Skip to main content
EVULNABLE Home

Patch advisories

Microsoft's release and everyone else's — ranked by the same EVRS scale as the priority feed.

Microsoft — this release

0 advisories. Data checked 07 Sep 11:30 UTC.

Nothing from Microsoft is ranked highly enough to show here right now.

Non-Microsoft — CISA KEV

458 advisories.

#1
CVE-2025-55182 — Meta React Server Components Remote Code Execution Vulnerability
Exigent · Overdue by 9 months · Ransomware · CISA KEV
ExigentOverdue by 9 months
97
#2
ExigentOverdue by 3 months
97
#3
ExigentOverdue by 11 months
96
#4
CVE-2025-61882 — Oracle E-Business Suite Unspecified Vulnerability
Exigent · Overdue by 10 months · Ransomware · CISA KEV
ExigentOverdue by 10 months
96
#5
CVE-2025-3248 — Langflow Missing Authentication Vulnerability
Exigent · Overdue by 15 months · Ransomware · CISA KEV
ExigentOverdue by 15 months
95
#6
ExigentOverdue by 17 months
95
#7
CVE-2025-31161 — CrushFTP Authentication Bypass Vulnerability
Exigent · Overdue by 16 months · Ransomware · CISA KEV
ExigentOverdue by 16 months
95
#8
CVE-2025-31324 — SAP NetWeaver Unrestricted File Upload Vulnerability
Exigent · Overdue by 16 months · Ransomware · CISA KEV
ExigentOverdue by 16 months
95
#9
ExigentOverdue by 4 months
95
#10
ExigentOverdue by 7 months
95
#11
CVE-2017-5638 — Apache Struts Remote Code Execution Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
94
#12
CVE-2018-13379 — Fortinet FortiOS SSL VPN Path Traversal Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
94
#13
CVE-2019-11510 — Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
94
#14
ExigentOverdue by 4.3 years
94
#15
ExigentOverdue by 4.3 years
94
#16
CVE-2021-21985 — VMware vCenter Server Improper Input Validation Vulnerability
Exigent · Overdue by 4.8 years · Ransomware · CISA KEV
ExigentOverdue by 4.8 years
94
#17
CVE-2021-22005 — VMware vCenter Server File Upload Vulnerability
Exigent · Overdue by 4.8 years · Ransomware · CISA KEV
ExigentOverdue by 4.8 years
94
#18
ExigentOverdue by 4.8 years
94
#19
ExigentOverdue by 4.8 years
94
#20
CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability
Exigent · Overdue by 4.7 years · Ransomware · CISA KEV
ExigentOverdue by 4.7 years
94
#21
ExigentOverdue by 4.3 years
94
#22
CVE-2022-29464 — WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
94
#23
ExigentOverdue by 2.8 years
94
#24
CVE-2023-27350 — PaperCut MF/NG Improper Access Control Vulnerability
Exigent · Overdue by 3.3 years · Ransomware · CISA KEV
ExigentOverdue by 3.3 years
94
#25
CVE-2023-35078 — Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
Exigent · Overdue by 3.1 years · Ransomware · CISA KEV
ExigentOverdue by 3.1 years
94
#26
ExigentOverdue by 2.6 years
94
#27
CVE-2024-23897 — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
Exigent · Overdue by 2.0 years · Ransomware · CISA KEV
ExigentOverdue by 2.0 years
94
#28
CVE-2024-3400 — Palo Alto Networks PAN-OS Command Injection Vulnerability
Exigent · Overdue by 2.4 years · Ransomware · CISA KEV
ExigentOverdue by 2.4 years
94
#29
ExigentOverdue by 4.3 years
94
#30
CVE-2021-41773 — Apache HTTP Server Path Traversal Vulnerability
Exigent · Overdue by 4.8 years · Ransomware · CISA KEV
ExigentOverdue by 4.8 years
94
#31
CVE-2018-7600 — Drupal Core Remote Code Execution Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
94
#32
CVE-2023-29300 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Exigent · Overdue by 2.6 years · Ransomware · CISA KEV
ExigentOverdue by 2.6 years
94
#33
CVE-2024-4577 — PHP-CGI OS Command Injection Vulnerability
Exigent · Overdue by 2.2 years · Ransomware · CISA KEV
ExigentOverdue by 2.2 years
94
#34
CVE-2022-40684 — Fortinet Multiple Products Authentication Bypass Vulnerability
Exigent · Overdue by 3.8 years · Ransomware · CISA KEV
ExigentOverdue by 3.8 years
94
#35
ExigentOverdue by 2.6 years
94
#36
CVE-2024-1709 — ConnectWise ScreenConnect Authentication Bypass Vulnerability
Exigent · Overdue by 2.5 years · Ransomware · CISA KEV
ExigentOverdue by 2.5 years
94
#37
CVE-2023-42793 — JetBrains TeamCity Authentication Bypass Vulnerability
Exigent · Overdue by 2.9 years · Ransomware · CISA KEV
ExigentOverdue by 2.9 years
94
#38
ExigentOverdue by 20 months
94
#39
CVE-2022-47986 — IBM Aspera Faspex Code Execution Vulnerability
Exigent · Overdue by 3.5 years · Ransomware · CISA KEV
ExigentOverdue by 3.5 years
94
#40
CVE-2019-2725 — Oracle WebLogic Server, Injection
Exigent · Overdue by 4.2 years · Ransomware · CISA KEV
ExigentOverdue by 4.2 years
94
#41
CVE-2021-42013 — Apache HTTP Server Path Traversal Vulnerability
Exigent · Overdue by 4.8 years · Ransomware · CISA KEV
ExigentOverdue by 4.8 years
94
#42
CVE-2025-5777 — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
Exigent · Overdue by 14 months · Ransomware · CISA KEV
ExigentOverdue by 14 months
94
#43
CVE-2022-1388 — F5 BIG-IP Missing Authentication Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
94
#44
CVE-2023-38035 — Ivanti Sentry Authentication Bypass Vulnerability
Exigent · Overdue by 3.0 years · Ransomware · CISA KEV
ExigentOverdue by 3.0 years
94
#45
CVE-2018-10562 — Dasan GPON Routers Command Injection Vulnerability
Exigent · Overdue by 4.4 years · Ransomware · CISA KEV
ExigentOverdue by 4.4 years
94
#46
CVE-2021-3129 — Laravel Ignition File Upload Vulnerability
Exigent · Overdue by 2.9 years · Ransomware · CISA KEV
ExigentOverdue by 2.9 years
94
#47
CVE-2024-27198 — JetBrains TeamCity Authentication Bypass Vulnerability
Exigent · Overdue by 2.4 years · Ransomware · CISA KEV
ExigentOverdue by 2.4 years
94
#48
CVE-2023-34362 — Progress MOVEit Transfer SQL Injection Vulnerability
Exigent · Overdue by 3.2 years · Ransomware · CISA KEV
ExigentOverdue by 3.2 years
94
#49
ExigentOverdue by 4.3 years
94
#50
ExigentOverdue by 4.6 years
94
#51
ExigentOverdue by 4.8 years
94
#52
CVE-2021-21972 — VMware vCenter Server Remote Code Execution Vulnerability
Exigent · Overdue by 4.8 years · Ransomware · CISA KEV
ExigentOverdue by 4.8 years
94
#53
CVE-2019-11043 — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
Exigent · Overdue by 4.4 years · Ransomware · CISA KEV
ExigentOverdue by 4.4 years
94
#54
CVE-2019-15107 — Webmin Command Injection Vulnerability
Exigent · Overdue by 4.4 years · Ransomware · CISA KEV
ExigentOverdue by 4.4 years
94
#55
ExigentOverdue by 3.6 years
94
#56
ExigentOverdue by 3.1 years
94
#57
ExigentOverdue by 4.3 years
94
#58
ExigentOverdue by 4.8 years
94
#59
CVE-2023-46604 — Apache ActiveMQ Deserialization of Untrusted Data Vulnerability
Exigent · Overdue by 2.8 years · Ransomware · CISA KEV
ExigentOverdue by 2.8 years
94
#60
CVE-2010-2861 — Adobe ColdFusion Directory Traversal Vulnerability
Exigent · Overdue by 4.4 years · Ransomware · CISA KEV
ExigentOverdue by 4.4 years
94
#61
ExigentOverdue by 21 months
94
#62
CVE-2022-42475 — Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
Exigent · Overdue by 3.7 years · Ransomware · CISA KEV
ExigentOverdue by 3.7 years
94
#63
ExigentOverdue by 2.1 years
94
#64
CVE-2017-7494 — Samba Remote Code Execution Vulnerability
Exigent · Overdue by 3.4 years · Ransomware · CISA KEV
ExigentOverdue by 3.4 years
94
#65
CVE-2018-7602 — Drupal Core Remote Code Execution Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
94
#66
ExigentOverdue by 2.9 years
94
#67
CVE-2024-50623 — Cleo Multiple Products Unrestricted File Upload Vulnerability
Exigent · Overdue by 20 months · Ransomware · CISA KEV
ExigentOverdue by 20 months
94
#68
ExigentOverdue by 20 months
94
#69
ExigentOverdue by 7 months
94
#70
ExigentOverdue by 6 months
94
#71
ExigentOverdue by 52 days
94
#72
CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF)
Exigent · Overdue by 4.7 years · Ransomware · CISA KEV
ExigentOverdue by 4.7 years
93
#73
ExigentOverdue by 2.6 years
93
#74
Overdue by 4 monthsRansomware
93
#75
CVE-2021-45046 — Apache Log4j2 Deserialization of Untrusted Data Vulnerability
Exigent · Overdue by 3.3 years · Ransomware · CISA KEV
ExigentOverdue by 3.3 years
93
#76
ExigentOverdue by 2.4 years
93
#77
ExigentOverdue by 4.8 years
93
#78
CVE-2023-47246 — SysAid Server Path Traversal Vulnerability
Exigent · Overdue by 2.8 years · Ransomware · CISA KEV
ExigentOverdue by 2.8 years
93
#79
CVE-2013-2465 — Oracle Java SE Unspecified Vulnerability
Exigent · Overdue by 4.4 years · Ransomware · CISA KEV
ExigentOverdue by 4.4 years
93
#80
ExigentOverdue by 4.5 years
93
#81
CVE-2023-48788 — Fortinet FortiClient EMS SQL Injection Vulnerability
Exigent · Overdue by 2.4 years · Ransomware · CISA KEV
ExigentOverdue by 2.4 years
93
#82
CVE-2022-21587 — Oracle E-Business Suite Unspecified Vulnerability
Exigent · Overdue by 3.5 years · Ransomware · CISA KEV
ExigentOverdue by 3.5 years
93
#83
ExigentOverdue by 4.5 years
93
#84
CVE-2024-41713 — Mitel MiCollab Path Traversal Vulnerability
Exigent · Overdue by 19 months · Ransomware · CISA KEV
ExigentOverdue by 19 months
93
#85
CVE-2021-42237 — Sitecore XP Remote Command Execution Vulnerability
Exigent · Overdue by 4.4 years · Ransomware · CISA KEV
ExigentOverdue by 4.4 years
93
#86
Overdue by 10 monthsRansomware
93
#87
CVE-2013-0422 — Oracle JRE Remote Code Execution Vulnerability
Exigent · Overdue by 4.2 years · Ransomware · CISA KEV
ExigentOverdue by 4.2 years
93
#88
ExigentOverdue by 4.3 years
93
#89
CVE-2018-1273 — VMware Tanzu Spring Data Commons Property Binder Vulnerability
Exigent · Overdue by 4.4 years · Ransomware · CISA KEV
ExigentOverdue by 4.4 years
93
#90
CVE-2023-38203 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Exigent · Overdue by 2.6 years · Ransomware · CISA KEV
ExigentOverdue by 2.6 years
93
#91
CVE-2018-6530 — D-Link Multiple Routers OS Command Injection Vulnerability
Exigent · Overdue by 3.9 years · Ransomware · CISA KEV
ExigentOverdue by 3.9 years
93
#92
ExigentOverdue by 2.8 years
93
#93
Overdue by 4 monthsRansomware
93
#94
CVE-2024-53704 — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
Exigent · Overdue by 18 months · Ransomware · CISA KEV
ExigentOverdue by 18 months
93
#95
CVE-2024-51378 — CyberPanel Incorrect Default Permissions Vulnerability
Exigent · Overdue by 20 months · Ransomware · CISA KEV
ExigentOverdue by 20 months
93
#96
CVE-2024-55956 — Cleo Multiple Products Unauthenticated File Upload Vulnerability
Exigent · Overdue by 20 months · Ransomware · CISA KEV
ExigentOverdue by 20 months
93
#97
CVE-2024-6670 — Progress WhatsUp Gold SQL Injection Vulnerability
Exigent · Overdue by 23 months · Ransomware · CISA KEV
ExigentOverdue by 23 months
93
#98
ExigentOverdue by 7 months
93
#99
Overdue by 2.6 yearsRansomware
92
#100
Overdue by 2.6 yearsRansomware
92
#101
Overdue by 2.2 yearsRansomware
92
#102
ExigentOverdue by 3 months
92
#103
ExigentOverdue by 4.3 years
92
#104
CVE-2016-4117 — Adobe Flash Player Arbitrary Code Execution Vulnerability
Exigent · Overdue by 4.5 years · Ransomware · CISA KEV
ExigentOverdue by 4.5 years
92
#105
CVE-2026-72898 — Metabase SQL Injection Vulnerability
Exigent · Overdue by 24 days · CISA KEV
ExigentOverdue by 24 days
92
#106
Overdue by 3 monthsRansomware
92
#107
ExigentOverdue by 4.5 years
92
#108
ExigentOverdue by 4.4 years
92
#109
ExigentOverdue by 4.0 years
92
#110
CVE-2021-35211 — SolarWinds Serv-U Remote Code Execution Vulnerability
Exigent · Overdue by 4.8 years · Ransomware · CISA KEV
ExigentOverdue by 4.8 years
92
#111
CVE-2024-40711 — Veeam Backup and Replication Deserialization Vulnerability
Exigent · Overdue by 22 months · Ransomware · CISA KEV
ExigentOverdue by 22 months
92
#112
ExigentOverdue by 6 months
92
#113
Overdue by 2.8 yearsRansomware
91
#114
Overdue by 4.1 yearsRansomware
91
#115
CVE-2019-7481 — SonicWall SMA100 SQL Injection Vulnerability
Overdue by 4.3 years · Ransomware · CISA KEV
Overdue by 4.3 yearsRansomware
91
#116
Overdue by 4.4 yearsRansomware
91
#117
ExigentOverdue by 28 days
91
#118
Overdue by 4.5 yearsRansomware
91
#119
CVE-2023-38831 — RARLAB WinRAR Code Execution Vulnerability
Overdue by 3.0 years · Ransomware · CISA KEV
Overdue by 3.0 yearsRansomware
91
#120
ExigentOverdue by 45 days
91
#121
ExigentOverdue by 3 months
91
#122
Overdue by 4.3 yearsRansomware
91
#123
CVE-2025-8088 — RARLAB WinRAR Path Traversal Vulnerability
Overdue by 12 months · Ransomware · CISA KEV
Overdue by 12 monthsRansomware
91
#124
CVE-2022-26352 — dotCMS Unrestricted Upload of File Vulnerability
Exigent · Overdue by 4.0 years · Ransomware · CISA KEV
ExigentOverdue by 4.0 years
91
#125
ExigentOverdue by 4.2 years
91
#126
CVE-2019-7195 — QNAP Photo Station Path Traversal Vulnerability
Exigent · Overdue by 4.2 years · Ransomware · CISA KEV
ExigentOverdue by 4.2 years
91
#127
CVE-2023-41265 — Qlik Sense HTTP Tunneling Vulnerability
Exigent · Overdue by 2.7 years · Ransomware · CISA KEV
ExigentOverdue by 2.7 years
91
#128
CVE-2019-7192 — QNAP Photo Station Improper Access Control Vulnerability
Exigent · Overdue by 4.2 years · Ransomware · CISA KEV
ExigentOverdue by 4.2 years
91
#129
CVE-2024-51567 — CyberPanel Incorrect Default Permissions Vulnerability
Exigent · Overdue by 21 months · Ransomware · CISA KEV
ExigentOverdue by 21 months
91
#130
ExigentOverdue by 3 months
91
#131
Overdue by 3.5 yearsRansomware
90
#132
ExigentOverdue by 5 months
90
#133
CVE-2025-24893 — XWiki Platform Eval Injection Vulnerability
Exigent · Overdue by 10 months · CISA KEV
ExigentOverdue by 10 months
90
#134
CVE-2025-32432 — Craft CMS Code Injection Vulnerability
Exigent · Overdue by 5 months · CISA KEV
ExigentOverdue by 5 months
90
#135
CVE-2017-1000353 — Jenkins Remote Code Execution Vulnerability
Exigent · Overdue by 10 months · CISA KEV
ExigentOverdue by 10 months
90
#136
CVE-2022-30333 — RARLAB UnRAR Directory Traversal Vulnerability
Overdue by 4.0 years · Ransomware · CISA KEV
Overdue by 4.0 yearsRansomware
90
#137
Overdue by 4.0 yearsRansomware
90
#138
Overdue by 4.3 yearsRansomware
90
#139
CVE-2018-20250 — WinRAR Absolute Path Traversal Vulnerability
Overdue by 4.1 years · Ransomware · CISA KEV
Overdue by 4.1 yearsRansomware
90
#140
CVE-2024-57727 — SimpleHelp Path Traversal Vulnerability
Overdue by 18 months · Ransomware · CISA KEV
Overdue by 18 monthsRansomware
90
#141
Overdue by 4.1 yearsRansomware
90
#142
Overdue by 2.9 yearsRansomware
90
#143
CVE-2022-27593 — QNAP Photo Station Externally Controlled Reference Vulnerability
Exigent · Overdue by 3.9 years · Ransomware · CISA KEV
ExigentOverdue by 3.9 years
90
#144
CVE-2019-16057 — D-Link DNS-320 Remote Code Execution Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
90
#145
CVE-2017-18362 — Kaseya VSA SQL Injection Vulnerability
Exigent · Overdue by 4.2 years · Ransomware · CISA KEV
ExigentOverdue by 4.2 years
90
#146
Overdue by 10 daysCISA KEV
90
#147
ExigentOverdue by 4.8 years
90
#148
ExigentOverdue by 3.2 years
90
#149
CVE-2024-21762 — Fortinet FortiOS Out-of-Bound Write Vulnerability
Exigent · Overdue by 2.6 years · Ransomware · CISA KEV
ExigentOverdue by 2.6 years
90
#150
ExigentOverdue by 9 months
89
#151
CVE-2026-39987 — Marimo Remote Code Execution Vulnerability
Exigent · Overdue by 4 months · CISA KEV
ExigentOverdue by 4 months
89
#152
ExigentOverdue by 7 months
89
#153
CVE-2022-36537 — ZK Framework AuUploader Unspecified Vulnerability
Overdue by 3.5 years · Ransomware · CISA KEV
Overdue by 3.5 yearsRansomware
89
#154
Overdue by 21 monthsRansomware
89
#155
ExigentOverdue by 50 days
89
#156
ExigentCISA deadline in 2 days
89
#157
ExigentOverdue by 4.8 years
89
#158
CVE-2019-7194 — QNAP Photo Station Path Traversal Vulnerability
Exigent · Overdue by 4.2 years · Ransomware · CISA KEV
ExigentOverdue by 4.2 years
89
#159
CVE-2020-3992 — VMware ESXi OpenSLP Use-After-Free Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
89
#160
ExigentOverdue by 2.2 years
89
#161
CVE-2018-6789 — Exim Buffer Overflow Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
89
#162
ExigentOverdue by 23 months
88
#163
Overdue by 4.4 yearsRansomware
88
#164
CVE-2025-24813 — Apache Tomcat Path Equivalence Vulnerability
Exigent · Overdue by 17 months · CISA KEV
ExigentOverdue by 17 months
88
#165
ExigentOverdue by 22 months
88
#166
ExigentOverdue by 23 months
88
#167
CVE-2025-25257 — Fortinet FortiWeb SQL Injection Vulnerability
Exigent · Overdue by 13 months · CISA KEV
ExigentOverdue by 13 months
88
#168
CVE-2016-10033 — PHPMailer Command Injection Vulnerability
Exigent · Overdue by 13 months · CISA KEV
ExigentOverdue by 13 months
88
#169
Overdue by 10 monthsCISA KEV
88
#170
ExigentOverdue by 14 months
88
#171
ExigentOverdue by 17 months
88
#172
ExigentOverdue by 23 months
88
#173
Overdue by 5 monthsCISA KEV
88
#174
ExigentOverdue by 21 months
88
#175
Overdue by 6 monthsCISA KEV
88
#176
Overdue by 31 daysCISA KEV
88
#177
ExigentOverdue by 14 months
88
#178
ExigentOverdue by 21 months
88
#179
ExigentOverdue by 19 months
88
#180
Overdue by 4 monthsCISA KEV
88
#181
ExigentOverdue by 18 months
88
#182
ExigentOverdue by 13 months
88
#183
Overdue by 8 monthsCISA KEV
88
#184
ExigentOverdue by 5 months
88
#185
CVE-2026-33017 — Langflow Code Injection Vulnerability
Exigent · Overdue by 5 months · CISA KEV
ExigentOverdue by 5 months
88
#186
ExigentOverdue by 5 months
88
#187
ExigentOverdue by 6 months
88
#188
ExigentOverdue by 10 months
88
#189
ExigentOverdue by 4 months
88
#190
ExigentOverdue by 10 months
88
#191
ExigentOverdue by 4 months
88
#192
CVE-2018-4878 — Adobe Flash Player Use-After-Free Vulnerability
Overdue by 4.3 years · Ransomware · CISA KEV
Overdue by 4.3 yearsRansomware
88
#193
Overdue by 4.5 yearsRansomware
88
#194
Overdue by 2 monthsCISA KEV
88
#195
Overdue by 30 daysCISA KEV
88
#196
Overdue by 2 monthsCISA KEV
88
#197
CVE-2021-28799 — QNAP NAS Improper Authorization Vulnerability
Exigent · Overdue by 4.4 years · Ransomware · CISA KEV
ExigentOverdue by 4.4 years
88
#198
ExigentOverdue by 3.6 years
88
#199
CVE-2024-57726 — SimpleHelp Missing Authorization Vulnerability
Exigent · Overdue by 4 months · Ransomware · CISA KEV
ExigentOverdue by 4 months
88
#200
ExigentOverdue by 4.1 years
87
#201
CVE-2017-9841 — PHPUnit Command Injection Vulnerability
Exigent · Overdue by 4.1 years · CISA KEV
ExigentOverdue by 4.1 years
87
#202
ExigentOverdue by 4.8 years
87
#203
ExigentOverdue by 2.8 years
87
#204
CVE-2012-1823 — PHP-CGI Query String Parameter Vulnerability
Exigent · Overdue by 4.4 years · CISA KEV
ExigentOverdue by 4.4 years
87
#205
ExigentOverdue by 4.4 years
87
#206
ExigentOverdue by 4.3 years
87
#207
ExigentOverdue by 2.3 years
87
#208
ExigentOverdue by 4.4 years
87
#209
ExigentOverdue by 3.6 years
87
#211
ExigentOverdue by 4.3 years
87
#212
ExigentOverdue by 4.4 years
87
#213
ExigentOverdue by 4.2 years
87
#214
ExigentOverdue by 4.8 years
87
#215
ExigentOverdue by 2.9 years
87
#216
ExigentOverdue by 4.3 years
87
#217
ExigentOverdue by 4.2 years
87
#218
ExigentOverdue by 16 months
87
#219
Overdue by 22 monthsCISA KEV
87
#220
ExigentOverdue by 4.3 years
87
#221
ExigentOverdue by 4.3 years
87
#222
ExigentOverdue by 4.3 years
87
#223
ExigentOverdue by 4.1 years
87
#224
ExigentOverdue by 4.3 years
87
#225
ExigentOverdue by 4.0 years
87
#226
ExigentOverdue by 4.8 years
87
#227
ExigentOverdue by 3.9 years
87
#228
Overdue by 4 monthsCISA KEV
87
#229
ExigentOverdue by 4.4 years
87
#230
ExigentOverdue by 4.3 years
87
#231
ExigentOverdue by 2.0 years
87
#232
ExigentOverdue by 4.7 years
87
#233
CVE-2021-36260 — Hikvision Improper Input Validation
Exigent · Overdue by 4.6 years · CISA KEV
ExigentOverdue by 4.6 years
87
#234
ExigentOverdue by 4.7 years
87
#235
CVE-2022-46169 — Cacti Command Injection Vulnerability
Exigent · Overdue by 3.5 years · CISA KEV
ExigentOverdue by 3.5 years
87
#236
ExigentOverdue by 4.7 years
87
#237
ExigentOverdue by 2.1 years
87
#238
ExigentOverdue by 4.4 years
87
#239
ExigentOverdue by 4.1 years
87
#240
ExigentOverdue by 4.3 years
87
#241
ExigentOverdue by 4.3 years
87
#242
ExigentOverdue by 3.4 years
87
#243
ExigentOverdue by 4.4 years
87
#244
ExigentOverdue by 21 months
87
#245
CVE-2020-16846 — SaltStack Salt Shell Injection Vulnerability
Exigent · Overdue by 4.3 years · CISA KEV
ExigentOverdue by 4.3 years
87
#246
ExigentOverdue by 2.9 years
87
#247
ExigentOverdue by 2.0 years
87
#248
CVE-2024-4040 — CrushFTP VFS Sandbox Escape Vulnerability
Exigent · Overdue by 2.4 years · CISA KEV
ExigentOverdue by 2.4 years
87
#249
ExigentOverdue by 4.3 years
87
#250
ExigentOverdue by 4.3 years
87
#251
ExigentOverdue by 3.9 years
87
#252
CVE-2024-32113 — Apache OFBiz Path Traversal Vulnerability
Exigent · Overdue by 2.0 years · CISA KEV
ExigentOverdue by 2.0 years
87
#253
ExigentOverdue by 2.6 years
87
#254
ExigentOverdue by 2.0 years
87
#255
ExigentOverdue by 4.4 years
87
#256
ExigentOverdue by 4.5 years
87
#257
ExigentOverdue by 4.4 years
87
#258
ExigentOverdue by 3.2 years
87
#259
ExigentOverdue by 4.3 years
87
#260
ExigentOverdue by 4.5 years
87
#261
ExigentOverdue by 4.5 years
87
#262
ExigentOverdue by 4.4 years
87
#263
CVE-2020-7247 — OpenSMTPD Remote Code Execution Vulnerability
Exigent · Overdue by 4.4 years · CISA KEV
ExigentOverdue by 4.4 years
87
#264
ExigentOverdue by 4.3 years
87
#265
ExigentOverdue by 4.1 years
87
#266
CVE-2022-3236 — Sophos Firewall Code Injection Vulnerability
Exigent · Overdue by 3.9 years · CISA KEV
ExigentOverdue by 3.9 years
87
#267
ExigentOverdue by 23 months
87
#268
ExigentOverdue by 4.1 years
87
#269
ExigentOverdue by 2.1 years
87
#270
ExigentOverdue by 4.1 years
87
#271
ExigentOverdue by 4.4 years
87
#272
ExigentOverdue by 4.0 years
87
#273
ExigentOverdue by 3.2 years
87
#274
ExigentOverdue by 4.3 years
87
#275
ExigentOverdue by 4.3 years
87
#276
ExigentOverdue by 4.1 years
87
#277
ExigentOverdue by 3.3 years
87
#278
ExigentOverdue by 2.3 years
87
#279
ExigentOverdue by 3.1 years
87
#280
ExigentOverdue by 4.8 years
87
#281
ExigentOverdue by 4.0 years
87
#282
ExigentOverdue by 23 months
87
#283
ExigentOverdue by 16 months
87
#284
CVE-2024-56145 — Craft CMS Code Injection Vulnerability
Exigent · Overdue by 14 months · CISA KEV
ExigentOverdue by 14 months
87
#285
ExigentOverdue by 21 months
87
#286
ExigentOverdue by 22 months
87
#287
ExigentOverdue by 19 months
87
#288
ExigentOverdue by 20 months
87
#289
ExigentOverdue by 13 months
87
#290
ExigentOverdue by 23 months
87
#291
ExigentOverdue by 10 months
87
#292
ExigentOverdue by 16 months
87
#293
ExigentOverdue by 14 months
87
#294
Overdue by 10 monthsCISA KEV
87
#295
ExigentOverdue by 11 months
87
#296
ExigentOverdue by 9 months
87
#297
ExigentOverdue by 5 months
87
#298
ExigentOverdue by 7 months
87
#299
CVE-2009-3960 — Adobe BlazeDS Information Disclosure Vulnerability
Overdue by 4.0 years · Ransomware · CISA KEV
Overdue by 4.0 yearsRansomware
87
#300
Overdue by 6 monthsCISA KEV
87
#301
Overdue by 9 monthsCISA KEV
87
#303
Overdue by 3 monthsCISA KEV
87
#304
Overdue by 10 monthsCISA KEV
87
#305
Overdue by 4.0 yearsRansomware
87
#306
Overdue by 4 monthsRansomware
87
#307
CVE-2021-42258 — BQE BillQuick Web Suite SQL Injection Vulnerability
Exigent · Overdue by 4.8 years · Ransomware · CISA KEV
ExigentOverdue by 4.8 years
87
#308
Overdue by 3.3 yearsCISA KEV
86
#309
Overdue by 2.9 yearsCISA KEV
86
#310
ExigentOverdue by 2.1 years
86
#311
Overdue by 4.0 yearsCISA KEV
86
#312
ExigentOverdue by 2.1 years
86
#313
Overdue by 4.5 yearsCISA KEV
86
#314
Overdue by 4.1 yearsCISA KEV
86
#315
ExigentOverdue by 4.3 years
86
#316
Overdue by 18 monthsCISA KEV
86
#317
ExigentOverdue by 4.4 years
86
#318
ExigentOverdue by 4.2 years
86
#319
ExigentOverdue by 2.5 years
86
#320
Overdue by 23 monthsCISA KEV
86
#321
ExigentOverdue by 2.2 years
86
#322
ExigentOverdue by 4.3 years
86
#323
ExigentOverdue by 2.6 years
86
#324
Overdue by 6 monthsCISA KEV
86
#325
ExigentOverdue by 3.0 years
86
#326
ExigentOverdue by 4.3 years
86
#327
ExigentOverdue by 2.4 years
86
#328
ExigentOverdue by 4.3 years
86
#329
ExigentOverdue by 4.4 years
86
#330
ExigentOverdue by 4.8 years
86
#331
ExigentOverdue by 4.5 years
86
#332
ExigentOverdue by 4.4 years
86
#333
ExigentOverdue by 4.3 years
86
#334
ExigentOverdue by 2.9 years
86
#335
CVE-2009-1151 — phpMyAdmin Remote Code Execution Vulnerability
Exigent · Overdue by 4.4 years · CISA KEV
ExigentOverdue by 4.4 years
86
#336
CVE-2010-0840 — Oracle JRE Unspecified Vulnerability
Exigent · Overdue by 4.2 years · CISA KEV
ExigentOverdue by 4.2 years
86
#337
ExigentOverdue by 3.7 years
86
#338
ExigentOverdue by 4.3 years
86
#339
ExigentOverdue by 4.0 years
86
#340
ExigentOverdue by 4.3 years
86
#341
CVE-2020-5847 — Unraid Remote Code Execution Vulnerability
Exigent · Overdue by 4.3 years · CISA KEV
ExigentOverdue by 4.3 years
86
#342
ExigentOverdue by 4.3 years
86
#343
ExigentOverdue by 4.5 years
86
#344
ExigentOverdue by 3.8 years
86
#345
CVE-2019-7609 — Kibana Arbitrary Code Execution
Exigent · Overdue by 4.2 years · CISA KEV
ExigentOverdue by 4.2 years
86
#346
ExigentOverdue by 4.4 years
86
#347
ExigentOverdue by 4.3 years
86
#348
ExigentOverdue by 2.3 years
86
#349
ExigentOverdue by 2.8 years
86
#350
ExigentOverdue by 3.0 years
86
#351
ExigentOverdue by 4.4 years
86
#352
ExigentOverdue by 13 months
86
#353
ExigentOverdue by 17 months
86
#354
ExigentOverdue by 17 months
86
#355
ExigentOverdue by 20 months
86
#356
CVE-2017-3066 — Adobe ColdFusion Deserialization Vulnerability
Exigent · Overdue by 18 months · CISA KEV
ExigentOverdue by 18 months
86
#357
ExigentOverdue by 9 months
86
#358
Overdue by 4 monthsCISA KEV
86
#359
Overdue by 5 monthsCISA KEV
86
#360
Overdue by 5 monthsCISA KEV
86
#362
Overdue by 6 monthsCISA KEV
86
#363
Overdue by 3.5 yearsRansomware
86
#364
CVE-2018-15982 — Adobe Flash Player Use-After-Free Vulnerability
Overdue by 4.1 years · Ransomware · CISA KEV
Overdue by 4.1 yearsRansomware
86
#365
Overdue by 4.2 yearsRansomware
86
#366
Overdue by 3 monthsCISA KEV
86
#367
ExigentOverdue by 21 months
86
#368
Overdue by 17 monthsCISA KEV
85
#369
Overdue by 4.3 yearsCISA KEV
85
#370
Overdue by 4.4 yearsCISA KEV
85
#371
Overdue by 18 monthsCISA KEV
85
#372
Overdue by 15 monthsCISA KEV
85
#373
Overdue by 4.3 yearsCISA KEV
85
#374
Overdue by 3.9 yearsCISA KEV
85
#375
Overdue by 4.3 yearsCISA KEV
85
#376
Overdue by 13 monthsCISA KEV
85
#377
Overdue by 3.4 yearsCISA KEV
85
#378
Overdue by 4.3 yearsCISA KEV
85
#379
Overdue by 3.4 yearsCISA KEV
85
#380
Overdue by 4.4 yearsCISA KEV
85
#381
Overdue by 4.1 yearsCISA KEV
85
#382
Overdue by 4.3 yearsCISA KEV
85
#383
Overdue by 4.4 yearsCISA KEV
85
#384
ExigentOverdue by 4.3 years
85
#385
Overdue by 17 monthsCISA KEV
85
#386
ExigentOverdue by 4.2 years
85
#387
ExigentOverdue by 4.0 years
85
#388
ExigentOverdue by 4.5 years
85
#389
ExigentOverdue by 4.3 years
85
#390
ExigentOverdue by 4.7 years
85
#391
ExigentOverdue by 22 months
85
#392
ExigentOverdue by 2.8 years
85
#393
ExigentOverdue by 4.4 years
85
#394
CVE-2016-4437 — Apache Shiro Code Execution Vulnerability
Exigent · Overdue by 4.3 years · CISA KEV
ExigentOverdue by 4.3 years
85
#395
ExigentOverdue by 4.6 years
85
#396
ExigentOverdue by 4.0 years
85
#397
ExigentOverdue by 3.3 years
85
#400
ExigentOverdue by 4.3 years
85
#401
ExigentOverdue by 4.3 years
85
#402
ExigentOverdue by 21 months
85
#403
CVE-2012-5076 — Oracle Java SE Sandbox Bypass Vulnerability
Exigent · Overdue by 4.4 years · CISA KEV
ExigentOverdue by 4.4 years
85
#404
Overdue by 8 monthsCISA KEV
85
#405
CVE-2021-32648 — October CMS Improper Authentication
Exigent · Overdue by 4.6 years · CISA KEV
ExigentOverdue by 4.6 years
85
#406
ExigentOverdue by 4.3 years
85
#407
ExigentOverdue by 3.3 years
85
#408
ExigentOverdue by 4.3 years
85
#409
CVE-2013-0431 — Oracle JRE Sandbox Bypass Vulnerability
Overdue by 4.2 years · Ransomware · CISA KEV
Overdue by 4.2 yearsRansomware
85
#412
Overdue by 3 monthsCISA KEV
85
#413
Overdue by 4.3 yearsRansomware
85
#414
CVE-2023-41266 — Qlik Sense Path Traversal Vulnerability
Overdue by 2.7 years · Ransomware · CISA KEV
Overdue by 2.7 yearsRansomware
85
#415
Overdue by 3 monthsCISA KEV
85
#416
Overdue by 7 monthsCISA KEV
85
#417
Overdue by 10 monthsCISA KEV
85
#418
Overdue by 7 monthsCISA KEV
85
#419
Overdue by 7 monthsCISA KEV
85
#420
Overdue by 4.6 yearsRansomware
85
#421
Overdue by 3.0 yearsRansomware
85
#422
Overdue by 50 daysCISA KEV
85
#423
CVE-2022-2294 — WebRTC Heap Buffer Overflow Vulnerability
Overdue by 4.0 years · Ransomware · CISA KEV
Overdue by 4.0 yearsRansomware
85
#424
CVE-2021-27877 — Veritas Backup Exec Agent Improper Authentication Vulnerability
Exigent · Overdue by 3.4 years · Ransomware · CISA KEV
ExigentOverdue by 3.4 years
85
#425
CVE-2021-27104 — Accellion FTA OS Command Injection Vulnerability
Exigent · Overdue by 4.8 years · Ransomware · CISA KEV
ExigentOverdue by 4.8 years
85
#426
CVE-2022-29499 — Mitel MiVoice Connect Data Validation Vulnerability
Exigent · Overdue by 4.1 years · Ransomware · CISA KEV
ExigentOverdue by 4.1 years
85
#427
CVE-2021-22941 — Citrix ShareFile Improper Access Control Vulnerability
Exigent · Overdue by 4.4 years · Ransomware · CISA KEV
ExigentOverdue by 4.4 years
85
#428
CVE-2020-12812 — Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
85
#429
CVE-2021-22893 — Ivanti Pulse Connect Secure Use-After-Free Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
85
#430
CVE-2020-12271 — Sophos SFOS SQL Injection Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
85
#431
CVE-2026-12569 — PTC Windchill and FlexPLM Improper Input Validation Vulnerability
Exigent · Overdue by 2 months · Ransomware · CISA KEV
ExigentOverdue by 2 months
85
#432
CVE-2021-20016 — SonicWall SSLVPN SMA100 SQL Injection Vulnerability
Exigent · Overdue by 4.8 years · Ransomware · CISA KEV
ExigentOverdue by 4.8 years
85
#433
CVE-2022-31199 — Netwrix Auditor Insecure Object Deserialization Vulnerability
Exigent · Overdue by 3.1 years · Ransomware · CISA KEV
ExigentOverdue by 3.1 years
85
#435
CVE-2021-20028 — SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
Exigent · Overdue by 4.4 years · Ransomware · CISA KEV
ExigentOverdue by 4.4 years
85
#436
CVE-2018-20753 — Kaseya VSA Remote Code Execution Vulnerability
Exigent · Overdue by 4.3 years · Ransomware · CISA KEV
ExigentOverdue by 4.3 years
85
#437
CVE-2020-5135 — SonicWall SonicOS Buffer Overflow Vulnerability
Exigent · Overdue by 4.4 years · Ransomware · CISA KEV
ExigentOverdue by 4.4 years
85
#438
ExigentOverdue by 2.9 years
85
#439
CVE-2023-48365 — Qlik Sense HTTP Tunneling Vulnerability
Exigent · Overdue by 19 months · Ransomware · CISA KEV
ExigentOverdue by 19 months
85
#440
CVE-2018-19949 — QNAP NAS File Station Command Injection Vulnerability
Exigent · Overdue by 4.2 years · Ransomware · CISA KEV
ExigentOverdue by 4.2 years
85
#441
CVE-2025-23006 — SonicWall SMA1000 Appliances Deserialization Vulnerability
Exigent · Overdue by 19 months · Ransomware · CISA KEV
ExigentOverdue by 19 months
85
#442
CVE-2024-9680 — Mozilla Firefox Use-After-Free Vulnerability
Exigent · Overdue by 22 months · Ransomware · CISA KEV
ExigentOverdue by 22 months
85
#443
CVE-2016-1019 — Adobe Flash Player Arbitrary Code Execution Vulnerability
Exigent · Overdue by 4.5 years · Ransomware · CISA KEV
ExigentOverdue by 4.5 years
85
#444
CVE-2024-40766 — SonicWall SonicOS Improper Access Control Vulnerability
Exigent · Overdue by 23 months · Ransomware · CISA KEV
ExigentOverdue by 23 months
85
#445
CVE-2019-7193 — QNAP QTS Improper Input Validation Vulnerability
Exigent · Overdue by 4.2 years · Ransomware · CISA KEV
ExigentOverdue by 4.2 years
85
#446
CVE-2025-42999 — SAP NetWeaver Deserialization Vulnerability
Exigent · Overdue by 15 months · Ransomware · CISA KEV
ExigentOverdue by 15 months
85
#447
CVE-2012-1710 — Oracle Fusion Middleware Unspecified Vulnerability
Exigent · Overdue by 4.2 years · Ransomware · CISA KEV
ExigentOverdue by 4.2 years
85
#448
CVE-2021-27103 — Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
Exigent · Overdue by 4.8 years · Ransomware · CISA KEV
ExigentOverdue by 4.8 years
85
#449
ExigentOverdue by 4.3 years
85
#450
CVE-2018-19323 — GIGABYTE Multiple Products Privilege Escalation Vulnerability
Exigent · Overdue by 3.8 years · Ransomware · CISA KEV
ExigentOverdue by 3.8 years
85
#451
CVE-2021-27101 — Accellion FTA SQL Injection Vulnerability
Exigent · Overdue by 4.8 years · Ransomware · CISA KEV
ExigentOverdue by 4.8 years
85
#452
CVE-2020-29574 — CyberoamOS (CROS) SQL Injection Vulnerability
Exigent · Overdue by 18 months · Ransomware · CISA KEV
ExigentOverdue by 18 months
85
#453
CVE-2020-2021 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Exigent · Overdue by 4.4 years · Ransomware · CISA KEV
ExigentOverdue by 4.4 years
85
#454
CVE-2022-26501 — Veeam Backup & Replication Remote Code Execution Vulnerability
Exigent · Overdue by 3.7 years · Ransomware · CISA KEV
ExigentOverdue by 3.7 years
85
#455
CVE-2024-11667 — Zyxel Multiple Firewalls Path Traversal Vulnerability
Exigent · Overdue by 20 months · Ransomware · CISA KEV
ExigentOverdue by 20 months
85
#456
CVE-2026-45321 — TanStack Unspecified Vulnerability
Exigent · Overdue by 3 months · Ransomware · CISA KEV
ExigentOverdue by 3 months
85
#457
CVE-2026-48027 — Nx Console Embedded Malicious Code Vulnerability
Exigent · Overdue by 3 months · Ransomware · CISA KEV
ExigentOverdue by 3 months
85
#458
CVE-2026-82078 — PaperCut NG/MF Unsafe Reflection Vulnerability
Exigent · CISA deadline in 7 days · CISA KEV
ExigentCISA deadline in 7 days
85

Microsoft release dashboard

This month's Microsoft release, by risk, by impact and by the products it touches.

CVEs by impact type

  • Elevation of Privilege 190
  • Remote Code Execution 116
  • Information Disclosure 93
  • Spoofing 21
  • Denial of Service 12
  • Security Feature Bypass 11
  • Tampering 4

1 CVE in this release carry no impact classification from Microsoft. They are counted here rather than charted as "Not stated", which would be the largest bar and would say nothing about impact.

Top affected products

  • Windows Server 2022 390
  • Windows Server 2019 366
  • Windows 10 Version 1809 324
  • Microsoft 365 Apps for Enterprise 174
  • Microsoft Office 2019 172
  • Windows Server 2025 83
  • Microsoft Office LTSC 2021 79
  • Windows 11 Version 25H2 76
  • Microsoft Office LTSC for Mac 2021 62
  • Windows 11 Version 24H2 56

Hardware-architecture and Server Core variants of the same product are grouped into one bar. Distinct OS versions and Office LTSC years are kept separate, since they matter for what still needs patching.

Linux distribution advisories

25 of 684, from Debian, Red Hat, Ubuntu.

AdvisorySourceSeverityCVEsDate
CVE-2026-64849 ↗
mlflow: MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
Red Hat Important 1 2026-08-17
CVE-2026-66804 ↗
console: Authenticated SSRF via user-controlled towerHost in /ansibletower handler
Red Hat Important 1 2026-08-13
CVE-2026-18963 ↗
keycloak-services: keycloak-services: Unauthenticated account takeover via reset-credentials flow bypass
Red Hat Critical 1 2026-08-17
USN-8728-1 ↗
Linux kernel (GCP) vulnerabilities
Ubuntu Not stated 1417 2026-09-07
CVE-2024-58376 ↗
renovate: Renovate 37.158.0 before 37.199.0 Command Injection via helmv3
Red Hat Important 1 2026-08-19
CVE-2026-66805 ↗
console: Stored DOM XSS via unescaped pod logs in document.write
Red Hat Important 1 2026-08-10
CVE-2026-71364 ↗
awx: project archive extraction allows path traversal file writes
Red Hat Important 1 2026-08-24
USN-8715-1 ↗
Linux kernel (Oracle) vulnerabilities
Ubuntu Not stated 37 2026-09-02
CVE-2026-62901 ↗
.NET: .NET Denial of Service Vulnerability
Red Hat Important 1 2026-08-11
CVE-2026-71471 ↗
acm-search-v2-rhel9: search-v2-operator: Hub Search CR Collector.ImageOverride propagated to every spoke as arbitrary container image
Red Hat Important 1 2026-08-12
USN-8661-4 ↗
Linux kernel vulnerabilities
Ubuntu Not stated 21 2026-09-02
CVE-2026-73623 ↗
gitpython: GitPython: Remote Code Execution via malicious Git template
Red Hat Important 1 2026-08-13
CVE-2026-63639 ↗
valkey: Valkey: Remote code execution via use-after-free in stream deserialization
Red Hat Important 1 2026-08-18
CVE-2026-5917 ↗
libgit2: libgit2: Arbitrary code execution via shell command injection in SSH backend
Red Hat Important 1 2026-08-11
CVE-2026-84218 ↗
org.jolokia/jolokia-core: Incomplete JNDI Denylist in Jolokia JSR-160 Proxy (Bypass of CVE-2018-1000130 Fix)
Red Hat Important 1 2026-09-01
CVE-2026-68763 ↗
org.apache.tomcat/tomcat: Apache Tomcat: Denial of Service via HTTP/2 allocation leak
Red Hat Important 1 2026-08-25
CVE-2026-76036 ↗
chromium-browser: Dawn in Google Chrome: Arbitrary code execution via crafted HTML page
Red Hat Important 1 2026-08-18
CVE-2026-48752 ↗
incus: Incus has arbitrary file read+write on host via templates/ symlink in malicious image
Red Hat Critical 1 2026-08-21
CVE-2026-48749 ↗
incus: Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image
Red Hat Critical 1 2026-08-21
CVE-2026-71513 ↗
nltk: NLTK: Remote Code Execution via AllowlistUnpickler dotted-name bypass
Red Hat Important 1 2026-08-22
CVE-2026-48750 ↗
incus: Incus has an arbitrary file write on host via `exec-output` symlink in crafted image
Red Hat Critical 1 2026-08-21
CVE-2026-65927 ↗
tomcat: Apache Tomcat: Access control bypass due to off-by-one error in RewriteValve [N] flag processing
Red Hat Important 1 2026-08-25
USN-8727-1 ↗
Linux kernel (OEM) vulnerabilities
Ubuntu Not stated 547 2026-09-07
USN-8726-1 ↗
Linux kernel vulnerabilities
Ubuntu Not stated 551 2026-09-07
CVE-2026-66793 ↗
governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via ManagedClusterAddOn annotation enables RCE on spoke
Red Hat Important 1 2026-08-18

Vendor bulletins

25 of 91, from Adobe, Apple, Chrome, Cisco, Ivanti, Oracle.

BulletinSourceTypeCVEsPublished
Chrome 152.0.7977.82 ↗
Stable Channel Update for Desktop — 152.0.7977.82
Chrome High CVE-2026-85042, CVE-2026-85043, CVE-2026-85044, CVE-2026-85045, CVE-2026-85046, CVE-2026-85047, CVE-2026-85048, CVE-2026-85049, CVE-2026-85050, CVE-2026-85051, CVE-2026-85052, CVE-2026-85053 2026-09-03
cisco-sa-hardening-iosxr-qg64NcM ↗
Cisco IOS XR Software Security Hardening Release: September 2026
Cisco Critical CVE-2026-20274, CVE-2026-20275, CVE-2026-20276, CVE-2026-20277, CVE-2026-20278, CVE-2026-20279, CVE-2026-20280 2026-09-02
cisco-sa-phone-dos-txMYNRzv ↗
Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability
Cisco High CVE-2026-20281 2026-09-02
cisco-sa-esa-smime-disc-dzw4rEdY ↗
Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities
Cisco Medium CVE-2026-20354, CVE-2026-20355 2026-09-02
cisco-sa-n9k-s1-rce-EH8dEtr ↗
Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability
Cisco Critical CVE-2026-20212 2026-09-02
Chrome 152.0.7977.75 ↗
Stable Channel Update for Desktop — 152.0.7977.75
Chrome Critical CVE-2026-84323, CVE-2026-84324, CVE-2026-84325, CVE-2026-84326, CVE-2026-84327, CVE-2026-84328, CVE-2026-84329, CVE-2026-84330, CVE-2026-84331, CVE-2026-84332, CVE-2026-84333, CVE-2026-84334, CVE-2026-84335, CVE-2026-84347, CVE-2026-84348, CVE-2026-84349, CVE-2026-84350, CVE-2026-84351, CVE-2026-84352, CVE-2026-84353, CVE-2026-84354, CVE-2026-84355, CVE-2026-84356, CVE-2026-84357, CVE-2026-84358, CVE-2026-84359 2026-09-01
cisco-sa-notice-f2SiMFxl ↗
Cisco Advance Notification for Publication of September 2, 2026, Security Advisories
Cisco Informational Not listed 2026-08-26
APSB26-110 ↗
Security update available for Content Credentials SDK
Adobe Bulletin Not listed 2026-08-25
APSB26-115 ↗
Security update available for Adobe Substance 3D Designer
Adobe Bulletin Not listed 2026-08-25
APSB26-121 ↗
Security update available for Adobe Substance 3D Sampler
Adobe Bulletin Not listed 2026-08-25
APSB26-124 ↗
Security update available for Adobe Illustrator
Adobe Bulletin Not listed 2026-08-25
APSB26-125 ↗
Security update available for Adobe XD
Adobe Bulletin Not listed 2026-08-25
APSB26-129 ↗
Security update available for Adobe Substance 3D Painter
Adobe Bulletin Not listed 2026-08-25
APSB26-134 ↗
Security update available for Adobe Campaign Classic
Adobe Bulletin Not listed 2026-08-25
Chrome 152.0.7977.64 ↗
Stable Channel Update for Desktop — 152.0.7977.64
Chrome Critical CVE-2026-78891, CVE-2026-78892, CVE-2026-78893, CVE-2026-78894, CVE-2026-78895, CVE-2026-78896, CVE-2026-78897, CVE-2026-78898, CVE-2026-78899, CVE-2026-78900, CVE-2026-78901, CVE-2026-78903, CVE-2026-78904, CVE-2026-78905, CVE-2026-78906, CVE-2026-78907, CVE-2026-78908, CVE-2026-78909, CVE-2026-78910, CVE-2026-78911, CVE-2026-78912, CVE-2026-78913, CVE-2026-78914, CVE-2026-78915, CVE-2026-78934, CVE-2026-78935, CVE-2026-78936, CVE-2026-78937, CVE-2026-78938, CVE-2026-78939, CVE-2026-78940, CVE-2026-78941, CVE-2026-78942, CVE-2026-78943, CVE-2026-78944, CVE-2026-78945, CVE-2026-78946, CVE-2026-78947, CVE-2026-78948, CVE-2026-78949, CVE-2026-78950, CVE-2026-78951, CVE-2026-78952, CVE-2026-78953, CVE-2026-78954, CVE-2026-78955, CVE-2026-78956, CVE-2026-78957, CVE-2026-78958, CVE-2026-78959, CVE-2026-78960, CVE-2026-78961, CVE-2026-78962, CVE-2026-78963, CVE-2026-78964, CVE-2026-78965, CVE-2026-78966, CVE-2026-78967, CVE-2026-78968, CVE-2026-78969, CVE-2026-78974, CVE-2026-78975, CVE-2026-78976, CVE-2026-78977, CVE-2026-78978, CVE-2026-78979, CVE-2026-78980, CVE-2026-78981, CVE-2026-78983, CVE-2026-78984, CVE-2026-78985, CVE-2026-78986, CVE-2026-78987, CVE-2026-78989, CVE-2026-78990, CVE-2026-78991, CVE-2026-78999, CVE-2026-79000, CVE-2026-79001, CVE-2026-79002, CVE-2026-79003, CVE-2026-79004, CVE-2026-79005, CVE-2026-79006, CVE-2026-79007, CVE-2026-79008, CVE-2026-79009, CVE-2026-79010, CVE-2026-79011, CVE-2026-79012, CVE-2026-79013, CVE-2026-79014, CVE-2026-79015, CVE-2026-79016, CVE-2026-79017, CVE-2026-79018, CVE-2026-79019, CVE-2026-79020, CVE-2026-79021, CVE-2026-79022, CVE-2026-79023, CVE-2026-79024, CVE-2026-79025, CVE-2026-79026, CVE-2026-79027, CVE-2026-79028, CVE-2026-79030, CVE-2026-79031, CVE-2026-79032, CVE-2026-79033, CVE-2026-79034, CVE-2026-79038, CVE-2026-79039, CVE-2026-79040, CVE-2026-79041, CVE-2026-79042, CVE-2026-79043, CVE-2026-79044, CVE-2026-79045, CVE-2026-79046, CVE-2026-79047, CVE-2026-79048, CVE-2026-79049, CVE-2026-79050, CVE-2026-79051, CVE-2026-79052, CVE-2026-79053, CVE-2026-79054, CVE-2026-79055, CVE-2026-79056, CVE-2026-79057, CVE-2026-79058, CVE-2026-79059, CVE-2026-79060, CVE-2026-79064, CVE-2026-79065, CVE-2026-79066, CVE-2026-79067, CVE-2026-79068, CVE-2026-79069, CVE-2026-79070, CVE-2026-79071, CVE-2026-79072, CVE-2026-79073, CVE-2026-79074, CVE-2026-79075, CVE-2026-79076, CVE-2026-79077, CVE-2026-79078, CVE-2026-79082, CVE-2026-79083, CVE-2026-79084, CVE-2026-79085, CVE-2026-79086, CVE-2026-79087, CVE-2026-79088, CVE-2026-79089, CVE-2026-79090, CVE-2026-79091, CVE-2026-79093, CVE-2026-79094, CVE-2026-79095, CVE-2026-79097, CVE-2026-79098, CVE-2026-79099, CVE-2026-79103, CVE-2026-79104, CVE-2026-79105, CVE-2026-79106, CVE-2026-79107, CVE-2026-79108, CVE-2026-79109, CVE-2026-79110, CVE-2026-79111, CVE-2026-79112, CVE-2026-79116, CVE-2026-79117, CVE-2026-79118, CVE-2026-79119, CVE-2026-79120, CVE-2026-79121, CVE-2026-79122, CVE-2026-79123, CVE-2026-79124, CVE-2026-79125, CVE-2026-79126, CVE-2026-79127, CVE-2026-79128, CVE-2026-79129, CVE-2026-79130, CVE-2026-79131, CVE-2026-79132, CVE-2026-79133, CVE-2026-79134, CVE-2026-79136, CVE-2026-79137, CVE-2026-79138, CVE-2026-79139, CVE-2026-79140, CVE-2026-79141, CVE-2026-79142, CVE-2026-79143, CVE-2026-79144, CVE-2026-79146, CVE-2026-79147, CVE-2026-79148, CVE-2026-79149, CVE-2026-79150, CVE-2026-79151, CVE-2026-79152, CVE-2026-79154, CVE-2026-79155, CVE-2026-79173, CVE-2026-79174, CVE-2026-79175, CVE-2026-79176, CVE-2026-79177, CVE-2026-79178, CVE-2026-79179, CVE-2026-79180, CVE-2026-79181, CVE-2026-79182, CVE-2026-79183, CVE-2026-79184, CVE-2026-79185, CVE-2026-79186, CVE-2026-79187, CVE-2026-79188, CVE-2026-79189, CVE-2026-79190, CVE-2026-79191, CVE-2026-79192, CVE-2026-79193, CVE-2026-79194, CVE-2026-79195, CVE-2026-79196, CVE-2026-79197, CVE-2026-79198, CVE-2026-79199, CVE-2026-79200, CVE-2026-79201, CVE-2026-79202, CVE-2026-79203, CVE-2026-79204, CVE-2026-79205, CVE-2026-79206, CVE-2026-79207, CVE-2026-79208, CVE-2026-79209, CVE-2026-79210, CVE-2026-79211, CVE-2026-79212, CVE-2026-79213, CVE-2026-79214, CVE-2026-79215, CVE-2026-79216, CVE-2026-79217, CVE-2026-79218, CVE-2026-79219, CVE-2026-79220, CVE-2026-79221, CVE-2026-79222, CVE-2026-79223, CVE-2026-79224, CVE-2026-79225, CVE-2026-79226, CVE-2026-79227, CVE-2026-79228, CVE-2026-79229, CVE-2026-79230, CVE-2026-79231, CVE-2026-79232, CVE-2026-79233, CVE-2026-79234, CVE-2026-79235, CVE-2026-79236, CVE-2026-79237, CVE-2026-79238, CVE-2026-79239, CVE-2026-79240, CVE-2026-79241, CVE-2026-79242, CVE-2026-79243, CVE-2026-79244, CVE-2026-79245, CVE-2026-79246, CVE-2026-79247, CVE-2026-79248, CVE-2026-79249, CVE-2026-79250, CVE-2026-79251, CVE-2026-79252, CVE-2026-79253, CVE-2026-79254, CVE-2026-79255, CVE-2026-79256, CVE-2026-79257, CVE-2026-79258, CVE-2026-79259, CVE-2026-79260, CVE-2026-79261, CVE-2026-79262, CVE-2026-79263, CVE-2026-79264, CVE-2026-79265, CVE-2026-79266, CVE-2026-79267, CVE-2026-79269, CVE-2026-79270, CVE-2026-79271, CVE-2026-79272, CVE-2026-79273, CVE-2026-79274, CVE-2026-79275, CVE-2026-79276, CVE-2026-79282, CVE-2026-79283, CVE-2026-79284, CVE-2026-79285, CVE-2026-79286, CVE-2026-79287, CVE-2026-79288, CVE-2026-79289, CVE-2026-79290, CVE-2026-79291, CVE-2026-79292, CVE-2026-79293 2026-08-25
Chrome 151.0.7922.173 ↗
Stable Channel Update for Desktop — 151.0.7922.173
Chrome Critical CVE-2026-76017, CVE-2026-76018, CVE-2026-76019, CVE-2026-76020, CVE-2026-76021, CVE-2026-76022, CVE-2026-76023 2026-08-20
cisco-sa-hardening-crosswork-UzDTU9Vh ↗
Cisco Crosswork Security Hardening Release: August 2026
Cisco Critical CVE-2026-20030, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359 2026-08-19
cisco-sa-ie1k-uxq86Lnx ↗
Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability
Cisco Medium CVE-2026-20177 2026-08-19
cisco-sa-roomos-bof-vTMANZgu ↗
Cisco RoomOS Stack Overflow Vulnerability
Cisco Medium CVE-2026-20302 2026-08-19
cisco-sa-bworks-xxe-uwUd7CEt ↗
Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
Cisco High CVE-2026-20320 2026-08-19
cisco-sa-hardening-csw1-shSvndWP ↗
Cisco Secure Workload Software Security Hardening Release: August 2026
Cisco Critical CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319 2026-08-19
cisco-sa-ie1k-NgXUFF52 ↗
Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
Cisco Medium CVE-2026-20232 2026-08-19
cisco-sa-ucce-pcce-ssrf-TghHxD ↗
Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
Cisco Medium CVE-2026-20314 2026-08-19
cisco-sa-cuic-sql-inject-2qbfWSm5 ↗
Cisco Unified Intelligence Center SQL Injection Vulnerability
Cisco Medium CVE-2026-20327 2026-08-19
CSPUAug2026 ↗
Oracle Critical Security Patch Update Advisory - August 2026
Oracle Critical Security Patch Update Not listed 2026-08-18

Microsoft lifecycle milestones

30 of 185 matching, 226 products tracked. A product past its end of support stops receiving the fixes the rest of this page is about.

ProductReleaseMilestoneDate
Visual Studio ↗ 2026 - 18.8 End of life 2026-08-11
SharePoint Server ↗ 2019 End of life 2026-07-14
SharePoint Server ↗ 2016 End of life 2026-07-14
Visual Studio ↗ 2026 - 18.7 End of life 2026-07-14
Visual Studio ↗ 2022 - 17.12 (LTSC) End of life 2026-07-14
Visual Studio ↗ 2026 - 18.6 End of life 2026-06-09
Windows Server ↗ Windows Server 23H2 AC End of life 2026-05-12
Visual Studio ↗ 2026 - 18.5 End of life 2026-05-12
Visual Studio ↗ 2026 - 18.4 End of life 2026-04-14
Visual Studio ↗ 2026 - 18.3 End of life 2026-03-10
Visual Studio ↗ 2026 - 18.2 End of life 2026-02-10
Visual Studio ↗ 2026 - 18.1 End of life 2026-01-13
Visual Studio ↗ 2022 - 17.10 (LTSC) End of life 2026-01-13
Visual Studio ↗ 2026 - 18.0 End of life 2025-12-09
Windows (Client) ↗ 11 23H2 (W) End of life 2025-11-11
Windows (Client) ↗ 11 22H2 (E) End of life 2025-10-14
Windows (Client) ↗ 10 1507 (E) (LTS) End of life 2025-10-14
Office ↗ 2019 End of life 2025-10-14
Office ↗ 2016 End of life 2025-10-14
Visual Studio ↗ 2015 - 14.0 End of life 2025-10-14
SQL Server ↗ 2012 'Denali' SP4 Extended security updates ended 2025-07-08
Visual Studio ↗ 2022 - 17.8 (LTSC) End of life 2025-07-08
Visual Studio ↗ 2022 - 17.13 End of life 2025-05-13
Visual Studio ↗ 2022 - 17.6 (LTSC) End of life 2025-01-14
.NET ↗ 6 (LTS) End of life 2024-11-12
Visual Studio ↗ 2022 - 17.11 End of life 2024-11-12
PowerShell ↗ 7.2 (LTS) End of life 2024-11-08
Windows (Client) ↗ 11 22H2 (W) End of life 2024-10-08
Windows (Client) ↗ 11 21H2 (E) End of life 2024-10-08
Visual Studio ↗ 2022 - 17.4 (LTSC) End of life 2024-07-09

Data sources & attribution

Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms.

Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date. Linux distribution advisories come from Red Hat, Ubuntu and Debian; vendor bulletins from Adobe, Apple, Chrome, Cisco, Ivanti and Oracle, each linked to its own advisory.