Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
998 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-98857kernel: ipvs: bound LBLCR and LBLC cache growth | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98853kernel: net: gso: limit recursive IP-in-IP segmentation | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-98805kernel: tipc: prevent GCM nonce reuse on peer key changes | Red Hat | Important | 1 | 2026-10-18 |
| CVE-2026-16460bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization | Red Hat | Important | 1 | 2026-10-18 |
| DSA-6571-1xen — security update | Debian | Not stated | 0 | 2026-10-18 |
| DSA-6570-1haproxy — security update | Debian | Not stated | 0 | 2026-10-18 |
| DSA-6567-2cifs-utils — regression update | Debian | Not stated | 0 | 2026-10-18 |
| CVE-2026-111880freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication | Red Hat | Important | 1 | 2026-10-17 |
| CVE-2026-111881freerdp: freerdp: Denial of Service via crafted clipboard bitmap image | Red Hat | Important | 1 | 2026-10-17 |
| CVE-2026-68498com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names | Red Hat | Important | 1 | 2026-10-16 |
| CVE-2026-92262mariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. | Red Hat | Important | 1 | 2026-10-16 |
| CVE-2026-85746mariadb: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections | Red Hat | Important | 1 | 2026-10-16 |
| CVE-2026-97380mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statement | Red Hat | Important | 1 | 2026-10-16 |
| CVE-2026-111378freerdp: freerdp: Denial of Service via memory exhaustion in NLA frame parser | Red Hat | Important | 1 | 2026-10-16 |
| CVE-2026-86047mariadb: mariadb: SQL injection via improper identifier quoting | Red Hat | Important | 1 | 2026-10-16 |
| CVE-2026-110752perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selector | Red Hat | Important | 1 | 2026-10-16 |
| CVE-2026-111382freerdp: freerdp: Arbitrary code execution via crafted display frames | Red Hat | Important | 1 | 2026-10-16 |
| CVE-2026-102941github.com/gomarkdown/markdown: github.com/gomarkdown/markdown: Denial of Service via short URL parsing | Red Hat | Important | 1 | 2026-10-16 |
| CVE-2026-111380freerdp: FreeRDP: Arbitrary code execution via integer overflow in audio input buffer calculation | Red Hat | Important | 1 | 2026-10-16 |
| CVE-2026-111379freerdp: FreeRDP: Arbitrary code execution via crafted persistent cache file | Red Hat | Important | 1 | 2026-10-16 |
| CVE-2026-111381freerdp: freerdp: Arbitrary code execution via crafted persistent cache file | Red Hat | Important | 1 | 2026-10-16 |
| DSA-6569-1apache2 — security update | Debian | Not stated | 0 | 2026-10-16 |
| DSA-6568-1linux — security update | Debian | Not stated | 0 | 2026-10-16 |
| DSA-6567-1cifs-utils — security update | Debian | Not stated | 0 | 2026-10-16 |
| DSA-6566-1expat — security update | Debian | Not stated | 0 | 2026-10-16 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.