Patch Advisories

Microsoft's monthly release and every non-Microsoft advisory, in one browser. Switch scope below; everything under it follows.

At a glance — everything in scope

  • 1,756 Entries in scope 448 Microsoft · 1,308 Non-Microsoft
  • 362 Exigent KEV-listed, exploited, CVSS ≥ 9.0 and a live urgency signal — of 1,752 entries with a resolved score; 4 not yet scored and so not counted
  • 238 Ransomware-linked CISA records a known ransomware campaign using these
  • 1,293 Past CISA deadline Overdue against CISA's federal remediation date. Microsoft CVEs carry no CISA deadline, so none of them are counted here.

EVULNABLE Risk across both halves

Immediate 465 26% · 85-100 Urgent 844 48% · 65-84 Elevated 387 22% · 10-64 Routine 59 3% · 4-9 Informational 1 <1% · 0-3 Exigent flag 362 counted within Immediate

Scope

Microsoft only, non-Microsoft, or both. Everything below follows the choice.

Why the two halves are ranked separately

One browser over both halves — search, filter and export Microsoft and non-Microsoft CVEs together. Ranking stays per half: every KEV entry is exploited by construction, which floors it above every Microsoft CVE, so one merged leaderboard would just rebuild the Dashboard.

Browse every advisory

Microsoft's release and every non-Microsoft CISA KEV advisory in one list, ranked on one EVULNABLE Risk scale. Ranking is not the point here — see the two Patch First sections below for that — searching across both is.

Risk band
Source
Exploitation

94 of 1,756 entries match the current filters, sorted by EVULNABLE Risk.

Microsoft and non-Microsoft advisories matching the current filters, ranked by EVULNABLE Risk Score
CVE Source Vendor Title EVRS CVSS EPSSFlags CISA due
CVE-2021-30713 Non-Microsoft Apple Apple macOS Unspecified Vulnerability 75 Urgent 7.8 0.070 (93.7th pctl) Overdue 2021-11-17
CVE-2021-1871 Non-Microsoft Apple Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability 75 Urgent 9.8 0.070 (93.7th pctl) Overdue 2021-11-17
CVE-2021-30952 Non-Microsoft Apple Apple Multiple Products Integer Overflow or Wraparound Vulnerability 75 Urgent 7.8 0.070 (93.7th pctl) Overdue 2026-03-26
CVE-2022-32917 Non-Microsoft Apple Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability 75 Urgent 7.8 0.056 (92.4th pctl) Overdue 2022-10-05
CVE-2021-30900 Non-Microsoft Apple Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability 75 Urgent 7.8 0.052 (91.9th pctl) Overdue 2023-04-20
CVE-2019-7287 Non-Microsoft Apple Apple iOS Memory Corruption Vulnerability 75 Urgent 7.8 0.046 (90.9th pctl) Overdue 2022-06-13
CVE-2023-41991 Non-Microsoft Apple Apple Multiple Products Improper Certificate Validation Vulnerability 75 Urgent 5.5 0.045 (90.9th pctl) Overdue 2023-10-16
CVE-2021-30661 Non-Microsoft Apple Apple Multiple Products WebKit Storage Use-After-Free Vulnerability 75 Urgent 8.8 0.045 (90.8th pctl) Overdue 2021-11-17
CVE-2025-24200 Non-Microsoft Apple Apple iOS and iPadOS Incorrect Authorization Vulnerability 75 Urgent 6.1 0.044 (90.6th pctl) Overdue 2025-03-05
CVE-2021-30869 Non-Microsoft Apple Apple iOS, iPadOS, and macOS Type Confusion Vulnerability 75 Urgent 7.8 0.042 (90.2nd pctl) Overdue 2021-11-17
CVE-2025-24201 Non-Microsoft Apple Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability 75 Urgent 10.0 0.041 (90.1st pctl) Overdue 2025-04-03
CVE-2023-43000 Non-Microsoft Apple Apple Multiple products Use-After-Free Vulnerability 75 Urgent 8.8 0.039 (89.5th pctl) Overdue 2026-03-26
CVE-2020-9907 Non-Microsoft Apple Apple Multiple Products Memory Corruption Vulnerability 75 Urgent 7.8 0.039 (89.5th pctl) Overdue 2022-07-18
CVE-2021-30665 Non-Microsoft Apple Apple Multiple Products WebKit Memory Corruption Vulnerability 75 Urgent 8.8 0.037 (88.9th pctl) Overdue 2021-11-17
CVE-2021-31010 Non-Microsoft Apple Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability 75 Urgent 7.5 0.037 (88.9th pctl) Overdue 2022-09-15
CVE-2021-30663 Non-Microsoft Apple Apple Multiple Products WebKit Integer Overflow Vulnerability 75 Urgent 8.8 0.035 (88.3rd pctl) Overdue 2021-11-17
CVE-2022-32894 Non-Microsoft Apple Apple iOS and macOS Out-of-Bounds Write Vulnerability 75 Urgent 7.8 0.033 (87.6th pctl) Overdue 2022-09-08
CVE-2022-48503 Non-Microsoft Apple Apple Multiple Products Unspecified Vulnerability 75 Urgent 8.8 0.032 (87.3rd pctl) Overdue 2025-11-10
CVE-2020-9934 Non-Microsoft Apple Apple iOS, iPadOS, and macOS Input Validation Vulnerability 75 Urgent 5.5 0.032 (87.3rd pctl) Overdue 2022-09-29
CVE-2023-41061 Non-Microsoft Apple Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability 75 Urgent 7.8 0.031 (87th pctl) Overdue 2023-10-02
CVE-2021-30666 Non-Microsoft Apple Apple iOS WebKit Buffer Overflow Vulnerability 75 Urgent 8.8 0.030 (86.4th pctl) Overdue 2021-11-17
CVE-2021-30983 Non-Microsoft Apple Apple iOS and iPadOS Buffer Overflow Vulnerability 75 Urgent 7.8 0.029 (86.1st pctl) Overdue 2022-07-18
CVE-2023-41992 Non-Microsoft Apple Apple Multiple Products Kernel Privilege Escalation Vulnerability 75 Urgent 7.8 0.029 (86.1st pctl) Overdue 2023-10-16
CVE-2018-4344 Non-Microsoft Apple Apple Multiple Products Memory Corruption Vulnerability 75 Urgent 7.8 0.029 (86th pctl) Overdue 2022-07-18
CVE-2023-38606 Non-Microsoft Apple Apple Multiple Products Kernel Unspecified Vulnerability 75 Urgent 5.5 0.029 (85.9th pctl) Overdue 2023-08-16
Download filtered entries (CSV)

Exactly the 94 entry(ies) matching the filters above, both sources in one file.

Data sources & attribution

Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms.

Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date. Linux distribution advisories come from Red Hat, Ubuntu and Debian; vendor bulletins from Adobe, Apple, Chrome, Cisco, Ivanti and Oracle, each linked to its own advisory.