Skip to main content

Patch advisories

Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.

RSS Export CSV Brief (PDF) Slides (PPTX)
Microsoft release 1,598 Other vendors (KEV) 1,364 Linux 1,019 Vendor bulletins 84 Lifecycle 190

Patch these first

Top 10 of 11: exploited, disclosed before a patch, or “Exploitation More Likely” and network-reachable
  1. 1CVE-2026-96951Microsoft — Windows Shell Security Feature Bypass VulnerabilityActively exploited
  2. 2CVE-2026-108398Microsoft — .NET Framework Security Feature Bypass VulnerabilityPublicly disclosed before patch
  3. 3CVE-2026-92707Microsoft — MessagePack-CSharp Denial of Service VulnerabilityPublicly disclosed before patch
  4. 4CVE-2026-100214Microsoft — Microsoft Dynamics 365 Business Central Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  5. 5CVE-2026-102217Microsoft — WebDAV Elevation of Privilege VulnerabilityExploitation More Likely, network-reachable
  6. 6CVE-2026-88159Microsoft — Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  7. 7CVE-2026-70279Microsoft — Microsoft Exchange Server Spoofing VulnerabilityExploitation More Likely, network-reachable
  8. 8CVE-2026-96940Microsoft — Microsoft Exchange Server Elevation of Privilege VulnerabilityExploitation More Likely, network-reachable
  9. 9CVE-2026-70571Microsoft — Microsoft Exchange Server Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  10. 10CVE-2026-70229Microsoft — Windows Active Directory Domain Services Remote Code Execution VulnerabilityExploitation More Likely, network-reachable

Microsoft CVEs

Microsoft Security Update Guide · 1,598 CVEs
Microsoft CVEs, rows 1501 to 1525
#CVE · titleEVRSCVSSEPSSSignal
1501 CVE-2026-98574Microsoft — net: bcmgenet: stop Tx NAPI before disabling the queuesEPSS 0.2% 0 — 0.2% —
1502 CVE-2026-98584Microsoft — net/sched: fix potential stack infoleak in em_text_dump()EPSS 0.2% 0 — 0.2% —
1503 CVE-2026-98592Microsoft — net: spacemit: clear TX descriptor on fragment mapping failureEPSS 0.2% 0 — 0.2% —
1504 CVE-2026-98595Microsoft — udp: remove a disconnected socket from the 4-tuple hash tableEPSS 0.2% 0 — 0.2% —
1505 CVE-2026-98603Microsoft — ovpn: replace bind when clearing stale local sourceEPSS 0.2% 0 — 0.2% —
1506 CVE-2026-98604Microsoft — ovpn: replace bind when learning local endpointEPSS 0.2% 0 — 0.2% —
1507 CVE-2026-98630Microsoft — eth: fbnic: Fix payload page pool error cleanupEPSS 0.2% 0 — 0.2% —
1508 CVE-2026-98659Microsoft — iio: pressure: rohm-bm1390: Return error when read failsEPSS 0.2% 0 — 0.2% —
1509 CVE-2026-98676Microsoft — iio: adc: ade9000: fix NULL pointer dereference in clkout registrationEPSS 0.2% 0 — 0.2% —
1510 CVE-2026-98693Microsoft — thunderbolt: Hold a router reference for each allocated HopIDEPSS 0.2% 0 — 0.2% —
1511 CVE-2026-98723Microsoft — nvmet: copy the hostid into the ctrl before creating PR pc_refsEPSS 0.2% 0 — 0.2% —
1512 CVE-2026-98724Microsoft — nvmet: pci-epf: reject too-short SGL segmentsEPSS 0.2% 0 — 0.2% —
1513 CVE-2026-98804Microsoft — net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()EPSS 0.2% 0 — 0.2% —
1514 CVE-2026-98350Microsoft — wifi: brcmfmac: cyw: pass PMKID to firmware if presentEPSS 0.2% 0 — 0.2% —
1515 CVE-2026-98562Microsoft — net: libwx: fix races in Tx timestamp handlingEPSS 0.2% 0 — 0.2% —
1516 CVE-2026-98617Microsoft — eth: fbnic: use the Rx queue napi pointer to find the napi vectorEPSS 0.2% 0 — 0.2% —
1517 CVE-2026-98277Microsoft — eth: fbnic: ring the doorbell if a burst ends in a dropEPSS 0.2% 0 — 0.2% —
1518 CVE-2026-98196Microsoft — wifi: brcmsmac: fix UAF in brcms_free_timer()EPSS 0.2% 0 — 0.2% —
1519 CVE-2026-98240Microsoft — net: ip_tunnel: initialize `options_len` before referencing optionsEPSS 0.2% 0 — 0.2% —
1520 CVE-2026-98806Microsoft — octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabledEPSS 0.2% 0 — 0.2% —
1521 CVE-2026-98375Microsoft — xen/netfront: drop RX packets with a short Ethernet headerEPSS 0.2% 0 — 0.2% —
1522 CVE-2026-98613Microsoft — bpf: Bound ownership depth through local kptrs and graph rootsEPSS 0.2% 0 — 0.2% —
1523 CVE-2026-98235Microsoft — net/sched: act_api: release tail references on DELACTION failureEPSS 0.2% 0 — 0.2% —
1524 CVE-2026-98267Microsoft — 9p: Fix v9fs_issue_write() to update i_size and remote_i_sizeEPSS 0.2% 0 — 0.2% —
1525 CVE-2026-98291Microsoft — Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submitEPSS 0.2% 0 — 0.2% —
Showing 1,501–1,525 of 1,598

CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.

Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.