e8933a1a3939063b888726312670dc3078390737a368971342fc8941_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-2340CVSS 6.5Red Hat OpenShift Container Platform 4.16rhcos-aarch64-416.94.202609011112-0Patch ↗Advisory ↗
Red HatCVE-2026-28420CVSS 4.4Red Hat Enterprise Linux AppStream (v. 10)vim-X11-2:9.1.083-9.el10_2.20.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28420CVSS 4.4Red Hat Enterprise Linux AppStream (v. 8)vim-X11-2:8.0.1763-31.el8_10.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28420CVSS 4.4Red Hat Enterprise Linux AppStream (v. 9)vim-X11-2:8.2.2637-26.el9_8.21.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-29167CVSS 4.6Red Hat Enterprise Linux AppStream E4S (v.9.4)httpd-0:2.4.57-11.el9_4.5.srcPatch ↗Advisory ↗
Red HatCVE-2026-32327CVSS 6.2Red Hat Enterprise Linux AppStream (v. 9)apr-util-0:1.6.1-23.el9_8.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-32327CVSS 6.2Red Hat Enterprise Linux AppStream (v. 10)apr-util-0:1.6.3-23.el10_2.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33007CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.4)httpd-0:2.4.57-11.el9_4.5.srcPatch ↗Advisory ↗
Red HatCVE-2026-34478CVSS 5.8Red Hat AMQ Broker 7.14.1Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-34478CVSS 5.8Red Hat AMQ Broker 7.13.6Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-34480CVSS 5.3Red Hat AMQ Broker 7.14.1Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-34480CVSS 5.3Red Hat AMQ Broker 7.13.6Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-34481CVSS 6.5Red Hat AMQ Broker 7.14.1Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-34481CVSS 6.5Red Hat AMQ Broker 7.13.6Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-35469CVSS 6.5Logging Subsystem for Red Hat OpenShift 6.6registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:7a67cfa1080e9907b11e848e57248585fe9abc116c52c27219da2a0bcb14dd48_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-3833CVSS 6.5Red Hat OpenShift Container Platform 4.16rhcos-aarch64-416.94.202609011112-0Patch ↗Advisory ↗
Red HatCVE-2026-43951CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.4)httpd-0:2.4.57-11.el9_4.5.srcPatch ↗Advisory ↗
Red HatCVE-2026-46604CVSS 6.5Logging Subsystem for Red Hat OpenShift 6.6registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:7a67cfa1080e9907b11e848e57248585fe9abc116c52c27219da2a0bcb14dd48_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-4897CVSS 5.5Red Hat Hardened Imagespolkit-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-49363CVSS 5.3Red Hat AMQ Broker 7.14.1Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-49363CVSS 5.3Red Hat AMQ Broker 7.13.6Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-52859CVSS 5.0Red Hat Enterprise Linux AppStream (v. 10)vim-X11-2:9.1.083-9.el10_2.20.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-52859CVSS 5.0Red Hat Enterprise Linux AppStream (v. 8)vim-X11-2:8.0.1763-31.el8_10.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-52859CVSS 5.0Red Hat Enterprise Linux AppStream (v. 9)vim-X11-2:8.2.2637-26.el9_8.21.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55892CVSS 5.5Red Hat Enterprise Linux AppStream (v. 10)vim-X11-2:9.1.083-9.el10_2.20.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55892CVSS 5.5Red Hat Enterprise Linux AppStream (v. 8)vim-X11-2:8.0.1763-31.el8_10.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-55892CVSS 5.5Red Hat Enterprise Linux AppStream (v. 9)vim-X11-2:8.2.2637-26.el9_8.21.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-56392CVSS 4.4Red Hat Enterprise Linux BaseOS (v. 9)coreutils-0:8.32-41.el9_8.1.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-5704CVSS 5.0Red Hat Hardened Imagestar-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-57822CVSS 4.9Red Hat AMQ Broker 7.14.1Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-57822CVSS 4.9Red Hat AMQ Broker 7.13.6Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-59857CVSS 5.5Red Hat Enterprise Linux AppStream (v. 10)vim-X11-2:9.1.083-9.el10_2.20.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59857CVSS 5.5Red Hat Enterprise Linux AppStream (v. 8)vim-X11-2:8.0.1763-31.el8_10.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59857CVSS 5.5Red Hat Enterprise Linux AppStream (v. 9)vim-X11-2:8.2.2637-26.el9_8.21.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59888CVSS 6.5Red Hat AMQ Broker 7.13.6Not reportedPatch ↗Advisory ↗
Red HatCVE-2026-69153CVSS 5.3Red Hat Quay 3.12registry.redhat.io/quay/quay-rhel8@sha256:17ec4316e8933a1a3939063b888726312670dc3078390737a368971342fc8941_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-75593CVSS 6.5Logging Subsystem for Red Hat OpenShift 6.6registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:7a67cfa1080e9907b11e848e57248585fe9abc116c52c27219da2a0bcb14dd48_ppc64lePatch ↗Advisory ↗
Red HatCVE-2021-47600CVSS 4.4Red Hat Enterprise Linux BaseOS AUS (v.8.4)bpftool-0:4.18.0-305.206.1.el8_4.x86_64Patch ↗Advisory ↗
Red HatCVE-2023-52924CVSS 5.5Red Hat Enterprise Linux BaseOS AUS (v.8.4)bpftool-0:4.18.0-305.206.1.el8_4.x86_64Patch ↗Advisory ↗
Red HatCVE-2024-45336CVSS 5.9Red Hat Enterprise Linux AppStream (v. 8)osbuild-composer-0:101.5-2.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2024-9355CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)osbuild-composer-0:101.5-2.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-10618CVSS 5.4Red Hat Hardened Imageshugo-0:0.166.0-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-11979CVSS 4.8Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:7840142734dad76221aa6846ab6e8aacc913a8017e4c5c956d574f78b8dfa98d_amd64Patch ↗Advisory ↗
Red HatCVE-2026-15588CVSS 5.3Red Hat Enterprise Linux BaseOS AUS (v.8.4)glib2-0:2.56.4-10.el8_4.7.i686Patch ↗Advisory ↗
Red HatCVE-2026-15588CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v.9.6)glib2-debuginfo-0:2.68.4-16.el9_6.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15588CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v. 10.0)glib2-debuginfo-0:2.80.4-4.el10_0.17.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15588CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.2)glib2-debuginfo-0:2.68.4-7.el9_2.7.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15588CVSS 5.3Red Hat Enterprise Linux BaseOS AUS (v.8.6)glib2-0:2.56.4-158.el8_6.7.i686Patch ↗Advisory ↗
Red HatCVE-2026-15588CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.4)glib2-debuginfo-0:2.68.4-14.el9_4.8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15588CVSS 5.3Red Hat Enterprise Linux BaseOS E4S (v.8.8)glib2-0:2.56.4-165.el8_8.2.i686Patch ↗Advisory ↗

Glossary