Patch Radar

September 2026 security updates: Microsoft Patch Tuesday, macOS and Linux

Microsoft's Patch Tuesday on September 8, 2026 fixed 1,004 CVEs (113 critical, 2 exploited at release) in 57 security updates. Apple released 4 macOS updates fixing 188 CVEs. Debian, Ubuntu, Red Hat and Fedora released 5,272 Linux fixes for 4,483 CVEs. Every September 2026 security update, ranked by whether its vulnerabilities are being exploited.

Updated November 7, 2026, 12:32 AM UTCCISA KEV catalog: 2026-11-04EPSS scores: 2026-11-06

Which of your machines are still exposed? Get a demo.

515
Exploited CVEs with a fix available
34
Added to CISA KEV in the last 30 days
152,988
Fixes tracked across four platforms
1,420
CVEs in October's Patch Tuesday
Looks up an exact CVE ID, a Microsoft KB number, or a Linux advisory ID (USN, DSA, DLA, RHSA, FEDORA), or searches product, update and vulnerability names. An exact ID goes straight to its page.

Updates by month

What Microsoft, Apple and the Linux distributions released in a calendar month. Each list is in priority order: exploited (KEV or vendor-confirmed) first, then by exploited CVEs closed, then by highest EPSS. Counts include every update released that month, supported products or not. Third-party apps follow below, by recent vulnerability.

← Aug 2026
Oct 2026 →
Microsoft
59 updates
926 CVEs fixed, 10 closing exploited CVEs
macOS
4 updates
188 CVEs fixed, 3 closing exploited CVEs
Linux
5,272 fixes
4,483 CVEs fixed, 6 closing exploited CVEs

Microsoft

All Microsoft fixes for September 2026

Patch Tuesday was September 8, 2026: 1,004 CVEs (113 critical) in 57 security updates, 2 exploited at release. Read the write-up

Most affected Microsoft products, September 2026
Distinct CVEs fixed by this month's updates, by priority. A CVE counts once per product, however many updates fix it.
By version By family
  1. Windows Server
    700 CVEs2 exploited
  2. Windows 10
    649 CVEs1 exploited
  3. Windows 11
    646 CVEs1 exploited
  4. Microsoft Office
    95 CVEs
  5. SQL Server
    62 CVEs
  6. SharePoint Server
    16 CVEs
  7. Skype for Business and Lync
    10 CVEs
  8. Exchange Server
    9 CVEs
  9. .NET and Visual Studio
    7 CVEs
  10. Dynamics 365
    1 CVE
Patch nowUrgentHighRoutine
Show as a table
Product familyCVEsPatch nowUrgent HighRoutineExploitedMost urgent fix
Windows Server 700 2 113 445 140 2 KB5122871
Windows 10 649 1 109 405 134 1 KB5122876
Windows 11 646 1 107 418 120 1 KB5124008
Microsoft Office 95 0 18 39 38 0 KB5002923
SQL Server 62 0 4 32 26 0 KB5122769
SharePoint Server 16 0 0 10 6 0 KB5002908
Skype for Business and Lync 10 0 1 4 5 0 KB5123287
Exchange Server 9 0 0 6 3 0 KB5121608
.NET and Visual Studio 7 0 0 5 2 0 KB5123099
Dynamics 365 1 0 0 1 0 0 KB5123731
Families group every version of a product: all Windows 11 releases, all Office apps, all SQL Server versions. 10 products and families had a CVE fixed this month.
PriorityUpdateTypeReleasedCVEsExploitedMax EPSSMax CVSS
Patch now KB5122871
Windows Server 2025, Windows Server 2025 (Server Core installation)
 Security Sep 8, 2026 687 KEV1 0.0280 9.8
Patch now KB5122882
Windows Server 2022, Windows Server 2022 (Server Core installation)
 ServicingStack Sep 8, 2026 648 KEV1 0.0280 9.8
Patch now KB5124008
Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more
 Security Sep 8, 2026 638 KEV1 0.0280 9.8
Patch now KB5124012
Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems
 ServicingStack Sep 8, 2026 637 KEV1 0.0280 9.8
Patch now KB5122876
Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more
 Security Sep 8, 2026 623 KEV1 0.0280 9.8
Patch now KB5122880
Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems
 ServicingStack Sep 8, 2026 611 KEV1 0.0280 9.8
Patch now KB5122878
Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more
 Security Sep 8, 2026 575 KEV1 0.0280 9.8
Patch now KB5123099
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 and 4 more
 Security Sep 8, 2026 562 KEV1 0.0280 9.8
Patch now KB5123066
Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)
 Security Sep 8, 2026 425 KEV1 0.0117 9.8
Patch now KB5123065
Windows Server 2012, Windows Server 2012 (Server Core installation)
 Security Sep 8, 2026 400 KEV1 0.0117 9.8
Urgent KB5122769
Microsoft SQL Server 2025 for x64-based Systems (CU8)
 Security Sep 8, 2026 56 None 0.0169 9.8
Urgent KB5122770
Microsoft SQL Server 2025 for x64-based Systems (GDR)
 Security Sep 8, 2026 56 None 0.0169 9.8
Urgent KB5122768
Microsoft SQL Server 2022 for x64-based Systems (CU 26)
 Security Sep 8, 2026 52 None 0.0169 9.8
Urgent KB5122771
Microsoft SQL Server 2022 for x64-based Systems (GDR)
 Security Sep 8, 2026 52 None 0.0169 9.8
Urgent KB5122772
Microsoft SQL Server 2019 for x64-based Systems (CU 32)
 Security Sep 8, 2026 52 None 0.0169 9.8
Urgent KB5122773
Microsoft SQL Server 2019 for x64-based Systems (GDR)
 Security Sep 8, 2026 52 None 0.0169 9.8
Urgent KB5122774
Microsoft SQL Server 2017 for x64-based Systems (CU 31)
 Security Sep 8, 2026 45 None 0.0117 9.8
Urgent KB5122775
Microsoft SQL Server 2017 for x64-based Systems (GDR)
 Security Sep 8, 2026 45 None 0.0117 9.8
Urgent KB5123287
Skype for Business Server 2019 CU8, Skype for Business Server Subscription Edition CU1
 Security Sep 8, 2026 10 None 0.0117 9.8
Urgent KB5123300
Skype for Business Server 2019 CU8, Skype for Business Server Subscription Edition CU1
 Security Sep 8, 2026 10 None 0.0117 9.8
Urgent KB5123301
Skype for Business Server 2015 CU13
 Security Sep 8, 2026 10 None 0.0117 9.8
Urgent KB5002923
Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)
 Security Sep 8, 2026 30 None 0.0097 9.8
Urgent KB5002920
Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition)
 Security Sep 8, 2026 6 None 0.0097 8.8
Urgent KB5002916
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition), Microsoft Word 2016 (32-bit edition) and 1 more
 Security Sep 8, 2026 18 None 0.0092 8.8
Urgent KB5002919
Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition)
 Security Sep 8, 2026 3 None 0.0092 8.8
Urgent KB5002904
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
 Security Sep 8, 2026 30 None 0.0086 8.8
Urgent KB5002914
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
 Security Sep 8, 2026 30 None 0.0086 8.8
Urgent KB5122874
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more
 Security Sep 8, 2026 1 None 0.0084 8.8
Urgent KB5129194
Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems
 ServicingStack Sep 14, 2026 2 None 0.0035 8.2
Urgent KB5129195
Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more
 Out-of-band Sep 14, 2026 1 None 0.0030 7.8
High KB5002644
Microsoft Publisher 2016 (32-bit edition), Microsoft Publisher 2016 (64-bit edition)
 Security Sep 8, 2026 2 None 0.0129 8.8
High KB5121608
Microsoft Exchange Server Subscription Edition RTM
 Security Sep 8, 2026 9 None 0.0117 9.3
High KB5121609
Microsoft Exchange Server 2019 Cumulative Update 15
 Security Sep 8, 2026 9 None 0.0117 9.3
High KB5121610
Microsoft Exchange Server 2019 Cumulative Update 14
 Security Sep 8, 2026 9 None 0.0117 9.3
High KB5121611
Microsoft Exchange Server 2016 Cumulative Update 23
 Security Sep 8, 2026 8 None 0.0117 9.3
High KB5002908
Microsoft SharePoint Server Subscription Edition
 Security Sep 8, 2026 16 None 0.0100 8.8
High KB5123731
Microsoft Dynamics 365 Customer Engagement V9.1
 Security Sep 8, 2026 1 None 0.0099 8.8
High KB5002898
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
 Security Sep 8, 2026 2 None 0.0092 8.8
High KB5002912
Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition)
 Security Sep 8, 2026 2 None 0.0086 8.8
High KB5126105
.NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Windows and 1 more
 Security Sep 8, 2026 6 None 0.0086 8.8
High KB5126106
.NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Windows and 1 more
 Security Sep 8, 2026 6 None 0.0086 8.8
High KB5126104
.NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows and 1 more
 Security Sep 8, 2026 5 None 0.0086 8.8
High KB5126043
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems and 1 more
 Security Sep 8, 2026 2 None 0.0084 8.8
High KB5126044
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012
 Security Sep 8, 2026 2 None 0.0084 8.8
High KB5126045
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2
 Security Sep 8, 2026 2 None 0.0084 8.8
High KB5126046
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems and 3 more
 Security Sep 8, 2026 2 None 0.0084 8.8
High KB5126047
Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016
 Security Sep 8, 2026 2 None 0.0084 8.8
High KB5126049
Microsoft .NET Framework 4.8 on Windows Server 2012
 Security Sep 8, 2026 2 None 0.0084 8.8
High KB5126051
Microsoft .NET Framework 4.8 on Windows Server 2012 R2
 Security Sep 8, 2026 2 None 0.0084 8.8
High KB5126052
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for ARM64-based Systems and 2 more
 Security Sep 8, 2026 2 None 0.0084 8.8
High KB5126053
Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems, Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems
 Security Sep 8, 2026 2 None 0.0084 8.8
High KB5126421
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems and 6 more
 Security Sep 8, 2026 2 None 0.0084 8.8
High KB5126424
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems
 Security Sep 8, 2026 2 None 0.0084 8.8
High KB5126048
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems and 1 more
 Security Sep 8, 2026 1 None 0.0084 8.8
High KB5126050
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022
 Security Sep 8, 2026 1 None 0.0084 8.8
High KB5126422
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022
 Security Sep 8, 2026 1 None 0.0084 8.8
High KB5002913
Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition) and 1 more
 Security Sep 8, 2026 2 None 0.0082 8.8
High KB4011160
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
 Security Sep 8, 2026 1 None 0.0082 8.8
High KB5002910
Office Online Server
 Security Sep 8, 2026 5 None 0.0054 7.8

macOS

PriorityApple updateReleasedCVEsExploitedMax EPSSMax CVSS
Patch now Sequoia 15.8.1
Sequoia
 Sep 28, 2026 1 KEV1 0.2617 8.8
Patch now Tahoe 26.7.1
Tahoe
 Sep 28, 2026 1 KEV1 0.2617 8.8
Patch now Tahoe 26.7
Tahoe
 Sep 14, 2026 173 KEV1 0.0383 9.8
Urgent Sequoia 15.8
Sequoia
 Sep 14, 2026 174 None 0.0383 9.8

Linux

All Linux fixes for September 2026
Distribution Fixes CVEs fixed Closing exploited CVEs Patch now
Debian 3,696 3,696 3 3
Ubuntu 1,294 256
Red Hat 282 819 3 3

Highest priority this month

PriorityFixReleasedCVEsExploitedMax EPSSMax CVSS
Patch now DEBIAN-CVE-2026-87902
wordpress on Debian 13.5 (trixie), Debian 14
 Sep 29, 2026 1 KEV1 0.9577 8.1
Patch now DEBIAN-CVE-2026-87491
chromium on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14
 Sep 18, 2026 1 KEV1 0.0351 8.8
Patch now DEBIAN-CVE-2026-85046
chromium on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14
 Sep 6, 2026 1 KEV1 0.0181 8.8
Patch now RHSA-2026:70402
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
 Sep 23, 2026 20 KEV1 0.0161 9.8
Patch now RHSA-2026:70403
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
 Sep 23, 2026 20 KEV1 0.0161 9.8
Patch now RHSA-2026:70459
kernel, kernel-64k, kernel-64k-core and 69 more on RHEL 9
 Sep 24, 2026 13 KEV1 0.0161 9.8
Urgent RHSA-2026:68677
tomcat, tomcat-admin-webapps, tomcat-docs-webapp and 5 more on RHEL 8
 Sep 19, 2026 29 None 0.1034 9.8
Urgent RHSA-2026:67315
nginx, nginx-all-modules, nginx-filesystem and 6 more on RHEL 8
 Sep 19, 2026 1 None 0.0630 8.1
Urgent RHSA-2026:67308
nginx, nginx-all-modules, nginx-core and 7 more on RHEL 9
 Sep 13, 2026 1 None 0.0630 8.1
Urgent RHSA-2026:68660
tomcat, tomcat-admin-webapps, tomcat-docs-webapp and 5 more on RHEL 9
 Sep 19, 2026 16 None 0.0409 9.8

Patch Tuesday, month by month

CVEs Microsoft released on each Patch Tuesday, counted by original release date and excluding Azure Linux, the same way the industry trackers count. Select a bar to see that month above.

Microsoft CVEs per Patch Tuesday
Oct 2026: 1,420 CVEs in 51 security updates
0 500 1,000 1,500 2,000Nov 2025: 64 CVEs, 31 security updates, 1 exploited at release Nov 2025 Dec 2025: 72 CVEs, 29 security updates, 1 exploited at release Dec Jan 2026: 116 CVEs, 26 security updates, 1 exploited at release Jan 2026 Feb 2026: 53 CVEs, 29 security updates, 6 exploited at release Feb Mar 2026: 78 CVEs, 39 security updates, 0 exploited at release Mar Apr 2026: 176 CVEs, 50 security updates, 2 exploited at release Apr May 2026: 114 CVEs, 40 security updates, 0 exploited at release May Jun 2026: 246 CVEs, 28 security updates, 0 exploited at release Jun Jul 2026: 574 CVEs, 56 security updates, 3 exploited at release Jul Aug 2026: 710 CVEs, 58 security updates, 1 exploited at release Aug 710Sep 2026: 1,004 CVEs, 57 security updates, 2 exploited at release Sep 1,004Oct 2026: 1,420 CVEs, 51 security updates, 1 exploited at release Oct 1,420
Show as a table
MonthCVEsCriticalSecurity updatesExploited at releaseWrite-up
Oct 2026 1,420 80 51 1 Read
Sep 2026 1,004 113 57 2 Read
Aug 2026 710 84 58 1 Read
Jul 2026 574 57 56 3 Read
Jun 2026 246 30 28 0 Read
May 2026 114 15 40 0 Read
Apr 2026 176 7 50 2 Read
Mar 2026 78 3 39 0 Read
Feb 2026 53 2 29 6 Read
Jan 2026 116 8 26 1 Read
Dec 2025 72 0 29 1 Read
Nov 2025 64 4 31 1 None

Third-party apps

Apps with vulnerabilities published, or added to CISA's Known Exploited Vulnerabilities catalog, in the last 90 days. Most urgent first. Updating to the latest version covers every vulnerability counted here.

Most affected Windows apps
Last 90 days, distinct CVEs by priority
  1. Google Chrome Beta (EXE)
    1,487 CVEs2 exploited
  2. Google Chrome (EXE)
    1,477 CVEs2 exploited
  3. Google Chrome Dev (EXE)
    1,477 CVEs2 exploited
  4. Microsoft Edge
    1,279 CVEs3 exploited
  5. Microsoft Edge Beta
    1,279 CVEs3 exploited
  6. Microsoft Edge Dev
    1,279 CVEs3 exploited
  7. Microsoft Edge WebView2 Runtime
    1,273 CVEs3 exploited
  8. Mozilla Thunderbird (af)
    240 CVEs
  9. Mozilla Thunderbird (ar)
    240 CVEs
  10. Mozilla Thunderbird (ast)
    240 CVEs
Patch nowUrgentHighRoutine
Most affected macOS apps
Last 90 days, distinct CVEs by priority
  1. Google Chrome
    1,442 CVEs2 exploited
  2. Microsoft Edge
    1,239 CVEs3 exploited
  3. Mozilla Thunderbird
    236 CVEs
  4. Mozilla Firefox
    230 CVEs
  5. Microsoft Visual Studio Code
    30 CVEs
  6. PyCharm
    4 CVEs
  7. Docker Desktop
    2 CVEs
  8. KeePassXC
    2 CVEs
  9. VLC media player
    2 CVEs
  10. WebStorm
    2 CVEs
Patch nowUrgentHighRoutine

Windows apps

All Windows app fixes

The 50 most urgent of 488 apps.

PriorityAppLatest versionCVEsExploited Max EPSSMax CVSSMost urgent fix
Patch now Microsoft Edge
Microsoft
 156.0.4314.58 1,279 KEV3 0.0981 9.8 Microsoft Edge 154.0.4258.62
Patch now Microsoft Edge Beta
Microsoft
 158.0.4370.1 1,279 KEV3 0.0981 9.8 Microsoft Edge Beta 127.0.2651.8
Patch now Microsoft Edge Dev
Microsoft
 159.0.4378.0 1,279 KEV3 0.0981 9.8 Microsoft Edge Dev 152.0.4167.0
Patch now Microsoft Edge WebView2 Runtime
Microsoft
 156.0.4314.58 1,273 KEV3 0.0981 9.8 Microsoft Edge WebView2 Runtime 154.0.4258.62
Patch now Google Chrome Beta (EXE)
Google
 158.0.8127.18 1,487 KEV2 0.0351 9.8 Google Chrome Beta (EXE) 154.0.8037.0
Patch now Google Chrome (EXE)
Google
 157.0.8103.39 1,477 KEV2 0.0351 9.8 Google Chrome (EXE) 153.0.8010.37
Patch now Google Chrome Dev (EXE)
Google
 159.0.8130.0 1,477 KEV2 0.0351 9.8 Google Chrome Dev (EXE) 154.0.8013.2
Urgent Microsoft .NET Windows Desktop Runtime 8.0
Microsoft
 8.0.33 34 None 0.0166 9.8 Microsoft .NET Windows Desktop Runtime 8.0 8.0.32
Urgent Microsoft .NET Windows Desktop Runtime 10.0
Microsoft
 10.0.14 27 None 0.0166 9.8 Microsoft .NET Windows Desktop Runtime 10.0 10.0.14
Urgent Microsoft ASP.NET Core Hosting Bundle 10.0
Microsoft
 10.0.14 27 None 0.0166 9.8 Microsoft ASP.NET Core Hosting Bundle 10.0 10.0.14
Urgent Microsoft .NET Windows Desktop Runtime 9.0
Microsoft
 9.0.22 26 None 0.0166 9.8 Microsoft .NET Windows Desktop Runtime 9.0 9.0.21
Urgent Microsoft ASP.NET Core Hosting Bundle 9.0
Microsoft
 9.0.22 26 None 0.0166 9.8 Microsoft ASP.NET Core Hosting Bundle 9.0 9.0.21
Urgent Microsoft ASP.NET Core Hosting Bundle 8.0
Microsoft
 8.0.33 23 None 0.0166 9.8 Microsoft ASP.NET Core Hosting Bundle 8.0 8.0.32
Urgent Microsoft Visual Studio Code
Microsoft
 1.143.1 30 None 0.0106 9.6 Microsoft Visual Studio Code 1.134.0
Urgent Microsoft SQL Server Management Studio 22
Microsoft
 22.11.3 1 None 0.0086 9.6 Microsoft SQL Server Management Studio 22 22.8.2
Urgent Python 3.14
Python Software Foundation
 3.14.10 10 None 0.0073 9.4 Python 3.14 3.14.8
Urgent Python 3.13
Python Software Foundation
 3.13.17 8 None 0.0073 9.2 Python 3.13 3.13.16
Urgent Mozilla Thunderbird (af)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (af) 141.0
Urgent Mozilla Thunderbird (ar)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (ar) 141.0
Urgent Mozilla Thunderbird (ast)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (ast) 141.0
Urgent Mozilla Thunderbird (be)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (be) 141.0
Urgent Mozilla Thunderbird (bg)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (bg) 141.0
Urgent Mozilla Thunderbird (br)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (br) 141.0
Urgent Mozilla Thunderbird (ca)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (ca) 141.0
Urgent Mozilla Thunderbird (cak)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (cak) 141.0
Urgent Mozilla Thunderbird (cs)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (cs) 141.0
Urgent Mozilla Thunderbird (cy)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (cy) 141.0
Urgent Mozilla Thunderbird (da)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (da) 141.0
Urgent Mozilla Thunderbird (de)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (de) 141.0
Urgent Mozilla Thunderbird (dsb)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (dsb) 141.0
Urgent Mozilla Thunderbird (el)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (el) 141.0
Urgent Mozilla Thunderbird (en-CA)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (en-CA) 141.0
Urgent Mozilla Thunderbird (en-GB)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (en-GB) 141.0
Urgent Mozilla Thunderbird (en-US)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (en-US) 141.0
Urgent Mozilla Thunderbird (es-AR)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (es-AR) 141.0
Urgent Mozilla Thunderbird (es-ES)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (es-ES) 141.0
Urgent Mozilla Thunderbird (es-MX)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (es-MX) 141.0
Urgent Mozilla Thunderbird (et)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (et) 141.0
Urgent Mozilla Thunderbird (eu)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (eu) 141.0
Urgent Mozilla Thunderbird (fi)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (fi) 141.0
Urgent Mozilla Thunderbird (fr)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (fr) 141.0
Urgent Mozilla Thunderbird (fy-NL)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (fy-NL) 141.0
Urgent Mozilla Thunderbird (ga-IE)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (ga-IE) 141.0
Urgent Mozilla Thunderbird (gd)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (gd) 141.0
Urgent Mozilla Thunderbird (gl)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (gl) 141.0
Urgent Mozilla Thunderbird (he)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (he) 141.0
Urgent Mozilla Thunderbird (hr)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (hr) 141.0
Urgent Mozilla Thunderbird (hsb)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (hsb) 141.0
Urgent Mozilla Thunderbird (hu)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (hu) 141.0
Urgent Mozilla Thunderbird (hy-AM)
Mozilla
 159.0 240 None 0.0072 10.0 Mozilla Thunderbird (hy-AM) 141.0

macOS apps

13 apps.

PriorityAppLatest versionCVEsExploited Max EPSSMax CVSSMost urgent fix
Patch now Microsoft Edge
Microsoft
 157.0.4341.42 1,239 KEV3 0.0981 9.8 Microsoft Edge 154.0.4258.62
Patch now Google Chrome
Google
 157.0.8103.39 1,442 KEV2 0.0351 9.8 Google Chrome 153.0.8010.37
Urgent Microsoft Visual Studio Code
Microsoft
 1.145.1 30 None 0.0106 9.6 Microsoft Visual Studio Code 1.133.0
Urgent Mozilla Thunderbird
Mozilla
 159.0 236 None 0.0072 10.0 Mozilla Thunderbird 154.0
Urgent Mozilla Firefox
Mozilla
 159.0.1 230 None 0.0072 10.0 Mozilla Firefox 153.5.0
Urgent PyCharm
JetBrains
 2026.3 4 None 0.0029 9.0 PyCharm 2026.2.4
Urgent WebStorm
JetBrains
 2026.3 2 None 0.0029 9.0 WebStorm 2026.2.4
High Docker Desktop
Docker
 4.98.0 2 None 0.0044 7.8 Docker Desktop 4.86.0
High VLC media player
VideoLAN
 3.0.24 2 None 0.0024 7.3 VLC media player 3.0.24
High Parallels Desktop
Parallels
 27.1.0 1 None 0.0017 7.8 Parallels Desktop 26.4.1
Routine Microsoft Defender
Microsoft
 101.26092.0012 1 None 0.0048 5.5 Microsoft Defender 101.26042.0020
Routine OneDrive
Microsoft
 26.189.0928 1 None 0.0039 6.7 OneDrive 26.098.0524
Routine KeePassXC
KeePassXC
 2.8.0 2 None 0.0014 4.3 KeePassXC 2.8.0

All fixes

One row per thing you install: a Microsoft KB, an app version, a macOS update or a Linux advisory. Sorted by priority, then by exploited CVEs closed, then by highest EPSS.

PriorityFixPlatformReleased CVEsExploitedMax EPSSMax CVSS
Patch now Google Chrome 156.0.8078.80
Google Chrome
 Windows apps Oct 29, 2026 204 KEV4 0.5496 9.8
Patch now Google Chrome Beta 158.0.8127.2
Google Chrome Beta
 Windows apps Oct 28, 2026 201 KEV4 0.5496 9.8
Patch now Google Chrome Dev 159.0.8130.0
Google Chrome Dev
 Windows apps Oct 30, 2026 174 KEV3 0.1374 9.8
Patch now RHSA-2026:87080
apcu-panel, libzip, libzip-devel and 34 more on RHEL 8
 Linux Oct 24, 2026 12 KEV2 1.0000 9.8
Patch now RHSA-2026:87071
php8.4 on RHEL 10
 Linux Oct 24, 2026 3 KEV2 1.0000 9.8
Patch now RHSA-2026:87079
apcu-panel, php-pecl-apcu, php-pecl-apcu-devel and 4 more on RHEL 9
 Linux Oct 24, 2026 3 KEV2 1.0000 9.8
Patch now RHSA-2026:87151
php, php-bcmath, php-cli and 22 more on RHEL 9
 Linux Oct 24, 2026 3 KEV2 1.0000 9.8
Patch now RHSA-2026:87073
php-pecl-xdebug3 on RHEL 8
 Linux Oct 24, 2026 3 KEV2 1.0000 9.8
Patch now RHSA-2026:88561
php on RHEL 10
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now libapache2-mod-php8.3 8.3.6-0ubuntu0.24.04.13
libapache2-mod-php8.3 on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now libphp8.3-embed 8.3.6-0ubuntu0.24.04.13
libphp8.3-embed on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3 8.3.6-0ubuntu0.24.04.13
php8.3 on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-bcmath 8.3.6-0ubuntu0.24.04.13
php8.3-bcmath on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-bz2 8.3.6-0ubuntu0.24.04.13
php8.3-bz2 on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-cgi 8.3.6-0ubuntu0.24.04.13
php8.3-cgi on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-cli 8.3.6-0ubuntu0.24.04.13
php8.3-cli on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-common 8.3.6-0ubuntu0.24.04.13
php8.3-common on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-curl 8.3.6-0ubuntu0.24.04.13
php8.3-curl on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-dba 8.3.6-0ubuntu0.24.04.13
php8.3-dba on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-enchant 8.3.6-0ubuntu0.24.04.13
php8.3-enchant on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-fpm 8.3.6-0ubuntu0.24.04.13
php8.3-fpm on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-gd 8.3.6-0ubuntu0.24.04.13
php8.3-gd on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-gmp 8.3.6-0ubuntu0.24.04.13
php8.3-gmp on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-imap 8.3.6-0ubuntu0.24.04.13
php8.3-imap on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Patch now php8.3-interbase 8.3.6-0ubuntu0.24.04.13
php8.3-interbase on Ubuntu 24.04.5 LTS (noble)
 Linux Oct 24, 2026 2 KEV2 1.0000 9.8
Showing 1 to 25 of 14,706 1Next

How priority is set

Four tiers with published rules, the same rules the Patchblox Vulnerability Hub uses. A fix takes the highest tier of any CVE it closes.

Patch now

Exploited in the wild: the vendor reports exploitation, or the CVE is in CISA's Known Exploited Vulnerabilities catalog.

Urgent

The vendor rates exploitation as more likely, or rates the CVE Critical.

High

CVSS 7.0 or higher, or rated High by the vendor when no CVSS score is published.

Routine

Everything else. Still worth installing on your normal schedule.

EPSS is shown as context and breaks ties within a tier. It does not move a CVE between tiers: a probability model should not outrank a confirmed exploitation report.

Where the data comes from

Microsoft Security Response CenterCVEs, KBs, affected products, exploitation and disclosure status
CISA Known Exploited VulnerabilitiesDate added, remediation due date, known ransomware use
FIRST EPSSExploit prediction scores and percentiles. EPSS data provided by FIRST.org
Apple security releasesmacOS updates, components and actively exploited flags
Linux distribution advisoriesDebian, Ubuntu, Red Hat and Fedora fixed package versions
Patchblox catalogWindows and macOS application versions and the CVEs each version fixes

This list is everyone's. Yours is shorter.

The tracker tells you what's exploited and what fixes it. Patchblox tells you which of your machines are still exposed, on every platform, and deploys the fix on Windows and Linux.

Get a demoSee the platform
  • Works from the Intune, Entra and Azure Update Manager data you already have
  • Matches every installed app and OS build to the fix that closes its CVEs
  • Deploys through rings with validation, then confirms the exposure closed