Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Vendor bulletins
84 from Apple, Chrome, Cisco, Ivanti, OracleThe Adobe feed did not respond at the last check. Other sources loaded.
| Bulletin | Source | Type | CVEs | Published |
|---|---|---|---|---|
| CPUOct2026Oracle Critical Security Patch Update Advisory - October 2026 | Oracle | Critical Security Patch Update | No CVE listed | 2026-10-20 |
| CSPUSep2026Oracle Critical Security Patch Update Advisory - September 2026 | Oracle | Critical Security Patch Update | No CVE listed | 2026-09-15 |
| CSPUAug2026Oracle Critical Security Patch Update Advisory - August 2026 | Oracle | Critical Security Patch Update | No CVE listed | 2026-08-18 |
| CPUJul2026Oracle Critical Patch Update Advisory - July 2026 | Oracle | Critical Patch Update | No CVE listed | 2026-07-21 |
| CSPUJun2026Oracle Critical Security Patch Update Advisory - June 2026 | Oracle | Critical Security Patch Update | No CVE listed | 2026-06-16 |
| alertcve202635273Oracle Security Alert Advisory - CVE-2026-35273 | Oracle | Security Alert | 1 CVE: CVE-2026-35273 | 2026-06-10 |
| CSPUMay2026Oracle Critical Security Patch Update Advisory - May 2026 | Oracle | Critical Security Patch Update | No CVE listed | 2026-05-28 |
| CPUApr2026Oracle Critical Patch Update Advisory - April 2026 | Oracle | Critical Patch Update | No CVE listed | 2026-04-21 |
| alertcve202621992Oracle Security Alert for CVE-2026-21992 - 19 March 2026 | Oracle | Security Alert | 1 CVE: CVE-2026-21992 | 2026-03-19 |
| CPUJan2026Oracle Critical Patch Update Advisory - January 2026 | Oracle | Critical Patch Update | No CVE listed | 2026-01-20 |
| CPUOct2025Oracle Critical Patch Update Advisory - October 2025 | Oracle | Critical Patch Update | No CVE listed | 2025-10-21 |
| alertcve202561884Oracle Security Alert for CVE-2025-61884 - 11 October 2025 | Oracle | Security Alert | 1 CVE: CVE-2025-61884 | 2025-10-11 |
| alertcve202561882Oracle Security Alert for CVE-2025-61882 - 4 October 2025 | Oracle | Security Alert | 1 CVE: CVE-2025-61882 | 2025-10-04 |
| CPUJul2025Oracle Critical Patch Update Advisory - July 2025 | Oracle | Critical Patch Update | No CVE listed | 2025-07-15 |
| CPUApr2025Oracle Critical Patch Update Advisory - April 2025 | Oracle | Critical Patch Update | No CVE listed | 2025-04-15 |
| CPUJan2025Oracle Critical Patch Update Advisory - January 2025 | Oracle | Critical Patch Update | No CVE listed | 2025-01-21 |
| alertcve202421287Oracle Security Alert for CVE-2024-21287 - 18 November 2024 | Oracle | Security Alert | 1 CVE: CVE-2024-21287 | 2024-11-18 |
| CPUOct2024Oracle Critical Patch Update Advisory - October 2024 | Oracle | Critical Patch Update | No CVE listed | 2024-10-15 |
| CPUJul2024Oracle Critical Patch Update Advisory - July 2024 | Oracle | Critical Patch Update | No CVE listed | 2024-07-16 |
| CPUApr2024Oracle Critical Patch Update Advisory - April 2024 | Oracle | Critical Patch Update | No CVE listed | 2024-04-16 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.