Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
996 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-47550nvidia-driver: nvidia-driver: Privilege escalation via untrusted pointer dereference | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47574nvidia-vgpu: nvidia-vgpu: Arbitrary code execution via incorrect resource transfer between spheres | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47519nvidia-vgpu-software: nvidia-vgpu-software: Arbitrary code execution via kernel-mode out-of-bounds read | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47600nvidia-driver: nvidia-driver: Arbitrary code execution via improperly initialized resource | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47592nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds read in kernel mode layer | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47583nvidia-driver: nvidia-driver: Privilege escalation via type confusion in the kernel module | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47594nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via use-after-free driver commands | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47590nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via crafted driver commands | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47589nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47588nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47587nvidia-driver: nvidia-driver: Privilege escalation via use-after-free | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47559nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via unauthorized cross-process memory access | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47601nvidia-driver: nvidia-driver: Privilege escalation via improper memory access permissions in DMA-BUF import | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47591nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via read-only memory protection bypass | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47496nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Privilege escalation via crafted RPC in Virtual GPU Manager | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47597nvidia-driver: nvidia-driver: Arbitrary code execution via use-after-free in Resource Server | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47595nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via write to read-only memory | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47602nvidia-driver: nvidia-driver: Denial of Service via untrusted pointer dereference | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47599nvidia: nvidia: Privilege escalation via improper memory permissions during DMA mapping | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47554nvidia-driver: nvidia-driver: Data tampering via signature verification bypass under memory pressure | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-94603podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-91012org.apache.karaf.config/org.apache.karaf.config.core: Apache Karaf: Privilege escalation via path traversal in configuration service | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102496org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service (DoS) via deeply nested schema structures | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102495org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service via unbounded recursion during schema parsing | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95343chromium-browser: Use after free in WebAudio | Red Hat | Important | 1 | 2026-09-29 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.