CVE-2026-4046
HighAdvisory
Published 30 Mar 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.004
- 32nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,880
- of 17,787 indexed, latest versions
- Container images
- 2,125
- deployed by those charts
- Fix available
- 3 of 4
- affected packages
Red Hat Security Advisory: glibc security update
Carried by container images the latest versions of 1,880 of 17,787 indexed charts deploy, on 2,125 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| glibcdeb | 2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+55 more | 2.35-0ubuntu3.14, 2.36-9+deb12u14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e3+2 more | 1,863 |
| glibcapk | 2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+7 more | 2.43-r6 | 20 |
| eglibcdeb | 2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more | no fix listed | 7 |
| glibcrpm | 2.26-lp151.18.7, 2.28-42.el8_0.1, 2.28-72.el8_1.1, 2.28-101.el8+29 more | 0:2.28-251.el8_10.37, 2.38-20, 2.43-2.1 | 235 |
- OSV records
- CGA-229m-666p-m6pjCGA-3m2c-2p7h-jh79DEBIAN-CVE-2026-4046UBUNTU-CVE-2026-4046RHSA-2026:20587RLSA-2026:20587AZL-81273ECHO-511d-493a-869eopenSUSE-SU-2026:10722-1
- Also known as
- CGA-4677-mx7m-c27p, CGA-5v9q-38j7-x3cg, CGA-6rph-gxmg-fqx5, CGA-89vv-3r63-429r, CGA-8mxx-m272-2w2r, CGA-947p-p8jf-59v6, CGA-9f7h-rwh4-rqq8, CGA-cr3q-p72f-c68p, CGA-hf3c-3g26-884q, CGA-hh2h-qhg9-85hm, CGA-hm83-4gr6-p3qh, CGA-qxqg-xq26-h75q, CGA-xg6m-vg6w-3m4x, CGA-xxcr-pv23-2mwh, USN-8611-1
Charts affected
1,880 by stars
Container images carrying it
2,125 by charts deploying them
A fixed version is listed for 3 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| clickhouse/ | dc5658853ce1 | glibc | 2.35-0ubuntu3.14 | 1 |
| clickhouse/ | e019438e1e05 | glibc | 2.35-0ubuntu3.14 | 1 |
| cloudflare/ | eb5c9324efe3 | glibc | 2.36-9+deb12u14 | 1 |
| cloudve/ | af56e77ca587 | glibc | no fix listed | 1 |
| cloudve/ | d79c1c5881c0 | glibc | no fix listed | 1 |
| clowder/ | 11f3d844e4c0 | glibc | 2.36-9+deb12u14 | 1 |
| clowder/ | 14155326c7b9 | glibc | 2.36-9+deb12u14 | 1 |
| clowder/ | bf146f1ca24f | glibc | 2.36-9+deb12u14 | 1 |
| cm2network/ | 8cba47f53df5 | glibc | 2.41-12+deb13u3 | 1 |
| cockroachdb/ | 1116820f4134 | glibc | 0:2.28-251.el8_10.37 | 1 |
| cockroachdb/ | 983312754620 | glibc | 0:2.28-251.el8_10.37 | 1 |
| coderenvs/ | 1deffc4670e6 | glibc | 0:2.28-251.el8_10.37 | 1 |
| coderenvs/ | 76fd37fe6830 | glibc | 0:2.28-251.el8_10.37 | 1 |
| collabora/ | 01dc4ab83977 | glibc | 2.36-9+deb12u14 | 1 |
| collabora/ | 05299b452f7f | glibc | 2.36-9+deb12u14 | 1 |
| confluentinc/ | f2975d507a2a | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | 8f1544df1f48 | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | 3bf359d5e340 | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | 83dbca3efd2a | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | adc392d28a1e | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | c0224a1adf7a | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | dc9b972db002 | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | 4bc70a83ca6f | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | b0b7aa26254a | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | 8ec46c27982f | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | ee403d5b9090 | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | b651d4b6185a | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | 0bec03c1f3ce | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | 5ca5f3269814 | glibc | 0:2.28-251.el8_10.37 | 1 |
| confluentinc/ | 78c190f4472c | glibc | 0:2.28-251.el8_10.37 | 1 |
| consensys/ | bf6ecd2ea716 | glibc | 2.39-0ubuntu8.8 | 1 |
| contentsquareplatform/ | 24555f22d4be | glibc | 2.36-9+deb12u14 | 1 |
| cortezaproject/ | 0bcdcbcd3c63 | glibc | 2.35-0ubuntu3.14 | 1 |
| cortezaproject/ | 8eb7a26605c9 | glibc | no fix listed | 1 |
| cortezaproject/ | cb9f200de5d2 | glibc | 2.35-0ubuntu3.14 | 1 |
| cortezaproject/ | 4ea78dfe5364 | glibc | 2.36-9+deb12u14 | 1 |
| coturn/ | f4c2af06c3c5 | glibc | 2.41-12+deb13u3 | 1 |
| countly/ | e3c238248f99 | glibc | no fix listed | 1 |
| cradlepoint/ | 8f5720b0cd03 | glibc | no fix listed | 1 |
| craftypath/ | 402a0024c732 | glibc | 0:2.28-251.el8_10.37 | 1 |
| cribl/ | 762747cb6796 | glibc | no fix listed | 1 |
| csiplugin/ | 1fa83d45417f | glibc | no fix listed | 1 |
| cspconsole/ | 5524a26a6c23 | glibc | 2.36-9+deb12u14 | 1 |
| cspconsole/ | 46dda4a31bd6 | glibc | 2.36-9+deb12u14 | 1 |
| cspconsole/ | 39750248193b | glibc | 2.36-9+deb12u14 | 1 |
| cspconsole/ | 9a2d8840bfdf | glibc | 2.36-9+deb12u14 | 1 |
| ctron/ | 8fdea8f76499 | glibc | 0:2.28-251.el8_10.37 | 1 |
| cubejs/ | 34ac523a9bab | glibc | 2.36-9+deb12u14 | 1 |
| cybrarist/ | e9e2447ac666 | glibc | 2.41-12+deb13u3 | 1 |
| dachichang/ | 7ccac90a935e | glibc | 2.36-9+deb12u14 | 1 |