Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
988 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-110148chromium-browser: Use after free in SVG | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110151chromium-browser: Use after free in Media | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109740firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-92892github.com/jfrog/jfrog-cli: Potential command execution on the host running JFrog CLI. | Red Hat | Critical | 1 | 2026-10-13 |
| CVE-2026-110155chromium-browser: Buffer overflow in PDFium | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110157chromium-browser: Use after free in SVG | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110163chromium-browser: Use after free in DOM | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110140chromium-browser: Type confusion in V8 | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110162chromium-browser: Use after free in Desktop | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109707firefox: Sandbox escape due to use-after-free in the Networking component | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109705firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110158chromium-browser: Use after free in Passwords | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110147chromium-browser: Use after free in PDF | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110220github.com/kubeflow/hub: Kubeflow Model Registry: Privilege escalation via Server-Side Request Forgery in InferenceService annotation | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110166chromium-browser: Buffer overflow in Animation | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110154chromium-browser: Use after free in Canvas | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110139chromium-browser: Use after free in Media | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110153chromium-browser: Use after free in Media | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110156chromium-browser: Incorrect reference resolution in Extensions | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110138chromium-browser: Use after free in ShapeDetection | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110145chromium-browser: Use after free in Passwords | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110167chromium-browser: Use after free in Media | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110171chromium-browser: Use after free in Media | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110164chromium-browser: Use after free in DOM | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110172chromium-browser: Use after free in Media | Red Hat | Important | 1 | 2026-10-13 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.