Vulnerabilities
September 2026 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 7,002 vulnerabilities across 25,811 returned patch records from 6 vendors. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 38 of 130 · records 7,401 to 7,600 of 25,811
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-91748 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91748: Race condition
CVE-2026-91747 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91747: Use after free
CVE-2026-91746 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91746: Integer overflow
CVE-2026-91745 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91745: Use after free
CVE-2026-91744 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91744: Race condition
CVE-2026-91743 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91743: Race condition
CVE-2026-91741 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91741: Type confusion
CVE-2026-91740 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91740: Uninitialized resource
CVE-2026-91737 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91737: Use after free
CVE-2026-91736 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91736: Use after free
CVE-2026-91735 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91735: Incorrect authorization
CVE-2026-91734 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91734: Incorrect authorization
CVE-2026-91733 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91733: Improper state validation
CVE-2026-91731 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91731: Type confusion
CVE-2026-91729 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91729: Use after free
CVE-2026-91728 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91728: Integer overflow
CVE-2026-91727 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91727: Incorrect reference resolution
CVE-2026-91724 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91724: Use after free
CVE-2026-91720 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91720: Uninitialized resource
CVE-2026-91718 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91718: Use after free
CVE-2026-91717 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91717: Missing authorization
CVE-2026-91716 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91716: Use after free
CVE-2026-91715 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91715: Type confusion
CVE-2026-91712 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91712: Race condition
CVE-2026-91711 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91711: Out of bounds write
CVE-2026-91710 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91710: Use after free
CVE-2026-91709 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91709: Type confusion
CVE-2026-91708 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium CVE-2026-91708: Race condition
CVE-2026-81642 ↗azl3 unbound 1.26.0-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailable1 mentionsHeap buffer overflow and possible Remote Code Execution when digesting DNSKEY
CVE-2026-89854 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablescsi: qla2xxx: Fix cs84xx use-after-free on host teardown
CVE-2026-90049 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablenet: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()
CVE-2026-89789 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablegtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free
CVE-2026-82717 ↗azl3 unbound 1.26.0-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableCNAME synthesis could lead to heap corruption
CVE-2026-90002 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableftrace: Take trace_array reference before accessing its ftrace_ops
CVE-2026-89811 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailabledrm/amdkfd: Add TLB flush after MES queue eviction/suspension
CVE-2026-89890 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemedia: go7007: defer the ALSA v4l2 put until card release
CVE-2026-89849 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablescsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
CVE-2026-90018 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablestaging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
CVE-2026-90022 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableusb: gadget: f_midi2: fix use-after-free in string attribute show path
CVE-2026-90027 ↗azl3 kernel 6.6.157.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableusb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop
CVE-2026-89920 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableKVM: s390: Fix memory corruption by not reinjecting CK machine checks
CVE-2026-89801 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailabledrm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE
CVE-2026-89856 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablescsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
CVE-2026-89888 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemedia: i2c: ov02a10: fix endpoint parsing use-after-free
CVE-2026-89995 ↗azl3 kernel 6.6.157.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailabledma-direct: return struct page from dma_direct_alloc_from_pool()
CVE-2026-89799 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablebpf: Disable preemption in bpf_get_stackid
CVE-2026-89861 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablescsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
CVE-2026-89793 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableublk: clear VM_MAYWRITE on read-only ublk char device mmap
CVE-2026-89902 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableLoongArch: Avoid preempt count underflow without probe
CVE-2026-89932 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableKVM: nVMX: Always flush vpid02 on first use
CVE-2026-90041 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableHID: sony: clean up device list on probe failure
CVE-2026-89786 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableext4: fix out-of-bounds read in ext4_read_inline_dir()
CVE-2026-90025 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableusb: typec: ucsi: displayport: Fix OOB altmode array index
CVE-2026-89823 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailabledrm: fix race between partial drm_dev_register() failure and ioctl
CVE-2026-90032 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemedia: usbtv: keep device alive while ALSA card exists
CVE-2026-89883 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemedia: rc: sunxi-cir: Unregister rc device on probe failure
CVE-2026-89870 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemedia: zoran: Avoid freeing a registered video_device twice
CVE-2026-89913 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableKVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
CVE-2026-89929 ↗azl3 kernel 6.6.157.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableKVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
CVE-2026-89777 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablevfio/pci: clear vdev->msi_perm after freeing it on init failure
CVE-2026-89906 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableLoongArch: BPF: Refactor jump offset calculation in tail call
CVE-2026-89779 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablefs/ntfs3: validate ef->size covers the record's name and value
CVE-2026-90007 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablescsi: pm8001: Use rollback index when freeing MSI-X vectors
CVE-2026-89899 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemedia: cec: disable delayed work before freeing an interrupted transmit
CVE-2026-89930 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableKVM: nVMX: Service local TLB flushes on failed nested VM-Enter
CVE-2026-89960 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailables390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
CVE-2026-89806 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailabledrm/sysfb: ofdrm: Fix integer overflow in fb_size calculation
CVE-2026-89887 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemedia: i2c: ov7740: fix use-after-destroy in remove
CVE-2026-89893 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemedia: cx23885: cancel NetUP CI work before teardown
CVE-2026-89961 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablepowerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population
CVE-2026-90011 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablescsi: target: iscsi: Reserve a terminator byte for the login payload
CVE-2026-89844 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablescsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition
CVE-2026-87776 ↗azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablecompression vulnerable to Denial of Service via memory leak on premature response close
CVE-2026-89988 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablekprobes: Protect kprobe_blacklist with RCU
CVE-2026-90030 ↗azl3 kernel 6.6.157.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableusb: dwc3: clear forceRM when issuing EndTransfer
CVE-2026-89781 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablefs/ntfs3: fix out-of-bounds read in read_log_rec_buf()
CVE-2026-90013 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailabletracing: Take trace_array reference when opening options file
CVE-2026-89810 ↗azl3 kernel 6.6.157.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailabledrm/amdkfd: Fix error path at svm_migrate_copy_to_ram
CVE-2026-89959 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailables390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
CVE-2026-89894 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemedia: cx231xx: reject geometry changes while the VBI queue is busy
CVE-2026-89947 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableclk: meson: align gxbb_32k_clk_sel number of parents with actual count
CVE-2026-89922 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableKVM: s390: Take srcu when importing watchpoint data
CVE-2026-90045 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableUSB: gadget: ffs: fix mm lifetime handling
CVE-2026-89999 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableHID: wacom: validate report length in wacom_intuos_pro2_bt_irq
CVE-2026-89992 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablecpuidle: dt_idle_genpd: kfree() the original name allocation
CVE-2026-89795 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablePCI: Allow per function PCI slots to fix slot reset on s390
CVE-2026-44950 ↗azl3 libXfont2 2.0.8-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablefs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2
CVE-2026-59679 ↗azl3 libXfont2 2.0.8-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablefs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2
CVE-2026-89938 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableiio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF
CVE-2026-81634 ↗azl3 unbound 1.26.0-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablePossible heap buffer overflow during DNSSEC canonicalization
CVE-2026-89965 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablenvdimm/btt: reject an arena whose nfree is below the lane count
CVE-2026-89860 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablescsi: qla2xxx: Initialize NVMe abort_work once at submission
CVE-2026-90000 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableHID: rmi: fix OOB access with undersized RMI reports
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
SuseCVE-2026-8461trackedCVSS 8.8openSUSE Leap 16.0ffmpeg-7-0:7.1.5-160000.1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-84637trackedCVSS 8.8Open Enterprise Server 25.4MozillaThunderbird-0:153.2.0-150400.13.3.1.x86_64no patch linkAdvisory ↗
SuseCVE-2026-84639trackedimportant (Suse rating)Open Enterprise Server 25.4MozillaThunderbird-0:153.2.0-150400.13.3.1.x86_64no patch linkAdvisory ↗
SuseCVE-2026-84640trackedimportant (Suse rating)Open Enterprise Server 25.4MozillaThunderbird-0:153.2.0-150400.13.3.1.x86_64no patch linkAdvisory ↗
SuseCVE-2026-84641trackedCVSS 8.3Open Enterprise Server 25.4MozillaThunderbird-0:153.2.0-150400.13.3.1.x86_64no patch linkAdvisory ↗
SuseCVE-2026-84642trackedimportant (Suse rating)Open Enterprise Server 25.4MozillaThunderbird-0:153.2.0-150400.13.3.1.x86_64no patch linkAdvisory ↗
SuseCVE-2026-85197trackedCVSS 7.5SUSE Linux Micro 6.0libsoup-3_0-0-0:3.4.2-18.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-85197trackedCVSS 7.5SUSE Linux Micro 6.1libsoup-3_0-0-0:3.4.4-slfo.1.1_11.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-87817trackedCVSS 8.8openSUSE Leap 16.0python313-GitPython-0:3.1.44-160000.4.1.noarchno patch linkAdvisory ↗
SuseCVE-2026-87819trackedCVSS 7.5openSUSE Leap 16.0python313-GitPython-0:3.1.44-160000.4.1.noarchno patch linkAdvisory ↗
SuseCVE-2026-91719trackedCVSS 8.1openSUSE Tumbleweedchromedriver-0:153.0.8010.47-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-91719trackedCVSS 8.1openSUSE Leap 16.0chromedriver-0:153.0.8010.47-bp160.1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-91732trackedCVSS 8.1openSUSE Tumbleweedchromedriver-0:153.0.8010.47-1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-91732trackedCVSS 8.1openSUSE Leap 16.0chromedriver-0:153.0.8010.47-bp160.1.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92006trackedCVSS 8.8Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92007trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92008trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92009trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92010trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92011trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92012trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92013trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92015trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92016trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92017trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92018trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92019trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92020trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92022trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92023trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92024trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92025trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92026trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92027trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92028trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92029trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92032trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92035trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92038trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92041trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92042trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92043trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92044trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92045trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92046trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92047trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92048trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92049trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92052trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92053trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92054trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92055trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92056trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92057trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92058trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92059trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92060trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92062trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92064trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92065trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92067trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92071trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92072trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92073trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92074trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92075trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92076trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
SuseCVE-2026-92079trackedimportant (Suse rating)Open Enterprise Server 23.4MozillaFirefox-0:153.3.0-150400.157.8.1.aarch64no patch linkAdvisory ↗
Red HatCVE-2026-92599trackedCVSS 7.5Red Hat Hardened Imagesgrafana12.4-0:12.4.10-0.6.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-92599trackedCVSS 7.5Red Hat Hardened Imagesgrafana13.1-0:13.1.6-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2024-52316trackedCVSS 7.4Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2024-52316trackedCVSS 7.4Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2024-52316trackedCVSS 7.4Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2024-52316trackedCVSS 7.4Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2024-52316trackedCVSS 7.4Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2024-58007trackedCVSS 7.1Red Hat Enterprise Linux AppStream (v. 10)kernel-64k-debug-debuginfo-0:6.12.0-211.56.1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-11234trackedCVSS 7.5Red Hat Enterprise Linux AppStream E4S (v.8.8)SLOF-0:20210217-2.module+el8.8.0+20737+daad9f3b.noarch::virt:rhelPatch ↗Advisory ↗
Red HatCVE-2025-5222trackedCVSS 7.0Red Hat OpenShift Container Platform 4.13rhcos-x86_64-413.92.202609080414-0Patch ↗Advisory ↗
SuseCVE-2026-0799trackedCVSS 8.8SUSE Linux Enterprise High Performance Computing 12 SP5libpcap-devel-0:1.8.1-10.12.1.aarch64no patch linkAdvisory ↗
Red HatCVE-2026-11331trackedCVSS 7.5Red Hat OpenShift Container Platform 4.18rhcos-aarch64-418.94.202609031320-0Patch ↗Advisory ↗
Red HatCVE-2026-11822trackedCVSS 7.8Red Hat OpenShift Container Platform 4.13rhcos-x86_64-413.92.202609080414-0Patch ↗Advisory ↗
Red HatCVE-2026-11822trackedCVSS 7.8Red Hat OpenShift Container Platform 4.18rhcos-aarch64-418.94.202609031320-0Patch ↗Advisory ↗
Red HatCVE-2026-11822trackedCVSS 7.8Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202609082051-0Patch ↗Advisory ↗
Red HatCVE-2026-11822trackedCVSS 7.8Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:5c5749e9e04d2a0b88525c1e78145f27ce80f018855da5bae09cb2cd97536072_amd64Patch ↗Advisory ↗
Red HatCVE-2026-11822trackedCVSS 7.8Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64Patch ↗Advisory ↗
Red HatCVE-2026-11822trackedCVSS 7.8Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:37b64a8df90756aae0ee96d2f07765adbce5ed5beb2414ac3845806ad2219cfc_amd64Patch ↗Advisory ↗
Red HatCVE-2026-11822trackedCVSS 7.8Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:73bbc4560132c4aaa9bbd608ce9560eeae7b30bcc8f014da460afa5622139372_amd64Patch ↗Advisory ↗
Red HatCVE-2026-11824trackedCVSS 7.8Red Hat OpenShift Container Platform 4.13rhcos-x86_64-413.92.202609080414-0Patch ↗Advisory ↗
Red HatCVE-2026-11824trackedCVSS 7.8Red Hat OpenShift Container Platform 4.18rhcos-aarch64-418.94.202609031320-0Patch ↗Advisory ↗
Red HatCVE-2026-11824trackedCVSS 7.8Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202609082051-0Patch ↗Advisory ↗
Red HatCVE-2026-11824trackedCVSS 7.8Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:5c5749e9e04d2a0b88525c1e78145f27ce80f018855da5bae09cb2cd97536072_amd64Patch ↗Advisory ↗
Red HatCVE-2026-11824trackedCVSS 7.8Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64Patch ↗Advisory ↗
Red HatCVE-2026-11824trackedCVSS 7.8Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:37b64a8df90756aae0ee96d2f07765adbce5ed5beb2414ac3845806ad2219cfc_amd64Patch ↗Advisory ↗
Red HatCVE-2026-11824trackedCVSS 7.8Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:73bbc4560132c4aaa9bbd608ce9560eeae7b30bcc8f014da460afa5622139372_amd64Patch ↗Advisory ↗
Red HatCVE-2026-12143trackedCVSS 7.5Red Hat Satellite 6.19registry.redhat.io/satellite/iop-remediations-rhel9@sha256:d1165533561121ef2a8d4df99bc2830fa22c19b72366a736267244cc461ce0d4_amd64Patch ↗Advisory ↗
Red HatCVE-2026-12143trackedCVSS 7.5Red Hat Satellite 6.19registry.redhat.io/satellite/iop-advisor-frontend-rhel9@sha256:842b088286ed98d34c8e4081564e9c7f173773b3261776bcc3603a8f0fbcb9c3_amd64Patch ↗Advisory ↗
Red HatCVE-2026-12143trackedCVSS 7.5Red Hat Satellite 6.19registry.redhat.io/satellite/iop-vulnerability-frontend-rhel9@sha256:eeccc6e32dda917e7eda627b299702d7f3916c212bdbcfbc654d400b71d3394f_amd64Patch ↗Advisory ↗
Red HatCVE-2026-12143trackedCVSS 7.5Red Hat Satellite 6.18registry.redhat.io/satellite/iop-vulnerability-frontend-rhel9@sha256:1d200f685bab42ac711f01b7bddcd1d2c31a69981343a687457021ee21419def_amd64Patch ↗Advisory ↗
Red HatCVE-2026-12143trackedCVSS 7.5Red Hat Satellite 6.18registry.redhat.io/satellite/iop-remediations-rhel9@sha256:44e25e6001ef3e1aff88973726038ceced40a1d73158af2dadbfab8c45faa2a6_amd64Patch ↗Advisory ↗
SuseCVE-2026-12611trackedCVSS 7.5openSUSE Tumbleweedjetty-annotations-0:9.4.58-6.1.aarch64no patch linkAdvisory ↗
Red HatCVE-2026-13321trackedCVSS 8.6Red Hat OpenShift Container Platform 4.18rhcos-aarch64-418.94.202609031320-0Patch ↗Advisory ↗
Red HatCVE-2026-14164trackedCVSS 7.5Red Hat OpenShift Container Platform 4.13rhcos-x86_64-413.92.202609080414-0Patch ↗Advisory ↗
Red HatCVE-2026-14164trackedCVSS 7.5Red Hat OpenShift Container Platform 4.18rhcos-aarch64-418.94.202609031320-0Patch ↗Advisory ↗
Red HatCVE-2026-14257trackedCVSS 7.5Red Hat OpenShift Container Platform 4.18registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:5104f7a144a515ef9a4dbd14194613f7878f02eb3d2fe05b9f6b6a3382800d36_amd64Patch ↗Advisory ↗
Red HatCVE-2026-14257trackedCVSS 7.5Red Hat Migration Toolkit 1.8registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:cc6bb647f74d614d696b8d7be5f25de0a9aebe013457495e2806b732bcbfa241_amd64Patch ↗Advisory ↗
Red HatCVE-2026-1519trackedCVSS 7.5Red Hat OpenShift Container Platform 4.18rhcos-aarch64-418.94.202609031320-0Patch ↗Advisory ↗
Red HatCVE-2026-15709trackedCVSS 7.5Red Hat Enterprise Linux AppStream EUS (v.9.6)libsoup-0:2.72.0-10.el9_6.9.aarch64Patch ↗Advisory ↗
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.