CYBERSECURITYTRACKER
TRACKING7,631 stories in this site build1,635 vulnerability news stories in this site build
Vulnerabilities

September 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 3,860 vulnerabilities across 9,413 returned patch records from 4 vendors. Filter the month to date, or browse the static page trail without JavaScript.

9,413all patch recordsClear filters401criticalShow these records2Microsoft exploitation detectedShow these records4Microsoft in the Known Exploited Vulnerabilities catalogShow these records3,056tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Red Hat 7,020Microsoft 2,015Android 281Cisco 97

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 46 of 48 · records 9,001 to 9,200 of 9,413

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-95818 ↗azl3 glibc 2.38-21 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableAT_SECURE program buffer overflow via $ORIGIN processing
CVE-2026-91780 ↗azl3 binutils 2.41-13 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableGNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference
CVE-2026-91779 ↗azl3 binutils 2.41-13 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableGNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference
CVE-2026-91781 ↗azl3 binutils 2.41-13 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableGNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference
CVE-2026-91986 ↗azl3 rust 1.75.0-31 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablegitoxide gix-transport before 0.59.2 CR/LF/NUL Injection
CVE-2026-93191 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablesmack: fix incorrect task context in smack_msg_queue_msgrcv
CVE-2026-81870 ↗azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableOpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
CVE-2026-81872 ↗azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableOpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
CVE-2026-80948 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablewifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()
CVE-2026-89627 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableHID: roccat: free buffered reports when destroying device
CVE-2026-89562 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableip6_gre: fix hardware header length for NBMA tunnels
CVE-2026-87876 ↗azl3 cups 2.4.19-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableCups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)
CVE-2026-89473 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablepower: supply: bq25890: Fix power_supply reference leak
CVE-2026-89757 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablemm/mglru: fix and remove redundant unevictable folio handling
CVE-2026-80983 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablenet/smc: fix socket refcount leak in smc_switch_conns()
CVE-2026-89462 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablepower: supply: max17040: propagate register read errors
CVE-2026-89461 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablepower: supply: max17040: synchronize work cancellation on suspend
CVE-2026-89645 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablebtrfs: drop recovered reloc root refs on recovery failure
CVE-2026-89628 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableHID: picolcd: clamp eeprom debugfs read to bytes actually received
CVE-2026-80996 ↗azl3 kernel 6.6.157.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablenet: l2tp: do not propagate multicast notification errors
CVE-2026-89597 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablefbdev: uvesafb: unregister connector callback on init failure
CVE-2026-80949 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablewifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()
CVE-2026-89565 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableipip: fix skb leak in collect_md mode when metadata_dst allocation fails
CVE-2026-89768 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablefs: fix user path of nested backing files
CVE-2026-89582 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablebnx2x: fix double free in bnx2x_init_firmware() error path
CVE-2026-89156 ↗azl3 pcre2 10.42-3 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablePCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.
CVE-2026-89160 ↗azl3 pcre2 10.42-3 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablePCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.
CVE-2026-78127 ↗azl3 strongswan 5.9.14-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablelibcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.
CVE-2026-78131 ↗azl3 strongswan 5.9.14-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablestrongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.
CVE-2026-78124 ↗azl3 strongswan 5.9.14-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablestrongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.
CVE-2026-80918 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableHID: core: fix number/pointer type confusion on long items
CVE-2026-80920 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableio_uring: defer eventfd signaling when queued from a wakeup handler
CVE-2026-18540 ↗azl3 nodejs 24.20.0-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableundici vulnerable to downstream response splitting via retry interceptor
CVE-2026-80255 ↗azl3 rust 1.75.0-30 on Azure Linux 3.0LowNot availableMicrosoft rating unavailablesecure cookie attribute bypass with tab
CVE-2026-80230 ↗azl3 curl 8.11.1-11 on Azure Linux 3.0LowNot availableMicrosoft rating unavailableOpenSSL pinning bypass
CVE-2026-13608 ↗azl3 curl 8.11.1-11 on Azure Linux 3.0LowNot availableMicrosoft rating unavailableOpenLDAP SASL authentication bypass
CVE-2026-80231 ↗azl3 cmake 3.30.3-15 on Azure Linux 3.0LowNot availableMicrosoft rating unavailablenative CA store conn reuse
CVE-2026-80784 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablemptcp: pm: fix memory leak from alloc-during-teardown race
CVE-2026-80827 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableUSB: serial: option: fix slab OOB read in interrupt URB callback
CVE-2026-80893 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablemm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()
CVE-2026-80761 ↗azl3 kernel 6.6.157.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableBluetooth: ISO: zero the sockaddr before returning it in getname
CVE-2026-80892 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableerofs: cap LZMA stream pool size
CVE-2026-80910 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
CVE-2026-80797 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablenfc: pn533: purge fragmented skbs during cleanup
CVE-2026-80889 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablecan: isotp: fix timer drain order, wakeup handling and tx_gen ordering
CVE-2026-86137 ↗azl3 libxml2 2.11.5-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableIn libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
CVE-2026-80843 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablexfrm: fix xfrm_state_construct() auth-trunc leak
CVE-2026-86141 ↗azl3 libxml2 2.11.5-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablexmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.
CVE-2026-80744 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablenetfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
CVE-2026-18743 ↗azl3 popt 1.19-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablePopt-devel: popt-static: short realloc in poptconfigfiletostring
CVE-2026-87658 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87658: Information leak in Extensions
CVE-2026-87657 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87657: Use after free in V8
CVE-2026-87656 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87656: Improper state validation in Safebrowsing
CVE-2026-87655 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87655: Clickjacking in Downloads
CVE-2026-87654 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87654: Buffer overflow in ANGLE
CVE-2026-87653 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87653: UI misrepresentation in FullScreen
CVE-2026-87652 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87652: Incorrect authorization in PushAPI
CVE-2026-87651 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87651: Incorrect authorization in Paint
CVE-2026-87650 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87650: Out of bounds read in WebGL
CVE-2026-87649 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87649: UI misrepresentation in Downloads
CVE-2026-87648 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87648: Use after free in ANGLE
CVE-2026-87647 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87647: Uninitialized resource in GPU
CVE-2026-87646 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87646: Use after free in Web Authentication
CVE-2026-87645 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87645: Improper state validation in Safebrowsing
CVE-2026-87644 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87644: Incorrect authorization in Views
CVE-2026-87642 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87642: Uninitialized resource in WebGL
CVE-2026-87641 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87641: Race condition in Browser
CVE-2026-87639 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87639: Use after free in WebPackaging
CVE-2026-87638 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87638: Out of bounds write in Media
CVE-2026-87637 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87637: Use after free in Extensions
CVE-2026-87636 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87636: Type confusion in XML
CVE-2026-87635 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87635: UI misrepresentation in Payments
CVE-2026-87634 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87634: Use after free in WebPackaging
CVE-2026-87633 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87633: Use after free in Views
CVE-2026-87632 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87632: Cross-site scripting in SanitizerAPI
CVE-2026-87631 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87631: Missing authorization in DOM
CVE-2026-87630 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87630: Integer overflow in WebRTC
CVE-2026-87629 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87629: Incorrect authorization in Sources
CVE-2026-87628 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87628: Use after free in Cast
CVE-2026-87627 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87627: Interpretation conflict in Safebrowsing
CVE-2026-87626 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials
CVE-2026-87624 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87624: UI misrepresentation in Passwords
CVE-2026-87623 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87623: Observable discrepancy in DOM
CVE-2026-87622 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87622: Missing authorization in FedCM
CVE-2026-87621 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87621: Out of bounds write in ANGLE
CVE-2026-87620 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87620: Observable discrepancy in SVG
CVE-2026-87619 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87619: Observable discrepancy in Prefetch
CVE-2026-87618 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87618: Incorrect reference resolution in Storage
CVE-2026-87617 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87617: Use after free in DevTools
CVE-2026-87616 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87616: Improper initialization in Views
CVE-2026-87615 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87615: Race condition in Payments
CVE-2026-87614 ↗Microsoft Edge (Chromium-based)N/AOut-of-band0%Microsoft rating unavailableChromium CVE-2026-87614: Incorrect authorization in ServiceWorker

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-59083trackedCVSS 3.7Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-59083trackedCVSS 3.7Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2026-59083trackedCVSS 3.7Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-59084trackedCVSS 3.8Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2026-59084trackedCVSS 3.8Red Hat Enterprise Linux AppStream (v. 9)tomcat-1:9.0.120-2.el9_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-59084trackedCVSS 3.8Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2026-59084trackedCVSS 3.8Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-59084trackedCVSS 3.8Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2026-59084trackedCVSS 3.8Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-59083trackedCVSS 3.7Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat9-1:9.0.120-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-59084trackedCVSS 3.8Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat9-1:9.0.120-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-66785trackedCVSS 2.5Red Hat Advanced Cluster Management for Kubernetes 2.17registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64Patch ↗Advisory ↗
Red HatCVE-2026-66788trackedCVSS 3.7Red Hat Advanced Cluster Management for Kubernetes 2.17registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64Patch ↗Advisory ↗
Red HatCVE-2026-84641CVSS 3.4Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.16.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-92240CVSS 3.4Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.16.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-6170CVSS 2.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)libxml2-debuginfo-0:2.12.5-9.el10_0.2.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-6170CVSS 2.5Red Hat Enterprise Linux AppStream EUS (v.9.6)libxml2-debuginfo-0:2.9.13-12.el9_6.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-60589CVSS 3.7Red Hat Enterprise Linux Supplementary (v. 8)java-1.8.0-ibm-1:1.8.0.8.71-1.el8_10.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-71463CVSS 2.7Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-controller-venv-tower-0:4.7.17-1.el9ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71463CVSS 2.7Red Hat Ansible Automation Platform 2.5 for RHEL 8automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71463CVSS 2.7Red Hat Ansible Automation Platform 2.7registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:0b4d286c39fbb3056643306df9e81c2d4727e005a551ab74c2cee0950f35bf25_amd64Patch ↗Advisory ↗
Red HatCVE-2026-71463CVSS 2.7Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64Patch ↗Advisory ↗
Red HatCVE-2026-71464CVSS 3.1Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-controller-venv-tower-0:4.7.17-1.el9ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71464CVSS 3.1Red Hat Ansible Automation Platform 2.5 for RHEL 8automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71464CVSS 3.1Red Hat Ansible Automation Platform 2.7registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:0b4d286c39fbb3056643306df9e81c2d4727e005a551ab74c2cee0950f35bf25_amd64Patch ↗Advisory ↗
Red HatCVE-2026-71464CVSS 3.1Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64Patch ↗Advisory ↗
Red HatCVE-2026-71465CVSS 3.1Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-controller-venv-tower-0:4.7.17-1.el9ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71465CVSS 3.1Red Hat Ansible Automation Platform 2.5 for RHEL 8automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71465CVSS 3.1Red Hat Ansible Automation Platform 2.7registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:0b4d286c39fbb3056643306df9e81c2d4727e005a551ab74c2cee0950f35bf25_amd64Patch ↗Advisory ↗
Red HatCVE-2026-71465CVSS 3.1Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64Patch ↗Advisory ↗
Red HatCVE-2026-73281CVSS 3.5Red Hat Hardened Imagesopenssh-0:10.5p1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-24308CVSS 3.3Red Hat JBoss Enterprise Application Platform 6.0.7.GAorg.apache.zookeeper.zookeeper-3.8.4.redhat-00018.jarPatch ↗Advisory ↗
Red HatCVE-2026-15028CVSS 3.9Red Hat Enterprise Linux AppStream (v. 10)bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16517CVSS 2.9Red Hat Enterprise Linux AppStream (v. 10)bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-73281CVSS 3.5Red Hat Enterprise Linux AppStream (v. 10)openssh-askpass-0:9.9p1-27.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-73281CVSS 3.5Red Hat Enterprise Linux AppStream (v. 9)openssh-askpass-0:9.9p1-11.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-83608CVSS 3.1Red Hat Developer Hub 1.9registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64Patch ↗Advisory ↗
Red HatCVE-2026-77860CVSS 3.7Red Hat Hardened Imagespython3-unbound-0:1.26.1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-82562CVSS 3.7Red Hat OpenShift Dev Spaces 3.30registry.redhat.io/devspaces/dashboard-rhel9@sha256:167f8fd2b88dc37abed12b6496ac32b5b031de3be233f2864afb918c8b692a1a_arm64Patch ↗Advisory ↗
Red HatCVE-2026-18209CVSS 3.4Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64Patch ↗Advisory ↗
Red HatCVE-2026-18209CVSS 3.4Red Hat build of Keycloak 26.6.7Not reportedPatch ↗Advisory ↗
CiscoCVE-2026-20071CVSS 3.8Cisco Identity Services Engine3.1Patch ↗Advisory ↗
Red HatCVE-2024-53161CVSS 3.8Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.163.1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2024-53161CVSS 3.8Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.163.1.rt7.504.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-44839CVSS 3.5Red Hat Hardened Imagesrabbitmq-server4.3-0:4.3.6-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45446CVSS 3.7Red Hat Hardened Imagesbootupd-0:0.3.2-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-87876CVSS 3.0Red Hat Hardened Imagescups-0:2.4.19-4.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-89156CVSS 2.9Red Hat Hardened Imagespcre2-0:10.48-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-89160CVSS 3.7Red Hat Hardened Imagespcre2-0:10.48-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-89162CVSS 2.9Red Hat Hardened Imagespcre2-0:10.48-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-18540CVSS 3.7Red Hat Hardened Imagesnodejs26-0:26.8.2-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-85498CVSS 3.5Red Hat Hardened Imagespolkit-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-18540CVSS 3.7Red Hat Hardened Imagesgrafana12.4-0:12.4.10-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28378CVSS 3.1Red Hat Hardened Imagesgrafana12.4-0:12.4.10-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-41992CVSS 3.6Red Hat Enterprise Linux BaseOS (v. 8)gzip-0:1.9-15.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-41992CVSS 3.6Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:7840142734dad76221aa6846ab6e8aacc913a8017e4c5c956d574f78b8dfa98d_amd64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)thunderbird-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)thunderbird-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)thunderbird-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)thunderbird-0:140.14.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)firefox-0:140.14.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)firefox-0:140.14.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-85008CVSS 3.7Red Hat Hardened Imagesgrafana12.4-0:12.4.10-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.14.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.14.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.14.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74983CVSS 3.4Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-86137CVSS 2.9Red Hat Hardened Imageslibxml2-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-86141CVSS 2.9Red Hat Hardened Imageslibxml2-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-13608CVSS 3.7Red Hat Hardened Imagescargo-0:1.98.0-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-18924CVSS 3.7Red Hat Hardened Imagescargo-0:1.98.0-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-13608CVSS 3.7Red Hat Hardened Imagescurl-0:8.22.0-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-18924CVSS 3.7Red Hat Hardened Imagescurl-0:8.22.0-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-54891CVSS 3.7Red Hat Hardened Imageserlang27-0:27.3.4.17-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-65183CVSS 2.5Red Hat Hardened Imagestomcat10-main@noarchPatch ↗Advisory ↗
Red HatCVE-2026-66422CVSS 2.7Red Hat Hardened Imagestomcat10-main@noarchPatch ↗Advisory ↗
Red HatCVE-2026-80230CVSS 3.7Red Hat Hardened Imagescurl-0:8.22.0-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-80231CVSS 3.7Red Hat Hardened Imagescurl-0:8.22.0-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-80255CVSS 3.7Red Hat Hardened Imagescurl-0:8.22.0-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-82209CVSS 3.1Red Hat Hardened Imagescurl-0:8.22.0-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-82562CVSS 3.7Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45446CVSS 3.7Red Hat Hardened Imagesruby3.3-0:3.3.10-23.6.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45446CVSS 3.7Red Hat Hardened Imagesruby4.0-0:4.0.6-37.3.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45446CVSS 3.7Red Hat Hardened Imagesruby3.4-0:3.4.10-31.7.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-75803CVSS 3.7Red Hat Hardened Imagesruby3.3-0:3.3.10-23.6.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-75803CVSS 3.7Red Hat Hardened Imagesruby4.0-0:4.0.6-37.3.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-75803CVSS 3.7Red Hat Hardened Imagesruby3.4-0:3.4.10-31.7.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-82562CVSS 3.7Red Hat Hardened Imagesgrafana13.1-0:13.1.3-0.4.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2025-59436CVSS 3.2Red Hat Ceph Storage 8.1registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64Patch ↗Advisory ↗
Red HatCVE-2026-59846CVSS 3.9Red Hat Enterprise Linux AppStream (v. 9)libssh-debuginfo-0:0.10.4-19.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59846CVSS 3.9Red Hat Enterprise Linux AppStream (v. 8)libssh-debuginfo-0:0.9.6-17.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-17992trackedCVSS 0.0Red Hat Enterprise Linux AppStream (v. 9)webkit2gtk3-0:2.54.0-1.el9_8.aarch64Patch ↗Advisory ↗

Glossary

Open in glossary