Vulnerabilities
September 2026 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 5,936 vulnerabilities across 17,974 returned patch records from 5 vendors. Filter the month to date, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 82 of 90 · records 16,201 to 16,400 of 17,974
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-89865 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
CVE-2026-82720 ↗azl3 unbound 1.26.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUse-after-free in DoH stream cleanup code path
CVE-2026-85501 ↗azl3 unbound 1.26.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRetrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC
CVE-2026-78227 ↗azl3 unbound 1.26.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUse-after-free in DoQ stream output buffer on reset re-transmission
CVE-2026-89948 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebatman-adv: bla: fix freeing of claims on meshif deletion
CVE-2026-90020 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUSB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
CVE-2026-89962 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepowerpc/kexec_file: Prevent kexec range truncation
CVE-2026-89833 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()
CVE-2026-89850 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: qla2xxx: Don't query firmware state while chip is down
CVE-2026-89984 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableperf/x86/intel: Fix kernel address leakages in LBR stack
CVE-2026-89871 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure
CVE-2026-89845 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()
CVE-2026-89934 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiio: light: ltrf216a: fix runtime PM reference leak in error path
CVE-2026-89975 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenvme-fabrics: fix DHCHAP secret leak on parse failure
CVE-2026-89785 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init
CVE-2026-89858 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()
CVE-2026-89874 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: v4l2-async: avoid deleting unlinked ASC entry on link error
CVE-2026-89842 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started
CVE-2026-89809 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds
CVE-2026-89800 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE
CVE-2026-90019 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: gadget: fix null pointer dereference in usb_put_function_instance()
CVE-2026-89872 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
CVE-2026-89813 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: force complete the KIQ ring fences on reset
CVE-2026-89812 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amdgpu: force complete the MES ring fences on reset
CVE-2026-89817 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/gud: NUL-terminate TV mode names read from the device
CVE-2026-89843 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak
CVE-2026-89796 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/damon/core: avoid infinite kdamond_merge_regions() internal loop
CVE-2026-89879 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: s2255: bound JPEG frame size before copying into the buffer
CVE-2026-89937 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiio: chemical: sgp30: Handle IAQ thread creation failure
CVE-2026-90024 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
CVE-2026-89852 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()
CVE-2026-89862 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: qla2xxx: Fix BSG job leak on validate flash image error path
CVE-2026-89896 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: cedrus: fix memory leak in cedrus_init_ctrls()
CVE-2026-89982 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablei2c: mux: Fix channel node leak on adapter add failure
CVE-2026-89953 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemtd: mtdoops: free page bitmap when the backing MTD is removed
CVE-2026-89878 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: s2255: check firmware size before reading trailing marker
CVE-2026-89881 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak
CVE-2026-89797 ↗azl3 kernel 6.6.157.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepower: supply: ab8500_fg: fix use-after-free on remove
CVE-2026-89816 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used
CVE-2026-90033 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
CVE-2026-89802 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op
CVE-2026-89924 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: s390: Fix old_data leak in guest debug error path
CVE-2026-89901 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref
CVE-2026-89839 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()
CVE-2026-90015 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablexhci: fix lost bounce buffers on TDs spanning several ring segments
CVE-2026-89784 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6
CVE-2026-89891 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: em28xx: fix use-after-free of dev_next->devlist on disconnect
CVE-2026-89955 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailables390/vfio-ap: Fix NULL deref in status_show() during queue probe
CVE-2026-89987 ↗azl3 kernel 6.6.157.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemm/huge_memory: transfer the pmd dirty bit to the folio on zap
CVE-2026-89939 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiio: chemical: atlas-sensor: fix PM reference leak in buffer postenable
CVE-2026-90023 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()
CVE-2026-90035 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: fix division by zero in get_estimated_bw()
CVE-2026-89884 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: platform: mtk-mdp3: fix NULL deref on failed SCP lookup
CVE-2026-89821 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/amd/display: avoid divide-by-zero in __is_lut_linear()
CVE-2026-89892 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: em28xx: defer audio-only extension registration
CVE-2026-89859 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
CVE-2026-89923 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKVM: s390: Free guest debug data on vcpu destroy
CVE-2026-89837 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: fix dentry folio leak in find_in_level
CVE-2026-89989 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
CVE-2026-89945 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableASoC: cs35l34: drain threaded IRQ before runtime suspend
CVE-2026-90031 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb-storage: ene_ub6250: fix race between scan work and probe
CVE-2026-89946 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableASoC: cs35l33: drain threaded IRQ before runtime suspend
CVE-2026-77159 ↗azl3 libvirt 11.9.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink
CVE-2026-89787 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableext4: check dir entry fits before reading the hash trailer in ext4_search_dir()
CVE-2026-89822 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/i915: Guard against NULL driver_data in i915_pci_probe()
CVE-2026-89329 ↗azl3 device-mapper-multipath 0.9.6-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableDevice-mapper-multipath: local denial of service via blocking ipc send operations
CVE-2026-80225 ↗azl3 unbound 1.26.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablePossible degradation of service from continuous queries on the same TCP/DoT connection
CVE-2026-89933 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableiio: pressure: dps310: fix NULL pointer dereference on ACPI probe
CVE-2026-89993 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledmaengine: dw-edma: Initialize IRQ data before requesting IRQs
CVE-2026-89900 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemedia: cec: core: Fix kmemleak due to missed rc_free_device() call
CVE-2026-53495 ↗azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecontainerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service
CVE-2026-19542 ↗azl3 glibc 2.38-21 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableStack-based out-of-bounds write in tdelete during tree rebalancing
CVE-2026-80489 ↗azl3 glibc 2.38-21 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableEUC_JISX0213 decoding may hang on crafted input
CVE-2026-77117 ↗azl3 glibc 2.38-21 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSHIFT_JISX0213 decoding may hang on crafted input
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-81871CVSS 6.5Red Hat Hardened Imagesloki3.7-0:3.7.8-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81872CVSS 5.3Red Hat Hardened Imagesgrafana12.4-0:12.4.10-0.6.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81872CVSS 5.3Red Hat Hardened Imagesopentofu1.12-0:1.12.6-0.3.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81872CVSS 5.3Red Hat Hardened Imagesjaeger-0:2.20.0-0.9.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81872CVSS 5.3Red Hat Hardened Imagesgrafana13.1-0:13.1.6-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2024-45336CVSS 5.9Red Hat Enterprise Linux AppStream E4S (v.8.8)osbuild-composer-0:75-10.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2024-9355CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.8.8)osbuild-composer-0:75-10.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-22866CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.8.8)osbuild-composer-0:75-10.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2025-46701CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2025-46701CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2025-46701CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2025-46701CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2025-46701CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2025-55668CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2025-55668CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2025-55668CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2025-55668CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2025-55668CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2025-61795CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2025-61795CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2025-61795CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2025-61795CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2025-61795CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2025-66614CVSS 5.3Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2025-66614CVSS 5.3Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2025-66614CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2025-66614CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2025-66614CVSS 5.3Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-10723CVSS 6.8Red Hat OpenShift Container Platform 4.18rhcos-aarch64-418.94.202609031320-0Patch ↗Advisory ↗
Red HatCVE-2026-23103CVSS 4.7Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.164.1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-23103CVSS 4.7Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.164.1.rt7.505.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-2340CVSS 6.5Red Hat OpenShift Container Platform 4.13rhcos-x86_64-413.92.202609080414-0Patch ↗Advisory ↗
Red HatCVE-2026-2340CVSS 6.5Red Hat OpenShift Container Platform 4.18rhcos-aarch64-418.94.202609031320-0Patch ↗Advisory ↗
Red HatCVE-2026-2340CVSS 6.5Red Hat OpenShift Container Platform 4.12rhcos-x86_64-412.86.202609082051-0Patch ↗Advisory ↗
Red HatCVE-2026-25854CVSS 4.3Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2026-25854CVSS 4.3Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2026-25854CVSS 4.3Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-25854CVSS 4.3Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2026-25854CVSS 4.3Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-28374CVSS 4.3Red Hat Hardened Imagesgrafana13.1-0:13.1.6-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28374CVSS 4.3Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28376CVSS 6.5Red Hat Hardened Imagesgrafana13.1-0:13.1.6-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28376CVSS 6.5Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28379CVSS 6.5Red Hat Hardened Imagesgrafana13.1-0:13.1.6-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28379CVSS 6.5Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28380CVSS 6.5Red Hat Hardened Imagesgrafana13.1-0:13.1.6-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28380CVSS 6.5Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28383CVSS 6.5Red Hat Hardened Imagesgrafana13.1-0:13.1.6-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28383CVSS 6.5Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33378CVSS 6.5Red Hat Hardened Imagesgrafana13.1-0:13.1.6-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33378CVSS 6.5Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33380CVSS 6.3Red Hat Hardened Imagesgrafana13.1-0:13.1.6-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33380CVSS 6.3Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33381CVSS 5.9Red Hat Hardened Imagesgrafana13.1-0:13.1.6-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-33381CVSS 5.9Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-35177CVSS 4.1Red Hat Enterprise Linux Server (v. 7 ELS)vim-2:7.4.629-8.el7_9.2.srcPatch ↗Advisory ↗
Red HatCVE-2026-3833CVSS 6.5Red Hat OpenShift Container Platform 4.13rhcos-x86_64-413.92.202609080414-0Patch ↗Advisory ↗
Red HatCVE-2026-3833CVSS 6.5Red Hat OpenShift Container Platform 4.18rhcos-aarch64-418.94.202609031320-0Patch ↗Advisory ↗
Red HatCVE-2026-42502CVSS 6.1Multicluster Global Hub 1.8.2registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:02cfdd71deb8fad770bcc7df04e3ce6714fac89d1204796ee2098db9c2d334d0_arm64Patch ↗Advisory ↗
Red HatCVE-2026-46604CVSS 6.5Multicluster Global Hub 1.8.2registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:02cfdd71deb8fad770bcc7df04e3ce6714fac89d1204796ee2098db9c2d334d0_arm64Patch ↗Advisory ↗
Red HatCVE-2026-50229CVSS 5.4Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2026-50229CVSS 5.4Red Hat Enterprise Linux AppStream (v. 9)tomcat-1:9.0.120-2.el9_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-50229CVSS 5.4Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2026-50229CVSS 5.4Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-50229CVSS 5.4Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2026-50229CVSS 5.4Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55955CVSS 4.2Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55955CVSS 4.2Red Hat Enterprise Linux AppStream (v. 9)tomcat-1:9.0.120-2.el9_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55955CVSS 4.2Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55955CVSS 4.2Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55955CVSS 4.2Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55955CVSS 4.2Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55956CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55956CVSS 6.5Red Hat Enterprise Linux AppStream (v. 9)tomcat-1:9.0.120-2.el9_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55956CVSS 6.5Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55956CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55956CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2026-55956CVSS 6.5Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-57455CVSS 4.7Red Hat Enterprise Linux Server (v. 7 ELS)vim-2:7.4.629-8.el7_9.2.srcPatch ↗Advisory ↗
Red HatCVE-2026-59858CVSS 6.5Red Hat Enterprise Linux Server (v. 7 ELS)vim-2:7.4.629-8.el7_9.2.srcPatch ↗Advisory ↗
Red HatCVE-2026-59888CVSS 6.5Red Hat AI Inference Server 3.3registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:73bbc4560132c4aaa9bbd608ce9560eeae7b30bcc8f014da460afa5622139372_amd64Patch ↗Advisory ↗
Red HatCVE-2026-61709CVSS 5.3Red Hat Hardened Imagesgrafana12.4-0:12.4.10-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-63652CVSS 6.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)freerdp-2:3.10.3-3.el10_0.16.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-69153CVSS 5.3Red Hat OpenShift Container Platform 4.18registry.redhat.io/openshift4/ose-console-rhel9@sha256:0653cee8832f177198c78b9f5bab464e7e4ab1ea8718de12519ffa342349c03d_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-69153CVSS 5.3Red Hat OpenShift Dev Spaces 3.30registry.redhat.io/devspaces/code-rhel9@sha256:02f759255a2259ae4c7e41a980dcecc9a72efcfb050dcdbeba4469d62eb352db_s390xPatch ↗Advisory ↗
Red HatCVE-2026-69159CVSS 5.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)freerdp-2:3.10.3-3.el10_0.16.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71577CVSS 6.3Multicluster Global Hub 1.8.2registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:6f87d47921c4b6161c6ead31676870b12f79ba240c478dd35ff5652313f949fa_arm64Patch ↗Advisory ↗
Red HatCVE-2026-73242CVSS 6.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)freerdp-2:3.10.3-3.el10_0.16.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-73433CVSS 6.6Red Hat Enterprise Linux AppStream EUS (v.9.6)gstreamer1-plugins-good-0:1.22.12-5.el9_6.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-73433CVSS 6.6Red Hat Enterprise Linux AppStream E4S (v.9.2)gstreamer1-plugins-good-0:1.18.4-8.el9_2.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-75838CVSS 6.1Red Hat OpenShift Service Mesh 3.3registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:5ad03378e442509d052ddab241ee1721922b0355e255ee1940fef1df60d12c27_ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-75838CVSS 6.1Red Hat OpenShift Service Mesh 3.4registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:b0f9a4cdc3003f1d82faf4130875ab160d7aa6e7a06ff0c9fa2957f2baead00e_amd64Patch ↗Advisory ↗
Red HatCVE-2026-77955CVSS 4.4Red Hat Hardened Imagespython3-unbound-0:1.26.1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-78227CVSS 5.9Red Hat Hardened Imagespython3-unbound-0:1.26.1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-80220CVSS 5.4Multicluster Global Hub 1.8.2registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5d918eb2a8f66bb88309d3c664a39fdf5f4b114affe94fe53e0b40c530d62cf7_s390xPatch ↗Advisory ↗
Red HatCVE-2026-80221CVSS 4.4Multicluster Global Hub 1.8.2registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:02cfdd71deb8fad770bcc7df04e3ce6714fac89d1204796ee2098db9c2d334d0_arm64Patch ↗Advisory ↗
Red HatCVE-2026-80225CVSS 5.3Red Hat Hardened Imagespython3-unbound-0:1.26.1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81871CVSS 6.5Red Hat Hardened Imagescaddy-0:2.11.4-0.4.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81871CVSS 6.5Red Hat Hardened Imagesdistribution-0:3.1.1-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81871CVSS 6.5Red Hat Hardened Imageshelm3-0:3.22.0-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81871CVSS 6.5Red Hat Hardened Imagesgrafana12.4-0:12.4.10-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81871CVSS 6.5Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81872CVSS 5.3Red Hat Hardened Imagesopentelemetry-collector-k8s-0:0.161.0-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81872CVSS 5.3Red Hat Hardened Imagescaddy-0:2.11.4-0.4.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81872CVSS 5.3Red Hat Hardened Imagesdistribution-0:3.1.1-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81872CVSS 5.3Red Hat Hardened Imageshelm3-0:3.22.0-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-81872CVSS 5.3Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.5.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-82720CVSS 5.9Red Hat Hardened Imagespython3-unbound-0:1.26.1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-85501CVSS 5.3Red Hat Hardened Imagespython3-unbound-0:1.26.1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-10601CVSS 5.4Red Hat Hardened Imagesgrafana12.4-0:12.4.10-0.4.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15792CVSS 6.5Logging Subsystem for Red Hat OpenShift 6.2registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390xPatch ↗Advisory ↗
Red HatCVE-2026-15945CVSS 4.3Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64Patch ↗Advisory ↗
Red HatCVE-2026-16072CVSS 4.9Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64Patch ↗Advisory ↗
Red HatCVE-2026-16089CVSS 5.4Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64Patch ↗Advisory ↗
Red HatCVE-2026-16093CVSS 5.4Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64Patch ↗Advisory ↗
Red HatCVE-2026-16104CVSS 4.3Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64Patch ↗Advisory ↗
Red HatCVE-2026-16105CVSS 4.9Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64Patch ↗Advisory ↗
Red HatCVE-2026-16106CVSS 4.9Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64Patch ↗Advisory ↗
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.