Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Microsoft lifecycle milestones
190 matching of 230 products tracked| Product | Release | Milestone | Date |
|---|---|---|---|
| Windows (Client) | 11 24H2 (W) | End of life | 2026-10-13 |
| Windows Server | Windows Server 2012 R2 (LTSC) | Extended security updates ended | 2026-10-13 |
| Windows Server | Windows Server 2012 (LTSC) | Extended security updates ended | 2026-10-13 |
| Office | 2021 | End of life | 2026-10-13 |
| Visual Studio | 2026 - 18.10 | End of life | 2026-10-13 |
| Visual Studio | 2026 - 18.9 | End of life | 2026-09-08 |
| Visual Studio | 2026 - 18.8 | End of life | 2026-08-11 |
| SharePoint Server | 2019 | End of life | 2026-07-14 |
| SharePoint Server | 2016 | End of life | 2026-07-14 |
| Visual Studio | 2026 - 18.7 | End of life | 2026-07-14 |
| Visual Studio | 2022 - 17.12 (LTSC) | End of life | 2026-07-14 |
| Visual Studio | 2026 - 18.6 | End of life | 2026-06-09 |
| Windows Server | Windows Server 23H2 AC | End of life | 2026-05-12 |
| Visual Studio | 2026 - 18.5 | End of life | 2026-05-12 |
| Visual Studio | 2026 - 18.4 | End of life | 2026-04-14 |
| Visual Studio | 2026 - 18.3 | End of life | 2026-03-10 |
| Visual Studio | 2026 - 18.2 | End of life | 2026-02-10 |
| Visual Studio | 2026 - 18.1 | End of life | 2026-01-13 |
| Visual Studio | 2022 - 17.10 (LTSC) | End of life | 2026-01-13 |
| Visual Studio | 2026 - 18.0 | End of life | 2025-12-09 |
| Windows (Client) | 11 23H2 (W) | End of life | 2025-11-11 |
| Windows (Client) | 11 22H2 (E) | End of life | 2025-10-14 |
| Windows (Client) | 10 1507 (E) (LTS) | End of life | 2025-10-14 |
| Office | 2019 | End of life | 2025-10-14 |
| Office | 2016 | End of life | 2025-10-14 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.