Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Microsoft lifecycle milestones
190 matching of 230 products tracked| Product | Release | Milestone | Date |
|---|---|---|---|
| SharePoint Server | 2013 SP1 | End of life | 2023-04-11 |
| Office | 2013 SP1 | End of life | 2023-04-11 |
| Windows (Client) | 8.1 | End of life | 2023-01-10 |
| Windows Server | Windows Server 2008 R2 SP1 (LTSC) | Extended security updates ended | 2023-01-10 |
| Windows Server | Windows Server 2008 SP2 (LTSC) | Extended security updates ended | 2023-01-10 |
| Visual Studio | 2012 - 11.0 | End of life | 2023-01-10 |
| Windows (Client) | 10 21H1 | End of life | 2022-12-13 |
| .NET | Core 3.1 (LTS) | End of life | 2022-12-13 |
| PowerShell | 7.0 (LTS) | End of life | 2022-12-03 |
| Visual Studio | 2022 - 17.3 | End of life | 2022-11-08 |
| SQL Server | 2016 SP2 | End of life | 2022-10-11 |
| Visual Studio | 2019 - 16.9 | End of life | 2022-10-11 |
| Windows Server | Windows Server 20H2 SAC | End of life | 2022-08-09 |
| SQL Server | 2008 R2 'Kilimanjaro' SP3 | Extended security updates ended | 2022-07-12 |
| SQL Server | 2008 'Katmai' SP4 | Extended security updates ended | 2022-07-12 |
| Internet Explorer | 11 | End of life | 2022-06-14 |
| Windows (Client) | 10 20H2 (W) | End of life | 2022-05-10 |
| Windows (Client) | 10 1909 (E) | End of life | 2022-05-10 |
| .NET | 5 | End of life | 2022-05-10 |
| Visual Studio | 2022 - 17.1 | End of life | 2022-05-10 |
| PowerShell | 7.1 | End of life | 2022-05-08 |
| .NET Framework | 4.6.1 | End of life | 2022-04-26 |
| .NET Framework | 4.6 | End of life | 2022-04-26 |
| .NET Framework | 4.5.2 | End of life | 2022-04-26 |
| Visual Studio | 2019 - 16.7 | End of life | 2022-04-12 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.