Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
1,031 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-102302chromium-browser: chromium-browser: Buffer overflow in V8 | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102321chromium-browser: chromium-browser: Type confusion in V8 | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-97689urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100781firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100775firefox: thunderbird: Sandbox escape in the Graphics component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102328chromium-browser: chromium-browser: Type confusion in V8 | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102326chromium-browser: chromium-browser: Type confusion in V8 | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100791firefox: Use-after-free in the DOM: Core & HTML component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100790firefox: thunderbird: Use-after-free in the XSLT component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100789firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100786firefox: Sandbox escape due to use-after-free in the Graphics component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100784firefox: Use-after-free in the Layout: Text and Fonts component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100785firefox: thunderbird: Use-after-free in the DOM: Core & HTML component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100779firefox: thunderbird: Use-after-free in the XSLT component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100780firefox: thunderbird: Use-after-free in the DOM: Core & HTML component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100777firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100778firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100774firefox: Use-after-free in the DOM: Core & HTML component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100773firefox: thunderbird: Use-after-free in the Storage: IndexedDB component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100770firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100767firefox: thunderbird: Use-after-free in the Networking: Cache component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100762firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100757firefox: thunderbird: Use-after-free in the Widget component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95301chromium-browser: Missing authorization in Extensions | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100776firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component | Red Hat | Important | 1 | 2026-09-29 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.