Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
988 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-110169chromium-browser: Use after free in V8 | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110168chromium-browser: Use after free in V8 | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110159chromium-browser: Incorrect authorization in Updater | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109729firefox: Use-after-free in the JavaScript Engine: JIT component | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109732firefox: Use-after-free in the DOM: Streams component | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110146chromium-browser: Information leak in Passwords | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109727firefox: Use-after-free in the Audio/Video component | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109726firefox: Use-after-free in the SVG component | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109706firefox: Use-after-free in the Storage: IndexedDB component | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109710firefox: thunderbird: Use-after-free in the Graphics: Text component | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109717firefox: Use-after-free in the DOM: Bindings (WebIDL) component | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-55601multitail: multitail: Arbitrary command execution via improper input escaping in execute-on-match feature | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109714firefox: Incorrect boundary conditions in the Layout component | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110144chromium-browser: Incorrect authorization in Mojo | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110143chromium-browser: Use of uninitialized variable in ThirdParty lmza_sdk | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110170chromium-browser: Use after free in Bindings | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110247thunderbird: thunderbird: Arbitrary code execution via integer overflow in libmime | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110141chromium-browser: Observable discrepancy in Media | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-86063claude-code: Claude Code: arbitrary code execution via unverified commit hash during plugin installation | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109719firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110160chromium-browser: Missing authorization in ReadingMode | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-79610xen: Xen: Host privilege escalation via stale grant table pointers | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-110150chromium-browser: Privilege elevation in Installer | Red Hat | Important | 1 | 2026-10-13 |
| CVE-2026-109380modern-tar: modern-tar: Denial of Service via memory exhaustion from crafted archives | Red Hat | Important | 1 | 2026-10-12 |
| CVE-2026-96612hex: hex: Arbitrary code execution via path traversal in dependency application names | Red Hat | Important | 1 | 2026-10-12 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.