Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
1,031 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-95365chromium-browser: Type confusion in IndexedDB | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95286chromium-browser: Type confusion in Bindings | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102253iperf3: iperf3: Denial of Service via UDP receive worker infinite loop | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102331chromium-browser: angle: chromium-browser: arbitrary code execution via buffer overflow in ANGLE | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95282chromium-browser: Use after free in Platform | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100788firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102323chromium-browser: chromium-browser: Type confusion in V8 | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102299chromium-browser: chromium-browser: Type confusion in V8 | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95351chromium-browser: Use after free in Views | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95348chromium-browser: Use after free in Bluetooth | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95335chromium-browser: Use after free in HID | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95274chromium-browser: Improper output encoding in DevTools | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95372chromium-browser: Use after free in Chromecast | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95322chromium-browser: Out of bounds write in GPU | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102827simple-git: simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291) | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95373chromium-browser: Use after free in DevTools | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95355chromium-browser: Incorrect authorization in Navigation | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-84782openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102422shell-quote: shell-quote: Arbitrary command execution via improper line terminator handling | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95338chromium-browser: Use after free in PDFium | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95389wireshark: Heap-based Buffer Overflow in Wireshark | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102828simple-git: simple-git unsafe-operation guard does not block trailer command configuration | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100763firefox: Incorrect boundary conditions in the Graphics: WebGPU component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102306chromium-browser: chromium-browser: Use after free in Bluetooth | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-63209github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing | Red Hat | Important | 1 | 2026-09-29 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.