Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
988 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-70007dotnet: .NET Framework Remote Code Execution Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-70197dotnet: dotnet: Arbitrary code execution via out-of-bounds write | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-108398dotnet: .NET Framework: Security feature bypass via untrusted search path | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96224dotnet: .NET: arbitrary code execution via out-of-bounds write | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-97801dotnet: .NET Framework: Data tampering via improper input validation | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-70175dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96237dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-70179dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96956dotnet8.0: dotnet10.0: dotnet9.0: SQL Server Elevation of Privilege Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96222dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-102599engine.io: engine.io: Denial of Service via protocol revision mismatch during transport upgrade | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96957dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-70183dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110152chromium-browser: angle: Buffer overflow in ANGLE | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-95114libwebsockets: libwebsockets: Denial of Service via out-of-bounds read in LEJP parser | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-70190dotnet: dotnet: Privilege escalation via improper link resolution | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-70161dotnet: dotnet: Privilege escalation via path traversal | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-92817Ignition: Ignition: Arbitrary code execution via improper session privilege validation | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110136chromium-browser: Use after free in PDF | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96225dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-96231dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110161chromium-browser: Use after free in Network | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110149chromium-browser: Use after free in Browser | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110165chromium-browser: Use after free in Core | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110137chromium-browser: Use after free in WebRTC | Red Hat | Important | 1 | 2026-10-13 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.