Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Vendor bulletins
84 from Apple, Chrome, Cisco, Ivanti, OracleThe Adobe feed did not respond at the last check. Other sources loaded.
| Bulletin | Source | Type | CVEs | Published |
|---|---|---|---|---|
| macOS Sequoia 15.7.9 | Apple | Security Update | No CVE listed | 2026-08-06 |
| CPUJul2026Oracle Critical Patch Update Advisory - July 2026 | Oracle | Critical Patch Update | No CVE listed | 2026-07-21 |
| July 2026 Security Update | Ivanti | Security Advisory | No CVE listed | 2026-07-14 |
| CSPUJun2026Oracle Critical Security Patch Update Advisory - June 2026 | Oracle | Critical Security Patch Update | No CVE listed | 2026-06-16 |
| alertcve202635273Oracle Security Alert Advisory - CVE-2026-35273 | Oracle | Security Alert | 1 CVE: CVE-2026-35273 | 2026-06-10 |
| June 2026 Security Update | Ivanti | Security Advisory | No CVE listed | 2026-06-09 |
| June 2026 Ivanti Neurons for ITSM Security Update | Ivanti | Security Advisory | No CVE listed | 2026-06-01 |
| CSPUMay2026Oracle Critical Security Patch Update Advisory - May 2026 | Oracle | Critical Security Patch Update | No CVE listed | 2026-05-28 |
| May 2026 Security Update | Ivanti | Security Advisory | No CVE listed | 2026-05-12 |
| May 2026 EPMM Security Update | Ivanti | Security Advisory | No CVE listed | 2026-05-07 |
| CPUApr2026Oracle Critical Patch Update Advisory - April 2026 | Oracle | Critical Patch Update | No CVE listed | 2026-04-21 |
| April 2026 Security Update | Ivanti | Security Advisory | No CVE listed | 2026-04-14 |
| alertcve202621992Oracle Security Alert for CVE-2026-21992 - 19 March 2026 | Oracle | Security Alert | 1 CVE: CVE-2026-21992 | 2026-03-19 |
| March 2026 Security Update | Ivanti | Security Advisory | No CVE listed | 2026-03-10 |
| February 2026 Security Update | Ivanti | Security Advisory | No CVE listed | 2026-02-10 |
| January 2026 EPMM Security Update | Ivanti | Security Advisory | No CVE listed | 2026-01-29 |
| CPUJan2026Oracle Critical Patch Update Advisory - January 2026 | Oracle | Critical Patch Update | No CVE listed | 2026-01-20 |
| December 2025 Security Update | Ivanti | Security Advisory | No CVE listed | 2025-12-09 |
| November 2025 Security Update | Ivanti | Security Advisory | No CVE listed | 2025-11-11 |
| CPUOct2025Oracle Critical Patch Update Advisory - October 2025 | Oracle | Critical Patch Update | No CVE listed | 2025-10-21 |
| October 2025 Security Update | Ivanti | Security Advisory | No CVE listed | 2025-10-14 |
| alertcve202561884Oracle Security Alert for CVE-2025-61884 - 11 October 2025 | Oracle | Security Alert | 1 CVE: CVE-2025-61884 | 2025-10-11 |
| alertcve202561882Oracle Security Alert for CVE-2025-61882 - 4 October 2025 | Oracle | Security Alert | 1 CVE: CVE-2025-61882 | 2025-10-04 |
| September 2025 Security Update | Ivanti | Security Advisory | No CVE listed | 2025-09-09 |
| August 2025 Security Update | Ivanti | Security Advisory | No CVE listed | 2025-08-12 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.