Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Vendor bulletins
84 from Apple, Chrome, Cisco, Ivanti, OracleThe Adobe feed did not respond at the last check. Other sources loaded.
| Bulletin | Source | Type | CVEs | Published |
|---|---|---|---|---|
| iOS 26.7.1 and iPadOS 26.7.1 | Apple | Security Update | No CVE listed | 2026-09-28 |
| macOS Tahoe 26.7.1 | Apple | Security Update | No CVE listed | 2026-09-28 |
| macOS Sequoia 15.8.1 | Apple | Security Update | No CVE listed | 2026-09-28 |
| CSPUSep2026Oracle Critical Security Patch Update Advisory - September 2026 | Oracle | Critical Security Patch Update | No CVE listed | 2026-09-15 |
| cisco-sa-hardening-esa-dfCrfXkmCisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 | Cisco | Critical | 2026-09-14 | |
| iOS 27 and iPadOS 27 | Apple | Security Update | No CVE listed | 2026-09-14 |
| iOS 26.7 and iPadOS 26.7 | Apple | Security Update | No CVE listed | 2026-09-14 |
| macOS Golden Gate 27 | Apple | Security Update | No CVE listed | 2026-09-14 |
| macOS Tahoe 26.7 | Apple | Security Update | No CVE listed | 2026-09-14 |
| macOS Sequoia 15.8 | Apple | Security Update | No CVE listed | 2026-09-14 |
| tvOS 27 | Apple | Security Update | No CVE listed | 2026-09-14 |
| watchOS 27 | Apple | Security Update | No CVE listed | 2026-09-14 |
| visionOS 27 | Apple | Security Update | No CVE listed | 2026-09-14 |
| Safari 27 | Apple | Security Update | No CVE listed | 2026-09-14 |
| Xcode 27 | Apple | Security Update | No CVE listed | 2026-09-14 |
| September 2026 Security Update | Ivanti | Security Advisory | No CVE listed | 2026-09-08 |
| cisco-sa-cuic-sql-inject-2qbfWSm5Cisco Unified Intelligence Center SQL Injection Vulnerability | Cisco | Medium | 1 CVE: CVE-2026-20327 | 2026-08-19 |
| CSPUAug2026Oracle Critical Security Patch Update Advisory - August 2026 | Oracle | Critical Security Patch Update | No CVE listed | 2026-08-18 |
| Safari 26.6.1 | Apple | Security Update | No CVE listed | 2026-08-18 |
| iOS 26.6.1 and iPadOS 26.6.1 | Apple | Security Update | No CVE listed | 2026-08-17 |
| iOS 18.7.10 and iPadOS 18.7.10 | Apple | Security Update | No CVE listed | 2026-08-17 |
| macOS Tahoe 26.6.2 | Apple | Security Update | No CVE listed | 2026-08-17 |
| visionOS 26.6.1 | Apple | Security Update | No CVE listed | 2026-08-17 |
| August 2026 Security Update | Ivanti | Security Advisory | No CVE listed | 2026-08-11 |
| macOS Tahoe 26.6.1 | Apple | Security Update | No CVE listed | 2026-08-06 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.