| | CVE-2026-5704 |  Red Hat | medium | 5.0 | — | | A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious … | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-33540 | Red Hat | medium | 3.1 | — | | A flaw was found in Distribution, a toolkit for managing container content. When operating in pull-t… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-34982 | Red Hat | high | 8.2 | — | | A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-34378 | Red Hat | medium | 6.5 | — | | A flaw was found in OpenEXR, a widely used image storage format. A remote attacker could exploit a m… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-34379 | Red Hat | high | 7.1 | — | | A flaw was found in OpenEXR, an image storage format library for the motion picture industry. A remo… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-34380 | Red Hat | medium | 5.3 | — | | A flaw was found in OpenEXR, an image storage format library. A remote attacker could exploit a sign… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-34444 | Red Hat | high | 8.1 | — | | A flaw was found in Lupa, a tool that integrates Lua or LuaJIT2 runtimes into CPython. An attacker c… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-34588 | Red Hat | high | 8.8 | — | | A flaw was found in OpenEXR, an image storage format for the motion picture industry. A remote attac… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-34589 | Red Hat | high | 8.8 | — | | A flaw was found in OpenEXR. The DWA lossy decoder, responsible for processing EXR image files, inco… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-34753 | Red Hat | medium | 5.4 | — | | A flaw was found in vLLM. This server-side request forgery (SSRF) vulnerability allows an attacker w… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-34755 | Red Hat | high | 6.5 | — | | A flaw was found in vLLM, an inference and serving engine for large language models. A remote attack… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-34756 | Red Hat | high | 6.5 | — | | A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unaut… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-34764 | Red Hat | low | 2.3 | — | | A flaw was found in Electron, a framework for building desktop applications. This vulnerability, a u… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-34986 | Red Hat | high | 7.5 | 0.0%
| ✓ Fix | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards … | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-35029 | Red Hat | high | 8.8 | 24.3%
| ✓ Fix | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-35030 | Red Hat | high | 9.1 | 0.0%
| ✓ Fix | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-35166 | Red Hat | medium | 4.6 | — | | A flaw was found in Hugo, a static site generator. This vulnerability arises from improper escaping … | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-35177 | Red Hat | medium | 4.1 | — | | A flaw was found in Vim's zip.vim plugin. A local user could be tricked into opening a specially cra… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-35172 | Red Hat | high | 7.5 | 0.1%
| | Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distr… | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-35199 |  Microsoft | medium | 6.1 | 0.3%
| | SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to befor… | Apr 6, 2026 | Jul 24, 2026 |
| | CVE-2026-34972 | Red Hat | medium | 4.2 | 0.0%
| | OpenFGA is a high-performance and flexible authorization/permission engine built for developers and … | Apr 6, 2026 | Apr 6, 2026 |
| | CVE-2026-5898 | Red Hat | low | 4.3 | 0.0%
| | Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote att… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5895 | Red Hat | low | 4.3 | 0.1%
| | Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote att… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5859 | Red Hat | high | 9.6 | 0.1%
| | Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to poten… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5911 | Red Hat | low | 6.1 | 0.0%
| | Policy bypass in ServiceWorkers in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5873 | Red Hat | high | 9.6 | 0.1%
| | Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5918 | Red Hat | low | 5.9 | 0.0%
| | An inappropriate implementation flaw was found in the Navigation component of the Chromium browser.
… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5880 | Red Hat | medium | 5.6 | 0.0%
| | Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remo… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5870 | Red Hat | high | 9.6 | 0.1%
| | Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execut… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5882 | Red Hat | medium | 5.4 | 0.0%
| | Incorrect security UI in Fullscreen in Google Chrome prior to 147.0.7727.55 allowed a remote attacke… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5888 | Red Hat | medium | 4.3 | 0.0%
| | Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to … | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5863 | Red Hat | high | 9.6 | 0.1%
| | Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5904 | Red Hat | low | 8.2 | 0.0%
| | Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a use… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5915 | Red Hat | low | 8.8 | 0.1%
| | Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed … | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5872 | Red Hat | high | 9.6 | 0.2%
| | Use after free in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5871 | Red Hat | high | 9.6 | 0.1%
| | Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute ar… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5892 | Red Hat | medium | 7.7 | 0.0%
| | Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed a remote att… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5875 | Red Hat | medium | 5.4 | 0.0%
| | Policy bypass in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform … | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5884 | Red Hat | medium | 8.0 | 0.1%
| | Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed … | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5866 | Red Hat | high | 9.6 | 0.2%
| | Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5910 | Red Hat | low | 8.8 | 0.1%
| | Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to poten… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5906 | Red Hat | low | 4.3 | 0.0%
| | An incorrect security ui flaw was found in the Omnibox component of the Chromium browser.
Upstream b… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5913 | Red Hat | low | 5.4 | 0.1%
| | Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to per… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5865 | Red Hat | high | 9.6 | 0.1%
| | Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute ar… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5886 | Red Hat | medium | 6.5 | 0.0%
| | Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attac… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5905 | Red Hat | low | 4.3 | 0.0%
| | Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a re… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5879 | Red Hat | medium | 8.8 | 0.2%
| | Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 a… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5869 | Red Hat | high | 6.5 | 0.0%
| | Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to o… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5912 | Red Hat | low | 9.6 | 0.1%
| | Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perf… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5889 | Red Hat | medium | 6.2 | 0.0%
| | Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read pot… | Apr 7, 2026 | Apr 7, 2026 |