Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
1,031 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-110744multicluster-global-hub-operator-bundle: Operator ServiceAccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide | Red Hat | Important | 1 | 2026-10-21 |
| CVE-2026-114143toml: toml-node: Denial of Service via long dotted keys in TOML input | Red Hat | Important | 1 | 2026-10-21 |
| CVE-2026-114141toml: toml: Denial of Service via crafted array-of-tables headers | Red Hat | Important | 1 | 2026-10-21 |
| CVE-2026-114102adm-zip: adm-zip: Denial of Service via malformed ZIP archive decompression | Red Hat | Important | 1 | 2026-10-21 |
| CVE-2026-114145GitPython: GitPython: arbitrary code execution via improper submodule path validation | Red Hat | Important | 1 | 2026-10-21 |
| CVE-2026-114112sharp: sharp: Arbitrary code execution via crafted image files | Red Hat | Important | 1 | 2026-10-21 |
| CVE-2026-114050vllm: vllm: Denial of Service via multimodal cache desynchronization | Red Hat | Important | 1 | 2026-10-21 |
| CVE-2026-114096dulwich: dulwich: Arbitrary code execution via symlink following during file checkout | Red Hat | Important | 1 | 2026-10-21 |
| CVE-2026-114098dulwich: Dulwich: Arbitrary code execution via symlink directory traversal during stash pop | Red Hat | Important | 1 | 2026-10-21 |
| CVE-2026-114097dulwich: dulwich: Arbitrary code execution via symlink path traversal during branch filtering | Red Hat | Important | 1 | 2026-10-21 |
| CVE-2026-114113sharp: sharp: arbitrary code execution via crafted image files | Red Hat | Important | 1 | 2026-10-21 |
| CVE-2026-112942launch-editor: launch-editor: Command injection via improper file path validation | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-101296tomcat: tomcat: Authentication bypass via non-GSSAPI SASL in JNDI realm | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113161chromium-browser: chromium-browser: Use after free in WebRTC | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113356dokuwiki: dokuwiki: Arbitrary code execution via insecure draft deserialization | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113043chromium-browser: chromium-browser: Use after free in iOSWeb | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2025-71436raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113252chromium-browser: angle: Improper input validation in ANGLE | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-71195manila: manila: Public Manila Share Allows Cross-Project Access-Rule and Export-Metadata Writes | Red Hat | Critical | 1 | 2026-10-20 |
| CVE-2026-111758markdown-it: markdown-it: Denial of Service via unclosed link reference definitions | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113274chromium-browser: chromium-browser: Use after free in ReadingMode | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113314chromium-browser: chromium-browser: Use after free in Media | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113017chromium-browser: chromium-browser: Use after free in Views | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113025chromium-browser: chromium-browser: Use after free in Input | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113323chromium-browser: chromium-browser: Use after free in Chrome for iOS | Red Hat | Important | 1 | 2026-10-20 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.