Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
988 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| DSA-6559-1buildstream — security update | Debian | Not stated | 0 | 2026-10-14 |
| DSA-6558-1curl — security update | Debian | Not stated | 0 | 2026-10-14 |
| CVE-2026-83520dotnet: dotnet: Arbitrary code execution via untrusted data deserialization | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-70035dotnet: dotnet: arbitrary code execution via untrusted data deserialization | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-58280dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-69651dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-70159dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-70181dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96960dotnet: .NET: Denial of Service via asymmetric resource consumption | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96958dotnet: .NET Denial of Service Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96236dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-84008dotnet: .NET Denial of Service Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96233dotnet10.0: dotnet: dotnet8.0: dotnet9.0: ASP.NET Core Denial of Service Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96959dotnet: .NET: Denial of Service via unthrottled resource allocation | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-70186dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96230dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-70188dotnet: ASP.NET Core Security Feature Bypass Vulnerability | Red Hat | Critical | 1 | 2026-10-13 |
| CVE-2026-88092dotnet: ASP.NET Core Tampering Vulnerability | Red Hat | Critical | 1 | 2026-10-13 |
| CVE-2026-70174dotnet: .NET Remote Code Execution Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-102870dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96232dotnet: .NET: Information disclosure via out-of-bounds read | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96235dotnet: .NET: arbitrary code execution via out-of-bounds write | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-85363dotnet: dotnet: Privilege escalation via integer overflow | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-87697dotnet: dotnet: arbitrary code execution via untrusted data deserialization | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-102869dotnet: .NET and Visual Studio: Privilege escalation via type confusion | Red Hat | Important | 1 | 2026-10-13 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.