Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
1,031 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-100772firefox: thunderbird: Use-after-free in the DOM: Core & HTML component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100769firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95509qt: Qt for MCUs: Denial of service via out-of-bounds read in string formatting | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102316chromium-browser: chromium-browser: Use after free in Views | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102309chromium-browser: chromium-browser: Use after free in FullScreen | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102304chromium-browser: chromium-browser: Use after free in Passwords | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100771firefox: thunderbird: Undefined behavior in the DOM: Streams component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100759firefox: thunderbird: Uninitialized memory in the Storage: Quota Manager component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100756firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100758firefox: thunderbird: Sandbox escape in the DOM: Navigation component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-68911nicotine-plus: nicotine-plus: Denial of Service via decompression bomb in peer messages | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100787firefox: Sandbox escape in the XUL component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100760firefox: Sandbox escape in the Security: Process Sandboxing component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95280chromium-browser: Race condition in V8 | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95293chromium-browser: Uninitialized resource in GPU | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100768firefox: Use-after-free in the Graphics: WebGPU component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102301chromium-browser: chromium-browser: Out of bounds write in GPU | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100783firefox: thunderbird: Uninitialized memory in the Audio/Video component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102307chromium-browser: chromium-browser: Uninitialized resource in Dawn | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102313chromium-browser: angle: chromium-browser: Information disclosure via uninitialized resource in ANGLE | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102829simple-git: simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102327chromium-browser: chromium-browser: Incorrect authorization in WebView | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-102324chromium-browser: chromium-browser: Use after free in PictureInPicture | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-100793firefox: JIT miscompilation in the JavaScript Engine component | Red Hat | Important | 1 | 2026-09-29 |
| CVE-2026-95387wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector | Red Hat | Important | 1 | 2026-09-29 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.