Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
988 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-103059code.gitea.io/gitea: Gitea: Authentication bypass via case-insensitive SSH public key lookup | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106184chromium-browser: Uninitialized resource in Media | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106231chromium-browser: Uninitialized resource in Dawn | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106202chromium-browser: angle: Uninitialized resource in ANGLE | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106377chromium-browser: Race condition in Fonts | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-26287github.com/external-secrets/external-secrets: external-secrets: Sensitive information disclosure via webhook generator label enforcement bypass | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106255chromium-browser: Race condition in V8 | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106426chromium-browser: Race condition in Fonts | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106412chromium-browser: Race condition in Core | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-103009elasticsearch: Elasticsearch: Information disclosure via crafted cross-cluster search requests | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106364chromium-browser: Incorrect authorization in Omnibox | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106379chromium-browser: skia: Uninitialized resource in Skia | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106258chromium-browser: angle: Uninitialized resource in ANGLE | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106376chromium-browser: angle: Uninitialized resource in ANGLE | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106245chromium-browser: angle: Uninitialized resource in ANGLE | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106366chromium-browser: Incomplete cleanup in CustomTabs | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106332chromium-browser: Integer overflow in Compositing | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106492@backstage/backend-defaults: @backstage/backend-defaults: Access control bypass via improper service credential delegation | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106273chromium-browser: Uninitialized resource in Video | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106327chromium-browser: Incorrect authorization in Core | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-101258ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106396chromium-browser: Improper input validation in Omnibox | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-104850@modelcontextprotocol/sdk: @modelcontextprotocol/client: MCP TypeScript SDK: Information disclosure via unbound OAuth credentials | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-98222kernel: KEYS: encrypted: fix integer overflow of datablob_len | Red Hat | Important | 1 | 2026-10-06 |
| CVE-2026-106441hydra-core: hydra-core: Arbitrary code execution via unsafe logging configuration | Red Hat | Important | 1 | 2026-10-06 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.