Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Microsoft lifecycle milestones
190 matching of 230 products tracked| Product | Release | Milestone | Date |
|---|---|---|---|
| SQL Server | 6.0 'SQL95' SP3 | End of life | 1999-03-31 |
| Exchange Server | 4.0 SP5 | End of life | — |
| Exchange Server | 2019 CU15 SU5 | ESU ends | 2026-11-01 |
| Exchange Server | 2016 CU23 SU19 | ESU ends | 2026-11-01 |
| Windows Server | Windows Server 2016 (LTSC) | End of life | 2027-01-12 |
| SQL Server | 2014 'Hekaton' SP3 | ESU ends | 2027-07-12 |
| SQL Server | 2017 'Helsinki' | End of life | 2027-10-12 |
| Windows (Client) | 10 22H2 | ESU ends | 2028-10-10 |
| Windows (Client) | 10 1809 (E) (LTS) | End of life | 2029-01-09 |
| Windows Server | Windows Server 2019 (LTSC) | End of life | 2029-01-09 |
| SQL Server | 2016 SP3 Azure Connect Pack | ESU ends | 2029-07-17 |
| SQL Server | 2016 SP3 | ESU ends | 2029-07-17 |
| Windows (Client) | 10 1607 (E) (LTS) | ESU ends | 2029-10-13 |
| SQL Server | 2019 'Aris/Seattle' | End of life | 2030-01-08 |
| Windows Server | Windows Server 2022 (LTSC) | End of life | 2031-10-14 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.