Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
1,031 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-47599nvidia: nvidia: Privilege escalation via improper memory permissions during DMA mapping | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-47554nvidia-driver: nvidia-driver: Data tampering via signature verification bypass under memory pressure | Red Hat | Important | 1 | 2026-09-30 |
| CVE-2026-94603podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-91012org.apache.karaf.config/org.apache.karaf.config.core: Apache Karaf: Privilege escalation via path traversal in configuration service | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102496org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service (DoS) via deeply nested schema structures | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102495org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service via unbounded recursion during schema parsing | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95343chromium-browser: Use after free in WebAudio | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95350chromium-browser: angle: Buffer overflow in ANGLE | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95318chromium-browser: Buffer overflow in Video | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95283chromium-browser: Buffer overflow in Tint | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95284chromium-browser: angle: Buffer overflow in ANGLE | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95349chromium-browser: Buffer overflow in WebGL | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95281chromium-browser: angle: Buffer overflow in ANGLE | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95339chromium-browser: Use after free in ServiceWorker | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102676electron: electron: Privilege escalation via unauthorized Node.js integration in web workers | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95357chromium-browser: Out of bounds write in GPU | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102826simple-git: simple-git allows command execution through unblocked Git configuration includes | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95299chromium-browser: Use after free in GPU | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95277chromium-browser: Use after free in Views | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95310chromium-browser: Use after free in AdFilter | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95329chromium-browser: Out of bounds write in WebGL | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95356chromium-browser: Use after free in WindowDialog | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95313chromium-browser: Use after free in Fullscreen | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95304chromium-browser: Out of bounds write in V8 | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95306chromium-browser: Type confusion in V8 | Red Hat | Important | 1 | 2026-09-29 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.
