Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
988 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-103061gleam: gleam: Arbitrary directory deletion via path traversal in package metadata | Red Hat | Important | 1 | 2026-10-12 |
| CVE-2026-87744io.quarkus:quarkus-hibernate-orm-rest-data-panache: Missing Authorization in Quarkus REST Data Panache via Dropped Security Annotations | Red Hat | Important | 1 | 2026-10-12 |
| CVE-2026-75888openshift/console: openshift/console: Authenticated SSRF via Helm chart URL fetch | Red Hat | Important | 1 | 2026-10-12 |
| CVE-2026-109242freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling | Red Hat | Important | 1 | 2026-10-12 |
| CVE-2026-103658aspell: aspell: Arbitrary code execution via crafted dictionary file | Red Hat | Important | 1 | 2026-10-12 |
| CVE-2026-112257gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (load_resource_1033) | Red Hat | Important | 1 | 2026-10-12 |
| CVE-2026-112261gimp: gimp: use-after-free in XCF loader via PROP_SELECTED_PATH | Red Hat | Important | 1 | 2026-10-12 |
| CVE-2026-112260gimp: gimp: heap out-of-bounds read in XCF text-layer parasite parsing | Red Hat | Important | 1 | 2026-10-12 |
| CVE-2026-95837github.com/containerd/containerd: containerd: Privilege escalation via crafted container checkpoint restore | Red Hat | Important | 1 | 2026-10-12 |
| DSA-6557-1ntfs-3g — security update | Debian | Not stated | 0 | 2026-10-12 |
| DSA-6556-1nagios4 — security update | Debian | Not stated | 0 | 2026-10-12 |
| CVE-2026-108976emacs: zero-click local command execution via TRAMP | Red Hat | Important | 1 | 2026-10-11 |
| CVE-2026-108859github.com/mark3labs/mcp-go: mcp-go: Denial of Service via unbounded HTTP request body buffering | Red Hat | Important | 1 | 2026-10-11 |
| CVE-2026-16487bootc: containers-common: bootc: automatic updates can apply unsigned mutable-tag content under default containers policy | Red Hat | Important | 1 | 2026-10-10 |
| CVE-2026-55797github.com/argoproj/argo-cd/v3: github.com/argoproj/argo-cd/v2: argo-cd: Arbitrary command execution via crafted SSH repository proxy configuration | Red Hat | Important | 1 | 2026-10-09 |
| CVE-2026-107815mariadb: mariadb: Arbitrary code execution via CONNECT engine out-of-bounds write | Red Hat | Important | 1 | 2026-10-09 |
| CVE-2026-107823mariadb: mariadb: Privilege escalation via unescaped newlines in view parser | Red Hat | Important | 1 | 2026-10-09 |
| CVE-2026-107937org.apache.cxf/cxf-core: Apache CXF: Denial of Service via large multipart attachment headers | Red Hat | Important | 1 | 2026-10-09 |
| CVE-2026-107814mariadb: mariadb: Arbitrary code execution via insecure service account home directory | Red Hat | Important | 1 | 2026-10-09 |
| CVE-2026-108039org.apache.cxf/cxf-core: Apache CXF: Denial of Service via unrestricted XML parsing | Red Hat | Important | 1 | 2026-10-09 |
| CVE-2026-107818mariadb: mariadb: Privilege escalation via environment variable injection during service restart | Red Hat | Important | 1 | 2026-10-09 |
| CVE-2026-108106org.xerial.snappy/snappy-java: snappy-java: Denial of Service via unbounded memory allocation during decompression | Red Hat | Important | 1 | 2026-10-09 |
| CVE-2026-78384org.apache.cxf/cxf-core: Apache CXF: Denial of Service via uncontrolled data decompression | Red Hat | Important | 1 | 2026-10-09 |
| CVE-2026-102554com.google.guava/guava: Google Guava: Denial of Service via unthrottled memory allocation during deserialization | Red Hat | Important | 1 | 2026-10-09 |
| CVE-2025-61560github.com/argoproj/argo-cd: argo-cd: Rate limit bypass via race condition in SessionManager | Red Hat | Important | 1 | 2026-10-09 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.