Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Linux distribution advisories
1,031 from Debian, Red Hat, UbuntuThe Adobe feed did not respond at the last check. Other sources loaded.
| Advisory · title | Source | Severity | CVEs | Date ↓ |
|---|---|---|---|---|
| USN-8952-1python-tornado vulnerabilities | Ubuntu | Not stated | 6 | 2026-10-22 |
| USN-8954-1zlib vulnerability | Ubuntu | Not stated | 1 | 2026-10-22 |
| USN-8953-1openvpn vulnerability | Ubuntu | Not stated | 1 | 2026-10-22 |
| USN-8946-1unbound vulnerabilities | Ubuntu | Not stated | 10 | 2026-10-21 |
| USN-8948-2php5, php7.0, php7.2, php7.4 vulnerabilities | Ubuntu | Not stated | 2 | 2026-10-21 |
| USN-8948-1php8.1, php8.3, php8.5 vulnerabilities | Ubuntu | Not stated | 2 | 2026-10-21 |
| USN-8951-1c-ares vulnerabilities | Ubuntu | Not stated | 4 | 2026-10-21 |
| USN-8949-1ghostscript vulnerabilities | Ubuntu | Not stated | 2 | 2026-10-21 |
| USN-8930-2u-boot vulnerabilities | Ubuntu | Not stated | 4 | 2026-10-21 |
| USN-8950-1poppler vulnerability | Ubuntu | Not stated | 1 | 2026-10-21 |
| USN-8947-1nss update | Ubuntu | Not stated | 0 | 2026-10-21 |
| USN-8941-1squid, squid3 vulnerabilities | Ubuntu | Not stated | 6 | 2026-10-20 |
| USN-8942-1dotnet8, dotnet10, dotnet11 vulnerabilities | Ubuntu | Not stated | 28 | 2026-10-20 |
| USN-8940-1libxs-parse-keyword-perl vulnerability | Ubuntu | Not stated | 1 | 2026-10-20 |
| USN-8943-1protobuf vulnerability | Ubuntu | Not stated | 1 | 2026-10-20 |
| USN-8944-2ca-certificates update | Ubuntu | Not stated | 0 | 2026-10-20 |
| USN-8945-1xz-utils vulnerability | Ubuntu | Not stated | 0 | 2026-10-20 |
| USN-8944-1ca-certificates update | Ubuntu | Not stated | 0 | 2026-10-20 |
| USN-8939-1libxtst vulnerabilities | Ubuntu | Not stated | 3 | 2026-10-19 |
| USN-8934-1pyjwt vulnerabilities | Ubuntu | Not stated | 4 | 2026-10-19 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.