Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
998 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-112405pillow: Pillow: Denial of Service via null pointer dereference in Image.merge() | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-112404pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-112392pillow: pillow: Denial of Service via zero-size images in rank filters | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-112400pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-112399pillow: pillow: Denial of service via crafted APNG image | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-112307sqlparse: sqlparse: Arbitrary code execution via unescaped PHP output formatting | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-110522oc-mirror: oc-mirror: execution of unsigned opm binary extracted from catalog image in v1 cache rebuild | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-98532kernel: ipv6: do not let ipv6_find_hdr() return an offset past the packet end | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98524kernel: rds: ib: Clear the sg list when mapping an MR fails | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98550kernel: tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98573kernel: net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98548kernel: sctp: discard the rest of the packet on a stale-cookie error | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98621kernel: net: gue: reject invalid REMCSUM offsets | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98490kernel: net: openvswitch: conntrack: fix helper UAF due to extensions realloc | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98725kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98466kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98715kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98614kernel: sctp: avoid livelock while updating retransmit path | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98742kernel: kernel: Use-after-free via race condition in ALSA sequencer compatibility ioctls | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98442kernel: net/sched: act_ct: fix helper UAF due to extensions realloc | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98769kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98716kernel: KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98741kernel: ALSA: ua101: reject mismatched capture/playback packet sizes | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98639kernel: KVM: riscv: Fix NACL hfence entry update order | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98718kernel: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state | Red Hat | Important | 1 | 2026-10-18 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.