Skip to main content

Patch advisories

Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.

RSS Export CSV Brief (PDF) Slides (PPTX)
Microsoft release 1,590 Other vendors (KEV) 1,366 Linux 988 Vendor bulletins 84 Lifecycle 190

Patch these first

Top 10 of 11: exploited, disclosed before a patch, or “Exploitation More Likely” and network-reachable
  1. 1CVE-2026-96951Microsoft — Windows Shell Security Feature Bypass VulnerabilityActively exploited
  2. 2CVE-2026-108398Microsoft — .NET Framework Security Feature Bypass VulnerabilityPublicly disclosed before patch
  3. 3CVE-2026-92707Microsoft — MessagePack-CSharp Denial of Service VulnerabilityPublicly disclosed before patch
  4. 4CVE-2026-100214Microsoft — Microsoft Dynamics 365 Business Central Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  5. 5CVE-2026-102217Microsoft — WebDAV Elevation of Privilege VulnerabilityExploitation More Likely, network-reachable
  6. 6CVE-2026-88159Microsoft — Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  7. 7CVE-2026-70279Microsoft — Microsoft Exchange Server Spoofing VulnerabilityExploitation More Likely, network-reachable
  8. 8CVE-2026-96940Microsoft — Microsoft Exchange Server Elevation of Privilege VulnerabilityExploitation More Likely, network-reachable
  9. 9CVE-2026-70571Microsoft — Microsoft Exchange Server Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  10. 10CVE-2026-70229Microsoft — Windows Active Directory Domain Services Remote Code Execution VulnerabilityExploitation More Likely, network-reachable

Microsoft CVEs

Microsoft Security Update Guide · 1,590 CVEs
Microsoft CVEs, rows 1501 to 1525
#CVE · titleEVRSCVSSEPSSSignal
1501 CVE-2026-98584Microsoft — net/sched: fix potential stack infoleak in em_text_dump()EPSS 0.2% 0 — 0.2% —
1502 CVE-2026-98592Microsoft — net: spacemit: clear TX descriptor on fragment mapping failureEPSS 0.2% 0 — 0.2% —
1503 CVE-2026-98595Microsoft — udp: remove a disconnected socket from the 4-tuple hash tableEPSS 0.2% 0 — 0.2% —
1504 CVE-2026-98603Microsoft — ovpn: replace bind when clearing stale local sourceEPSS 0.2% 0 — 0.2% —
1505 CVE-2026-98604Microsoft — ovpn: replace bind when learning local endpointEPSS 0.2% 0 — 0.2% —
1506 CVE-2026-98630Microsoft — eth: fbnic: Fix payload page pool error cleanupEPSS 0.2% 0 — 0.2% —
1507 CVE-2026-98659Microsoft — iio: pressure: rohm-bm1390: Return error when read failsEPSS 0.2% 0 — 0.2% —
1508 CVE-2026-98676Microsoft — iio: adc: ade9000: fix NULL pointer dereference in clkout registrationEPSS 0.2% 0 — 0.2% —
1509 CVE-2026-98693Microsoft — thunderbolt: Hold a router reference for each allocated HopIDEPSS 0.2% 0 — 0.2% —
1510 CVE-2026-98723Microsoft — nvmet: copy the hostid into the ctrl before creating PR pc_refsEPSS 0.2% 0 — 0.2% —
1511 CVE-2026-98724Microsoft — nvmet: pci-epf: reject too-short SGL segmentsEPSS 0.2% 0 — 0.2% —
1512 CVE-2026-98804Microsoft — net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()EPSS 0.2% 0 — 0.2% —
1513 CVE-2026-98350Microsoft — wifi: brcmfmac: cyw: pass PMKID to firmware if presentEPSS 0.2% 0 — 0.2% —
1514 CVE-2026-98562Microsoft — net: libwx: fix races in Tx timestamp handlingEPSS 0.2% 0 — 0.2% —
1515 CVE-2026-98617Microsoft — eth: fbnic: use the Rx queue napi pointer to find the napi vectorEPSS 0.2% 0 — 0.2% —
1516 CVE-2026-98277Microsoft — eth: fbnic: ring the doorbell if a burst ends in a dropEPSS 0.2% 0 — 0.2% —
1517 CVE-2026-98240Microsoft — net: ip_tunnel: initialize `options_len` before referencing optionsEPSS 0.2% 0 — 0.2% —
1518 CVE-2026-98806Microsoft — octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabledEPSS 0.2% 0 — 0.2% —
1519 CVE-2026-98613Microsoft — bpf: Bound ownership depth through local kptrs and graph rootsEPSS 0.2% 0 — 0.2% —
1520 CVE-2026-98235Microsoft — net/sched: act_api: release tail references on DELACTION failureEPSS 0.2% 0 — 0.2% —
1521 CVE-2026-98267Microsoft — 9p: Fix v9fs_issue_write() to update i_size and remote_i_sizeEPSS 0.2% 0 — 0.2% —
1522 CVE-2026-98291Microsoft — Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submitEPSS 0.2% 0 — 0.2% —
1523 CVE-2026-98346Microsoft — wifi: cfg80211: don't get the radio mask for netdev-less wdevsEPSS 0.2% 0 — 0.2% —
1524 CVE-2026-98448Microsoft — xfs: release orphanage dir inode if chown failsEPSS 0.2% 0 — 0.2% —
1525 CVE-2026-98223Microsoft — mm: filemap: retain mapped dropbehind foliosEPSS 0.2% 0 — 0.2% —
Showing 1,501–1,525 of 1,590

CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.

Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.