CYBERSECURITYTRACKER
TRACKING7,942 stories in this site build1,731 vulnerability news stories in this site build
Vulnerabilities

September 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 6,088 vulnerabilities across 19,305 returned patch records from 5 vendors. Filter the month to date, or browse the static page trail without JavaScript.

19,305all patch recordsClear filters1,093criticalShow these records2Microsoft exploitation detectedShow these records4Microsoft in the Known Exploited Vulnerabilities catalogShow these records15,775tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Red Hat 8,500Suse 7,850Microsoft 2,574Android 284Cisco 97

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 95 of 97 · records 18,801 to 19,000 of 19,305

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-91780 ↗azl3 binutils 2.41-13 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableGNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference
CVE-2026-91779 ↗azl3 binutils 2.41-13 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableGNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference
CVE-2026-91781 ↗azl3 binutils 2.41-13 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableGNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference
CVE-2026-91986 ↗azl3 rust 1.75.0-31 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablegitoxide gix-transport before 0.59.2 CR/LF/NUL Injection
CVE-2026-93191 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablesmack: fix incorrect task context in smack_msg_queue_msgrcv
CVE-2026-81870 ↗azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableOpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
CVE-2026-81872 ↗azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableOpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
CVE-2026-80948 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablewifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()
CVE-2026-89627 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableHID: roccat: free buffered reports when destroying device
CVE-2026-87876 ↗azl3 cups 2.4.19-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableCups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)
CVE-2026-89473 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablepower: supply: bq25890: Fix power_supply reference leak
CVE-2026-89757 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablemm/mglru: fix and remove redundant unevictable folio handling
CVE-2026-80983 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablenet/smc: fix socket refcount leak in smc_switch_conns()
CVE-2026-89462 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablepower: supply: max17040: propagate register read errors
CVE-2026-89461 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablepower: supply: max17040: synchronize work cancellation on suspend
CVE-2026-89645 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablebtrfs: drop recovered reloc root refs on recovery failure
CVE-2026-89628 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableHID: picolcd: clamp eeprom debugfs read to bytes actually received
CVE-2026-80996 ↗azl3 kernel 6.6.157.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablenet: l2tp: do not propagate multicast notification errors
CVE-2026-80949 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablewifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()
CVE-2026-89565 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableipip: fix skb leak in collect_md mode when metadata_dst allocation fails
CVE-2026-89768 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablefs: fix user path of nested backing files
CVE-2026-89582 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablebnx2x: fix double free in bnx2x_init_firmware() error path
CVE-2026-89156 ↗azl3 pcre2 10.42-3 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablePCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.
CVE-2026-89160 ↗azl3 pcre2 10.42-3 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablePCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.
CVE-2026-78127 ↗azl3 strongswan 5.9.14-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablelibcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.
CVE-2026-78131 ↗azl3 strongswan 5.9.14-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablestrongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.
CVE-2026-78124 ↗azl3 strongswan 5.9.14-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablestrongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.
CVE-2026-80918 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableHID: core: fix number/pointer type confusion on long items
CVE-2026-80920 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableio_uring: defer eventfd signaling when queued from a wakeup handler
CVE-2026-18540 ↗azl3 nodejs 24.20.0-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableundici vulnerable to downstream response splitting via retry interceptor
CVE-2026-80784 ↗azl3 kernel 6.6.152.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablemptcp: pm: fix memory leak from alloc-during-teardown race
CVE-2026-80827 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableUSB: serial: option: fix slab OOB read in interrupt URB callback
CVE-2026-80893 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablemm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()
CVE-2026-80761 ↗azl3 kernel 6.6.157.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableBluetooth: ISO: zero the sockaddr before returning it in getname
CVE-2026-80892 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableerofs: cap LZMA stream pool size
CVE-2026-80910 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
CVE-2026-80797 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablenfc: pn533: purge fragmented skbs during cleanup
CVE-2026-80889 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablecan: isotp: fix timer drain order, wakeup handling and tx_gen ordering
CVE-2026-86137 ↗azl3 libxml2 2.11.5-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableIn libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
CVE-2026-80843 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablexfrm: fix xfrm_state_construct() auth-trunc leak
CVE-2026-86141 ↗azl3 libxml2 2.11.5-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablexmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.
CVE-2026-80744 ↗azl3 kernel 6.6.150.1-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablenetfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
CVE-2026-18743 ↗azl3 popt 1.19-1 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablePopt-devel: popt-static: short realloc in poptconfigfiletostring
CVE-2026-95274 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95274: Improper output encoding in DevTools
CVE-2026-95275 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95275: Incorrect reference resolution in MediaStream
CVE-2026-95276 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95276: Improper input validation in Themes
CVE-2026-95277 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95277: Use after free in Views
CVE-2026-95278 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95278: Missing authorization in WakeLock
CVE-2026-95279 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95279: UI misrepresentation in Omnibox
CVE-2026-95280 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95280: Race condition in V8
CVE-2026-95281 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95281: Buffer overflow in ANGLE
CVE-2026-95282 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95282: Use after free in Platform
CVE-2026-95283 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95283: Buffer overflow in Tint
CVE-2026-95284 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95284: Buffer overflow in ANGLE
CVE-2026-95285 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95285: Missing authorization in WebView
CVE-2026-95286 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95286: Type confusion in Bindings
CVE-2026-95287 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95287: Missing authorization in Navigation
CVE-2026-95288 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95288: UI misrepresentation in Mobile
CVE-2026-95289 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95289: Incorrect authorization in Scroll
CVE-2026-95290 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95290: Missing authorization in NFC
CVE-2026-95291 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95291: UI misrepresentation in SecurityIndicators
CVE-2026-95292 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95292: Incorrect authorization in Safebrowsing
CVE-2026-95293 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95293: Uninitialized resource in GPU
CVE-2026-95294 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95294: UI misrepresentation in Browser
CVE-2026-95295 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95295: Information leak in Mobile
CVE-2026-95296 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95296: Missing authorization in Core
CVE-2026-95297 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95297: Missing authorization in Contextual Tasks
CVE-2026-95298 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95298: Use after free in Browser
CVE-2026-95299 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95299: Use after free in GPU
CVE-2026-95300 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95300: Missing authorization in DevTools
CVE-2026-95301 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95301: Missing authorization in Extensions
CVE-2026-95302 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95302: Incorrect authorization in WebAPKs
CVE-2026-95303 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95303: Incomplete cleanup in SmartCard
CVE-2026-95304 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95304: Out of bounds write in V8
CVE-2026-95305 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95305: UI misrepresentation in Chromoting
CVE-2026-95306 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95306: Type confusion in V8
CVE-2026-95307 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95307: UI misrepresentation in ExtensionsMenu
CVE-2026-95308 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95308: Integer overflow in Metrics
CVE-2026-95309 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95309: UI misrepresentation in Mobile
CVE-2026-95310 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95310: Use after free in AdFilter
CVE-2026-95311 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95311: Free of non-heap memory in Fonts
CVE-2026-95312 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95312: Information leak in Passwords
CVE-2026-95313 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95313: Use after free in Fullscreen
CVE-2026-95314 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95314: Incorrect authorization in HID
CVE-2026-95315 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95315: Use after free in Aura
CVE-2026-95316 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95316: Unchecked return value in Performance
CVE-2026-95317 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95317: Incorrect authorization in MediaCapture
CVE-2026-95318 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95318: Buffer overflow in Video
CVE-2026-95319 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95319: Use after free in Printing
CVE-2026-95320 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95320: Missing authorization in Navigation
CVE-2026-95321 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95321: UI misrepresentation in Payments
CVE-2026-95322 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95322: Out of bounds write in GPU
CVE-2026-95323 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95323: UI misrepresentation in Chromium
CVE-2026-95324 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95324: Uninitialized resource in GPU
CVE-2026-95325 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95325: Use after free in ANGLE
CVE-2026-95326 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95326: Incomplete cleanup in Bluetooth
CVE-2026-95327 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95327: Information leak in Networking
CVE-2026-95328 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95328: Confused deputy in Mobile
CVE-2026-95329 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95329: Out of bounds write in WebGL
CVE-2026-95330 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95330: Improper state validation in Downloads
CVE-2026-95331 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95331: Out of bounds write in ANGLE
CVE-2026-95332 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95332: Use of uninitialized variable in Tint
CVE-2026-95333 ↗Not reportedN/AOut-of-bandNot availableMicrosoft rating unavailableChromium CVE-2026-95333: Use after free in Metrics

Cross-vendor patches

VendorCVESeverityProductFixed versionPatchAdvisory
Red HatCVE-2026-73281CVSS 3.5Red Hat Update Infrastructure 5registry.redhat.io/rhui5/installer-rhel9@sha256:d48913b5697bc2befdfc1933ad427edec6b24bdb00ac06916386b6f319dccc4b_amd64Patch ↗Advisory ↗
Red HatCVE-2025-1218CVSS 3.7Red Hat Hardened Imagesphp-0:8.5.11-2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2025-6170CVSS 2.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)libxml2-debuginfo-0:2.12.5-9.el10_0.2.aarch64Patch ↗Advisory ↗
Red HatCVE-2025-6170CVSS 2.5Red Hat Enterprise Linux AppStream EUS (v.9.6)libxml2-debuginfo-0:2.9.13-12.el9_6.3.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-60589CVSS 3.7Red Hat Enterprise Linux Supplementary (v. 8)java-1.8.0-ibm-1:1.8.0.8.71-1.el8_10.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-71463CVSS 2.7Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-controller-venv-tower-0:4.7.17-1.el9ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71463CVSS 2.7Red Hat Ansible Automation Platform 2.5 for RHEL 8automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71463CVSS 2.7Red Hat Ansible Automation Platform 2.7registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:0b4d286c39fbb3056643306df9e81c2d4727e005a551ab74c2cee0950f35bf25_amd64Patch ↗Advisory ↗
Red HatCVE-2026-71463CVSS 2.7Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64Patch ↗Advisory ↗
Red HatCVE-2026-71464CVSS 3.1Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-controller-venv-tower-0:4.7.17-1.el9ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71464CVSS 3.1Red Hat Ansible Automation Platform 2.5 for RHEL 8automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71464CVSS 3.1Red Hat Ansible Automation Platform 2.7registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:0b4d286c39fbb3056643306df9e81c2d4727e005a551ab74c2cee0950f35bf25_amd64Patch ↗Advisory ↗
Red HatCVE-2026-71464CVSS 3.1Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64Patch ↗Advisory ↗
Red HatCVE-2026-71465CVSS 3.1Red Hat Ansible Automation Platform 2.6 for RHEL 9automation-controller-venv-tower-0:4.7.17-1.el9ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71465CVSS 3.1Red Hat Ansible Automation Platform 2.5 for RHEL 8automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-71465CVSS 3.1Red Hat Ansible Automation Platform 2.7registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:0b4d286c39fbb3056643306df9e81c2d4727e005a551ab74c2cee0950f35bf25_amd64Patch ↗Advisory ↗
Red HatCVE-2026-71465CVSS 3.1Red Hat Ansible Automation Platform 2.6registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:0ea5754e6baa9da37abc43777bd9a05db5815454fc2949a8909a3e2aefc7a039_arm64Patch ↗Advisory ↗
Red HatCVE-2026-73281CVSS 3.5Red Hat Hardened Imagesopenssh-0:10.5p1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-15028CVSS 3.9Red Hat Enterprise Linux AppStream (v. 10)bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-16517CVSS 2.9Red Hat Enterprise Linux AppStream (v. 10)bsdcat-debuginfo-0:3.7.7-11.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-73281CVSS 3.5Red Hat Enterprise Linux AppStream (v. 10)openssh-askpass-0:9.9p1-27.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-73281CVSS 3.5Red Hat Enterprise Linux AppStream (v. 9)openssh-askpass-0:9.9p1-11.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-43514CVSS 3.7Red Hat Enterprise Linux AppStream (v. 10)tomcat9-1:9.0.120-1.el10_2.noarchPatch ↗Advisory ↗
Red HatCVE-2024-54677CVSS 3.7Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2024-54677CVSS 3.7Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2024-54677CVSS 3.7Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2024-54677CVSS 3.7Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2024-54677CVSS 3.7Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2025-55754CVSS 3.5Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2025-55754CVSS 3.5Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2025-55754CVSS 3.5Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2025-55754CVSS 3.5Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2025-55754CVSS 3.5Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-24733CVSS 3.7Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2026-24733CVSS 3.7Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2026-24733CVSS 3.7Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-24733CVSS 3.7Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2026-24733CVSS 3.7Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43514CVSS 3.7Red Hat Enterprise Linux AppStream EUS (v.9.6)tomcat-1:9.0.120-1.el9_6.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43514CVSS 3.7Red Hat Enterprise Linux AppStream (v. 9)tomcat-1:9.0.120-2.el9_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43514CVSS 3.7Red Hat Enterprise Linux AppStream (v. 8)tomcat-1:9.0.120-1.el8_10.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43514CVSS 3.7Red Hat Enterprise Linux AppStream E4S (v.9.2)tomcat-1:9.0.120-1.el9_2.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43514CVSS 3.7Red Hat Enterprise Linux AppStream E4S (v.9.4)tomcat-1:9.0.120-1.el9_4.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43514CVSS 3.7Red Hat Enterprise Linux AppStream E4S (v.8.8)tomcat-1:9.0.120-1.el8_8.noarchPatch ↗Advisory ↗
Red HatCVE-2026-77860CVSS 3.7Red Hat Hardened Imagespython3-unbound-0:1.26.1-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-82562CVSS 3.7Red Hat OpenShift Dev Spaces 3.30registry.redhat.io/devspaces/dashboard-rhel9@sha256:167f8fd2b88dc37abed12b6496ac32b5b031de3be233f2864afb918c8b692a1a_arm64Patch ↗Advisory ↗
Red HatCVE-2026-18209CVSS 3.4Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64Patch ↗Advisory ↗
Red HatCVE-2026-18209CVSS 3.4Red Hat build of Keycloak 26.6.7Not reportedPatch ↗Advisory ↗
CiscoCVE-2026-20071CVSS 3.8Cisco Identity Services Engine3.1Patch ↗Advisory ↗
Red HatCVE-2024-53161CVSS 3.8Red Hat Enterprise Linux BaseOS (v. 8)bpftool-0:4.18.0-553.163.1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2024-53161CVSS 3.8Red Hat Enterprise Linux NFV (v. 8)kernel-rt-0:4.18.0-553.163.1.rt7.504.el8_10.srcPatch ↗Advisory ↗
Red HatCVE-2026-44839CVSS 3.5Red Hat Hardened Imagesrabbitmq-server4.3-0:4.3.6-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45446CVSS 3.7Red Hat Hardened Imagesbootupd-0:0.3.2-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-67420CVSS 3.1Red Hat Hardened Imagesrabbitmq-server4.3-0:4.3.6-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-87876CVSS 3.0Red Hat Hardened Imagescups-0:2.4.19-4.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-89156CVSS 2.9Red Hat Hardened Imagespcre2-0:10.48-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-89160CVSS 3.7Red Hat Hardened Imagespcre2-0:10.48-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-89162CVSS 2.9Red Hat Hardened Imagespcre2-0:10.48-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2025-55754CVSS 3.5Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat9-1:9.0.120-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-24733CVSS 3.7Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat9-1:9.0.120-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-43514CVSS 3.7Red Hat Enterprise Linux AppStream EUS (v. 10.0)tomcat9-1:9.0.120-1.el10_0.noarchPatch ↗Advisory ↗
Red HatCVE-2026-18540CVSS 3.7Red Hat Hardened Imagesnodejs26-0:26.8.2-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-85498CVSS 3.5Red Hat Hardened Imagespolkit-main@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-18540CVSS 3.7Red Hat Hardened Imagesgrafana12.4-0:12.4.10-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-28378CVSS 3.1Red Hat Hardened Imagesgrafana12.4-0:12.4.10-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-41992CVSS 3.6Red Hat Enterprise Linux BaseOS (v. 8)gzip-0:1.9-15.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-41992CVSS 3.6Red Hat Update Infrastructure 5registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:7840142734dad76221aa6846ab6e8aacc913a8017e4c5c956d574f78b8dfa98d_amd64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)thunderbird-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)thunderbird-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)thunderbird-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)thunderbird-0:140.14.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.2)firefox-0:140.14.0-1.el9_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-85008CVSS 3.7Red Hat Hardened Imagesgrafana12.4-0:12.4.10-0.2.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)firefox-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.8.8)firefox-0:140.14.0-1.el8_8.ppc64lePatch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)firefox-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)firefox-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.6)firefox-0:140.14.0-1.el8_6.srcPatch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream AUS (v.8.4)firefox-0:140.14.0-1.el8_4.srcPatch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream (v. 9)thunderbird-0:140.14.0-1.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream (v. 10)thunderbird-0:140.14.0-1.el10_2.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream (v. 8)thunderbird-0:140.14.0-1.el8_10.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux Server (v. 7 ELS)firefox-0:140.14.0-1.el7_9.ppc64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v. 10.0)thunderbird-0:140.14.0-1.el10_0.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream E4S (v.9.4)thunderbird-0:140.14.0-1.el9_4.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-74976CVSS 3.4Red Hat Enterprise Linux AppStream EUS (v.9.6)thunderbird-0:140.14.0-1.el9_6.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-86137CVSS 2.9Red Hat Hardened Imageslibxml2-0:2.15.4-0.1.hum1@srcPatch ↗Advisory ↗
Red HatCVE-2026-86141CVSS 2.9Red Hat Hardened Imageslibxml2-0:2.15.4-0.1.hum1@srcPatch ↗Advisory ↗
Red HatCVE-2026-54891CVSS 3.7Red Hat Hardened Imageserlang27-0:27.3.4.17-1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-82562CVSS 3.7Red Hat Hardened Imagesgrafana13.2-0:13.2.1-0.1.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45446CVSS 3.7Red Hat Hardened Imagesruby3.3-0:3.3.10-23.6.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45446CVSS 3.7Red Hat Hardened Imagesruby4.0-0:4.0.6-37.3.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-45446CVSS 3.7Red Hat Hardened Imagesruby3.4-0:3.4.10-31.7.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2026-82562CVSS 3.7Red Hat Hardened Imagesgrafana13.1-0:13.1.3-0.4.hum1@aarch64Patch ↗Advisory ↗
Red HatCVE-2025-59436CVSS 3.2Red Hat Ceph Storage 8.1registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64Patch ↗Advisory ↗
Red HatCVE-2026-59846CVSS 3.9Red Hat Enterprise Linux AppStream (v. 9)libssh-debuginfo-0:0.10.4-19.el9_8.aarch64Patch ↗Advisory ↗
Red HatCVE-2026-59846CVSS 3.9Red Hat Enterprise Linux AppStream (v. 8)libssh-debuginfo-0:0.9.6-17.el8_10.aarch64Patch ↗Advisory ↗

Glossary

Open in glossary