Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
1,031 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| CVE-2026-101797mysql: mysql: system takeover via mysqldump component | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-101796mysql: mysql: Complete server takeover via replication component | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113869thunderbird: thunderbird: Use-after-free via S/MIME decryption password prompt | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-105311console-operator: Streams for Apache Kafka Console: cross-namespace KafkaUser Secret exfiltration via confused deputy | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-114406ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns | Red Hat | Critical | 1 | 2026-10-20 |
| CVE-2026-113082chromium-browser: angle: Memory corruption in ANGLE | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-112177ghostscript: Reintroduction of .charkeys -dSAFER bypass in RHEL 8 | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-86922webkitgtk: WebKitGTK: Arbitrary code execution via type confusion | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-101781mysql: mysql: Server takeover via Group Replication GCS | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-105941kroxylicious-kms-provider-azure-key-vault-kms: Streams for Apache Kafka Kroxylicious: Azure Key Vault SSRF exfiltrates bearer token via untrusted EDEK vaultName | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113776virtualenv: virtualenv: Arbitrary command execution via sequential placeholder substitution in activation templates | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113726virtualenv: virtualenv: Arbitrary command execution via unescaped prompt variables in zsh | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-91415openjdk: Enhance font rendering (Oracle CPU 2026-10) | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-101773mysql: MySQL: Denial of Service via the Group Replication plugin | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113732virtualenv: virtualenv: Arbitrary code execution via improperly quoted Fish activation scripts | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113722virtualenv: virtualenv: arbitrary code execution via improperly quoted interpreter paths in script launchers | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113725virtualenv: virtualenv: arbitrary code execution via crafted environment name | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113812perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-111943crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-113723virtualenv: virtualenv: Arbitrary code execution via malicious prompt text | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-95168thefuck: thefuck: Arbitrary code execution via insecure rule loading | Red Hat | Important | 1 | 2026-10-20 |
| CVE-2026-110879jackson-databind: com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: Jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types in jackson-databind allows arbitrary class instantiation (incomplete fix for CV | Red Hat | Important | 1 | 2026-10-20 |
| USN-8944-2ca-certificates update | Ubuntu | Not stated | 0 | 2026-10-20 |
| USN-8945-1xz-utils vulnerability | Ubuntu | Not stated | 0 | 2026-10-20 |
| USN-8944-1ca-certificates update | Ubuntu | Not stated | 0 | 2026-10-20 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.