Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
996 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-95350chromium-browser: angle: Buffer overflow in ANGLE | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95318chromium-browser: Buffer overflow in Video | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95283chromium-browser: Buffer overflow in Tint | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95284chromium-browser: angle: Buffer overflow in ANGLE | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95349chromium-browser: Buffer overflow in WebGL | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95281chromium-browser: angle: Buffer overflow in ANGLE | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95339chromium-browser: Use after free in ServiceWorker | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102676electron: electron: Privilege escalation via unauthorized Node.js integration in web workers | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95357chromium-browser: Out of bounds write in GPU | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102826simple-git: simple-git allows command execution through unblocked Git configuration includes | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95299chromium-browser: Use after free in GPU | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95277chromium-browser: Use after free in Views | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95310chromium-browser: Use after free in AdFilter | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95329chromium-browser: Out of bounds write in WebGL | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95356chromium-browser: Use after free in WindowDialog | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95313chromium-browser: Use after free in Fullscreen | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95304chromium-browser: Out of bounds write in V8 | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95306chromium-browser: Type confusion in V8 | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95365chromium-browser: Type confusion in IndexedDB | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95286chromium-browser: Type confusion in Bindings | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102253iperf3: iperf3: Denial of Service via UDP receive worker infinite loop | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102331chromium-browser: angle: chromium-browser: arbitrary code execution via buffer overflow in ANGLE | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95282chromium-browser: Use after free in Platform | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100788firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102323chromium-browser: chromium-browser: Type confusion in V8 | Red Hat | Important | 1 | 2026-09-29 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.