Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
1,031 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| DSA-6572-1ca-certificates — security update | Debian | Not stated | 0 | 2026-10-20 |
| USN-8939-1libxtst vulnerabilities | Ubuntu | Not stated | 3 | 2026-10-19 |
| CVE-2026-78165org.apache.camel/camel-spring-redis: camel-spring-redis: Arbitrary code execution via untrusted Java deserialization | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-71253org.apache.johnzon/johnzon-mapper: Apache Johnzon: Arbitrary code execution via unsafe class loading | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-111759markdown-it: markdown-it: Denial of Service via mismatched quote parsing | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-53995mlflow: mlflow: Arbitrary file write via FileStore path traversal | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-88901org.apache.camel/camel-smooks: camel-smooks: Information disclosure via XML external entity injection | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-85250org.apache.camel/camel-xpath: camel-xpath: Information disclosure via XML external entity references | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-79985org.apache.camel/camel-smb: camel-smb: Unauthorized file access via path traversal | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-79984org.apache.camel/camel-mina-sftp: Apache Camel Mina SFTP: Unauthorized file access via path traversal | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-79983org.apache.camel/camel-ftp: camel-ftp: Unauthorized remote file access via path traversal | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-85251org.apache.camel/camel-http: camel-http: Information disclosure via improper credential handling during HTTP redirects | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-80343org.apache.camel/camel-netty-http: Apache Camel Netty HTTP: Security constraint bypass via case sensitivity mismatch | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-78164org.apache.camel/camel-http-common: org.apache.camel/camel-http: org.apache.camel/camel-vertx-http: org.apache.camel/camel-undertow: org.apache.camel/camel-netty-http: Apache Camel: information disclosure via improper property placeholder evaluation in HTTP headers | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-112402pillow: pillow: Denial of service via double free during image transformation | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-112397pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images | Red Hat | Important | 1 | 2026-10-19 |
| USN-8934-1pyjwt vulnerabilities | Ubuntu | Not stated | 4 | 2026-10-19 |
| CVE-2026-80344org.apache.camel/camel-as2: Apache Camel AS2: Server-Side Request Forgery via unvalidated receipt destination | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-111064aiohttp: aiohttp: Denial of Service via missing initial request timeout | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-111066aiohttp: aiohttp: Denial of Service via file descriptor exhaustion in multipart request processing | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-112366picomatch: picomatch: Denial of Service via single-branch repeated extglob patterns | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-112075unsloth: unsloth: Arbitrary code execution via unsafe class selection | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-88900org.apache.camel/camel-jgroups: camel-jgroups: Arbitrary code execution via untrusted data deserialization | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-103314stackrox: stackrox: SAML response replay allows multiple Central authentication tokens | Red Hat | Important | 1 | 2026-10-19 |
| CVE-2026-112897pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding | Red Hat | Important | 1 | 2026-10-19 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.