Patch Radar
May 2026 security updates: Microsoft Patch Tuesday, macOS and Linux
Microsoft's Patch Tuesday on May 12, 2026 fixed 114 CVEs (15 critical, 0 exploited at release) in 40 security updates. Apple released 3 macOS updates fixing 80 CVEs. Debian, Ubuntu, Red Hat and Fedora released 4,461 Linux fixes for 2,475 CVEs. Every May 2026 security update, ranked by whether its vulnerabilities are being exploited.
Which of your machines are still exposed? Get a demo.
515
Exploited CVEs with a fix available
34
Added to CISA KEV in the last 30 days
152,988
Fixes tracked across four platforms
1,420
CVEs in October's Patch Tuesday
Looks up an exact CVE ID, a Microsoft KB number, or a Linux advisory ID (USN, DSA, DLA, RHSA, FEDORA), or searches product, update and vulnerability names. An exact ID goes straight to its page.
Updates by month
What Microsoft, Apple and the Linux distributions released in a calendar month. Each list is in priority order: exploited (KEV or vendor-confirmed) first, then by exploited CVEs closed, then by highest EPSS. Counts include every update released that month, supported products or not. Third-party apps follow below, by recent vulnerability.
Microsoft
59 updates
96 CVEs fixed, 3 closing exploited CVEs
macOS
3 updates
80 CVEs fixed
Linux
4,461 fixes
2,475 CVEs fixed, 16 closing exploited CVEs
Microsoft
All Microsoft fixes for May 2026Patch Tuesday was May 12, 2026: 114 CVEs (15 critical) in 40 security updates, 0 exploited at release. Read the write-up
Most affected Microsoft products, May 2026
Distinct CVEs fixed by this month's updates, by priority. A CVE counts once per product, however many updates fix it.
Patch nowUrgentHighRoutine
Show as a table
| Product family | CVEs | Patch now | Urgent | High | Routine | Exploited | Most urgent fix |
|---|---|---|---|---|---|---|---|
| Windows Server | 67 | 0 | 15 | 41 | 11 | 0 | KB5087423 |
| Windows 11 | 63 | 0 | 14 | 38 | 11 | 0 | KB5089548 |
| Windows 10 | 54 | 0 | 10 | 36 | 8 | 0 | KB5087538 |
| Microsoft Office | 12 | 0 | 6 | 3 | 3 | 0 | KB5002858 |
| SharePoint Server | 9 | 1 | 2 | 6 | 0 | 1 | KB5002863 |
| .NET and Visual Studio | 4 | 0 | 0 | 3 | 1 | 0 | KB5093446 |
| Dynamics 365 | 4 | 0 | 1 | 2 | 1 | 0 | KB5078943 |
| SQL Server | 1 | 0 | 0 | 1 | 0 | 0 | KB5089270 |
Families group every version of a product: all Windows 11 releases, all Office apps, all SQL Server versions. 8 products and families had a CVE fixed this month.
| Priority | Update | Type | Released | CVEs | Exploited | Max EPSS | Max CVSS |
|---|---|---|---|---|---|---|---|
| Patch now | KB5002863 Microsoft SharePoint Server Subscription Edition |
Security | May 12, 2026 | 9 | KEVRansomware1 | 0.8024 | 8.8 |
| Patch now | KB5002868 Microsoft SharePoint Enterprise Server 2016 |
Security | May 12, 2026 | 9 | KEVRansomware1 | 0.8024 | 8.8 |
| Patch now | KB5002870 Microsoft SharePoint Server 2019 |
Security | May 12, 2026 | 9 | KEVRansomware1 | 0.8024 | 8.8 |
| Urgent | KB5087423 Windows Server 2025, Windows Server 2025 (Server Core installation) |
ServicingStack | May 12, 2026 | 66 | None | 0.7962 | 9.8 |
| Urgent | KB5087539 Windows Server 2025, Windows Server 2025 (Server Core installation) |
Security | May 12, 2026 | 66 | None | 0.7962 | 9.8 |
| Urgent | KB5087541 Windows Server 2022, 23H2 Edition (Server Core installation) |
ServicingStack | May 12, 2026 | 58 | None | 0.7962 | 9.8 |
| Urgent | KB5087545 Windows Server 2022, Windows Server 2022 (Server Core installation) |
ServicingStack | May 12, 2026 | 58 | None | 0.7962 | 9.8 |
| Urgent | KB5087424 Windows Server 2022, Windows Server 2022 (Server Core installation) |
ServicingStack | May 12, 2026 | 56 | None | 0.7962 | 9.8 |
| Urgent | KB5087538 Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more |
Security | May 12, 2026 | 55 | None | 0.7962 | 9.8 |
| Urgent | KB5087537 Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more |
Security | May 12, 2026 | 47 | None | 0.7962 | 9.8 |
| Urgent | KB5087471 Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) |
Security | May 12, 2026 | 42 | None | 0.7962 | 9.8 |
| Urgent | KB5087470 Windows Server 2012, Windows Server 2012 (Server Core installation) |
Security | May 12, 2026 | 39 | None | 0.7962 | 9.8 |
| Urgent | KB5089548 Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 Version 26H1 for x64-based Systems - extra, Windows 11 version 26H1 for x64-based Systems |
ServicingStack | May 12, 2026 | 62 | None | 0.0473 | 9.8 |
| Urgent | KB5089466 Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more |
ServicingStack | May 12, 2026 | 61 | None | 0.0473 | 9.8 |
| Urgent | KB5089549 Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more |
Security | May 12, 2026 | 61 | None | 0.0473 | 9.8 |
| Urgent | KB5002858 Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition) |
Security | May 12, 2026 | 6 | None | 0.0442 | 8.4 |
| Urgent | KB5087420 Windows 11 Version 23H2 for ARM64-based Systems |
ServicingStack | May 12, 2026 | 56 | None | 0.0270 | 9.8 |
| Urgent | KB5087544 Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems |
Security | May 12, 2026 | 54 | None | 0.0267 | 8.8 |
| Urgent | KB5078943 Microsoft Dynamics 365 (on-premises) version 9.0, Microsoft Dynamics 365 (on-premises) version 9.1 |
Security | May 12, 2026 | 3 | None | 0.0119 | 9.9 |
| Urgent | KB5002869 Microsoft SharePoint Enterprise Server 2016 |
Security | May 20, 2026 | 1 | None | 0.0045 | 8.4 |
| Urgent | KB5002872 Microsoft SharePoint Server 2019 |
Security | May 20, 2026 | 1 | None | 0.0045 | 8.4 |
| Urgent | KB5002866 Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) |
Security | May 12, 2026 | 2 | None | 0.0038 | 8.4 |
| High | KB5093446 .NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Windows |
Security | May 12, 2026 | 4 | None | 0.0243 | 7.5 |
| High | KB5093447 .NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows |
Security | May 12, 2026 | 4 | None | 0.0243 | 7.5 |
| High | KB5093448 .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Windows |
Security | May 12, 2026 | 4 | None | 0.0243 | 7.5 |
| High | KB5087048 Microsoft .NET Framework 3.5 on Windows Server 2012 |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087049 Microsoft .NET Framework 3.5 on Windows Server 2012 R2 |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087051 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087053 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems and 1 more |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087054 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087055 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H1 for x64-based Systems |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087058 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087059 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087061 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087063 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2, Microsoft .NET Framework 4.8 on Windows Server 2012 R2 |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087064 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems and 1 more |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087065 Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016 |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087066 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087067 Microsoft .NET Framework 4.8 on Windows Server 2012 |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087068 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 |
Security | May 18, 2026 | 2 | None | 0.0077 | 7.3 |
| High | KB5087062 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 |
Security | May 18, 2026 | 1 | None | 0.0064 | 7.3 |
| High | KB5087069 Microsoft .NET Framework 4.8 on Windows Server 2012 R2 |
Security | May 18, 2026 | 1 | None | 0.0064 | 7.3 |
| High | KB5089270 Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack |
Security | May 12, 2026 | 1 | None | 0.0056 | 8.8 |
| High | KB5089271 Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) |
Security | May 12, 2026 | 1 | None | 0.0056 | 8.8 |
| High | KB5089899 Microsoft SQL Server 2025 for x64-based Systems (CU4) |
Security | May 12, 2026 | 1 | None | 0.0056 | 8.8 |
| High | KB5089900 Microsoft SQL Server 2022 for x64-based Systems (CU 24) |
Security | May 12, 2026 | 1 | None | 0.0056 | 8.8 |
| High | KB5090347 Microsoft SQL Server 2017 for x64-based Systems (GDR) |
Security | May 12, 2026 | 1 | None | 0.0056 | 8.8 |
| High | KB5090354 Microsoft SQL Server 2017 for x64-based Systems (CU 31) |
Security | May 12, 2026 | 1 | None | 0.0056 | 8.8 |
| High | KB5090407 Microsoft SQL Server 2019 for x64-based Systems (CU 32) |
Security | May 12, 2026 | 1 | None | 0.0056 | 8.8 |
| High | KB5090408 Microsoft SQL Server 2019 for x64-based Systems (GDR) |
Security | May 12, 2026 | 1 | None | 0.0056 | 8.8 |
| High | KB5091158 Microsoft SQL Server 2022 for x64-based Systems (GDR) |
Security | May 12, 2026 | 1 | None | 0.0056 | 8.8 |
| High | KB5091223 Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Security | May 12, 2026 | 1 | None | 0.0056 | 8.8 |
| High | KB5002865 Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) |
Security | May 12, 2026 | 3 | None | 0.0041 | 7.8 |
| High | KB5002871 Office Online Server |
Security | May 12, 2026 | 3 | None | 0.0041 | 7.8 |
| High | KB5086068 Microsoft Dynamics 365 Business Central 2024 Release Wave 2 |
Security | May 12, 2026 | 1 | None | 0.0027 | 7.8 |
| High | KB5086069 Microsoft Dynamics 365 Business Central Release Wave 1 2025 |
Security | May 12, 2026 | 1 | None | 0.0027 | 7.8 |
| High | KB5086070 Microsoft Dynamics 365 Business Central Release Wave 2 2025 |
Security | May 12, 2026 | 1 | None | 0.0027 | 7.8 |
| High | KB5093780 Microsoft Dynamics 365 Business Central 2026 Release Wave 1 |
Security | May 12, 2026 | 1 | None | 0.0027 | 7.8 |
| Routine | KB5002578 Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) |
Security | May 12, 2026 | 1 | None | 0.0032 | 6.7 |
macOS
| Priority | Apple update | Released | CVEs | Exploited | Max EPSS | Max CVSS |
|---|---|---|---|---|---|---|
| High | Tahoe 26.5 Tahoe |
May 11, 2026 | 74 | None | 0.0650 | 8.8 |
| High | Sequoia 15.7.7 Sequoia |
May 11, 2026 | 46 | None | 0.0650 | 8.8 |
| High | Sonoma 14.8.7 Sonoma |
May 11, 2026 | 43 | None | 0.0650 | 8.8 |
| Distribution | Fixes | CVEs fixed | Closing exploited CVEs | Patch now |
|---|---|---|---|---|
| Debian | 2,212 | 2,212 | 2 | 2 |
| Ubuntu | 2,066 | 280 | ||
| Red Hat | 183 | 398 | 14 | 14 |
Highest priority this month
| Priority | Fix | Released | CVEs | Exploited | Max EPSS | Max CVSS |
|---|---|---|---|---|---|---|
| Patch now | RHSA-2026:13577 bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8 |
May 15, 2026 | 7 | KEV1 | 0.9811 | 9.8 |
| Patch now | RHSA-2026:13578 kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8 |
May 15, 2026 | 7 | KEV1 | 0.9811 | 9.8 |
| Patch now | RHSA-2026:19225 kernel, kernel-64k, kernel-64k-core and 69 more on RHEL 9 |
May 15, 2026 | 3 | KEV1 | 0.9811 | 7.8 |
| Patch now | RHSA-2026:13887 kernel on RHEL 10 |
May 15, 2026 | 2 | KEV1 | 0.9811 | 7.8 |
| Patch now | RHSA-2026:15978 kpatch-patch-5_14_0-611_36_1, kpatch-patch-5_14_0-611_9_1 on RHEL 9 |
May 15, 2026 | 1 | KEV1 | 0.9811 | 7.8 |
| Patch now | RHSA-2026:15976 kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1 and 2 more on RHEL 8 |
May 15, 2026 | 1 | KEV1 | 0.9811 | 7.8 |
| Patch now | DEBIAN-CVE-2026-31431 linux on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14 |
May 15, 2026 | 1 | KEV1 | 0.9811 | 7.8 |
| Patch now | RHSA-2026:19568 kernel, kernel-64k, kernel-64k-core and 69 more on RHEL 9 |
May 15, 2026 | 15 | KEV1 | 0.9419 | 9.8 |
| Patch now | RHSA-2026:19463 thunderbird on RHEL 10 |
May 15, 2026 | 26 | KEV1 | 0.8264 | 9.8 |
| Patch now | RHSA-2026:13537 thunderbird on RHEL 8 |
May 15, 2026 | 26 | KEV1 | 0.8264 | 9.8 |
Patch Tuesday, month by month
CVEs Microsoft released on each Patch Tuesday, counted by original release date and excluding Azure Linux, the same way the industry trackers count. Select a bar to see that month above.
Microsoft CVEs per Patch Tuesday
Oct 2026: 1,420 CVEs in 51 security updates
Show as a table
| Month | CVEs | Critical | Security updates | Exploited at release | Write-up |
|---|---|---|---|---|---|
| Oct 2026 | 1,420 | 80 | 51 | 1 | Read |
| Sep 2026 | 1,004 | 113 | 57 | 2 | Read |
| Aug 2026 | 710 | 84 | 58 | 1 | Read |
| Jul 2026 | 574 | 57 | 56 | 3 | Read |
| Jun 2026 | 246 | 30 | 28 | 0 | Read |
| May 2026 | 114 | 15 | 40 | 0 | Read |
| Apr 2026 | 176 | 7 | 50 | 2 | Read |
| Mar 2026 | 78 | 3 | 39 | 0 | Read |
| Feb 2026 | 53 | 2 | 29 | 6 | Read |
| Jan 2026 | 116 | 8 | 26 | 1 | Read |
| Dec 2025 | 72 | 0 | 29 | 1 | Read |
| Nov 2025 | 64 | 4 | 31 | 1 | None |
Third-party apps
Apps with vulnerabilities published, or added to CISA's Known Exploited Vulnerabilities catalog, in the last 90 days. Most urgent first. Updating to the latest version covers every vulnerability counted here.
Most affected Windows apps
Last 90 days, distinct CVEs by priority
Patch nowUrgentHighRoutine
Most affected macOS apps
Last 90 days, distinct CVEs by priority
Patch nowUrgentHighRoutine
Windows apps
All Windows app fixesThe 50 most urgent of 488 apps.
macOS apps
13 apps.
| Priority | App | Latest version | CVEs | Exploited | Max EPSS | Max CVSS | Most urgent fix |
|---|---|---|---|---|---|---|---|
| Patch now | Microsoft Edge Microsoft |
157.0.4341.42 | 1,239 | KEV3 | 0.0981 | 9.8 | Microsoft Edge 154.0.4258.62 |
| Patch now | Google Chrome Google |
157.0.8103.39 | 1,442 | KEV2 | 0.0351 | 9.8 | Google Chrome 153.0.8010.37 |
| Urgent | Microsoft Visual Studio Code Microsoft |
1.145.1 | 30 | None | 0.0106 | 9.6 | Microsoft Visual Studio Code 1.133.0 |
| Urgent | Mozilla Thunderbird Mozilla |
159.0 | 236 | None | 0.0072 | 10.0 | Mozilla Thunderbird 154.0 |
| Urgent | Mozilla Firefox Mozilla |
159.0.1 | 230 | None | 0.0072 | 10.0 | Mozilla Firefox 153.5.0 |
| Urgent | PyCharm JetBrains |
2026.3 | 4 | None | 0.0029 | 9.0 | PyCharm 2026.2.4 |
| Urgent | WebStorm JetBrains |
2026.3 | 2 | None | 0.0029 | 9.0 | WebStorm 2026.2.4 |
| High | Docker Desktop Docker |
4.98.0 | 2 | None | 0.0044 | 7.8 | Docker Desktop 4.86.0 |
| High | VLC media player VideoLAN |
3.0.24 | 2 | None | 0.0024 | 7.3 | VLC media player 3.0.24 |
| High | Parallels Desktop Parallels |
27.1.0 | 1 | None | 0.0017 | 7.8 | Parallels Desktop 26.4.1 |
| Routine | Microsoft Defender Microsoft |
101.26092.0012 | 1 | None | 0.0048 | 5.5 | Microsoft Defender 101.26042.0020 |
| Routine | OneDrive Microsoft |
26.189.0928 | 1 | None | 0.0039 | 6.7 | OneDrive 26.098.0524 |
| Routine | KeePassXC KeePassXC |
2.8.0 | 2 | None | 0.0014 | 4.3 | KeePassXC 2.8.0 |
All fixes
One row per thing you install: a Microsoft KB, an app version, a macOS update or a Linux advisory. Sorted by priority, then by exploited CVEs closed, then by highest EPSS.
| Priority | Fix | Platform | Released | CVEs | Exploited | Max EPSS | Max CVSS |
|---|---|---|---|---|---|---|---|
| Patch now | Google Chrome 156.0.8078.80
Google Chrome |
Windows apps | Oct 29, 2026 | 204 | KEV4 | 0.5496 | 9.8 |
| Patch now | Google Chrome Beta 158.0.8127.2
Google Chrome Beta |
Windows apps | Oct 28, 2026 | 201 | KEV4 | 0.5496 | 9.8 |
| Patch now | Google Chrome Dev 159.0.8130.0
Google Chrome Dev |
Windows apps | Oct 30, 2026 | 174 | KEV3 | 0.1374 | 9.8 |
| Patch now | RHSA-2026:87080
apcu-panel, libzip, libzip-devel and 34 more on RHEL 8 |
Linux | Oct 24, 2026 | 12 | KEV2 | 1.0000 | 9.8 |
| Patch now | RHSA-2026:87071
php8.4 on RHEL 10 |
Linux | Oct 24, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RHSA-2026:87079
apcu-panel, php-pecl-apcu, php-pecl-apcu-devel and 4 more on RHEL 9 |
Linux | Oct 24, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RHSA-2026:87151
php, php-bcmath, php-cli and 22 more on RHEL 9 |
Linux | Oct 24, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RHSA-2026:87073
php-pecl-xdebug3 on RHEL 8 |
Linux | Oct 24, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RHSA-2026:88561
php on RHEL 10 |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | libapache2-mod-php8.3 8.3.6-0ubuntu0.24.04.13
libapache2-mod-php8.3 on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | libphp8.3-embed 8.3.6-0ubuntu0.24.04.13
libphp8.3-embed on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3 8.3.6-0ubuntu0.24.04.13
php8.3 on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-bcmath 8.3.6-0ubuntu0.24.04.13
php8.3-bcmath on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-bz2 8.3.6-0ubuntu0.24.04.13
php8.3-bz2 on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-cgi 8.3.6-0ubuntu0.24.04.13
php8.3-cgi on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-cli 8.3.6-0ubuntu0.24.04.13
php8.3-cli on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-common 8.3.6-0ubuntu0.24.04.13
php8.3-common on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-curl 8.3.6-0ubuntu0.24.04.13
php8.3-curl on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-dba 8.3.6-0ubuntu0.24.04.13
php8.3-dba on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-enchant 8.3.6-0ubuntu0.24.04.13
php8.3-enchant on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-fpm 8.3.6-0ubuntu0.24.04.13
php8.3-fpm on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-gd 8.3.6-0ubuntu0.24.04.13
php8.3-gd on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-gmp 8.3.6-0ubuntu0.24.04.13
php8.3-gmp on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-imap 8.3.6-0ubuntu0.24.04.13
php8.3-imap on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-interbase 8.3.6-0ubuntu0.24.04.13
php8.3-interbase on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
Showing 1 to 25 of 14,706
1Next
How priority is set
Four tiers with published rules, the same rules the Patchblox Vulnerability Hub uses. A fix takes the highest tier of any CVE it closes.
Patch now
Exploited in the wild: the vendor reports exploitation, or the CVE is in CISA's Known Exploited Vulnerabilities catalog.
Urgent
The vendor rates exploitation as more likely, or rates the CVE Critical.
High
CVSS 7.0 or higher, or rated High by the vendor when no CVSS score is published.
Routine
Everything else. Still worth installing on your normal schedule.
EPSS is shown as context and breaks ties within a tier. It does not move a CVE between tiers: a probability model should not outrank a confirmed exploitation report.
Where the data comes from
Microsoft Security Response CenterCVEs, KBs, affected products, exploitation and disclosure status
CISA Known Exploited VulnerabilitiesDate added, remediation due date, known ransomware use
FIRST EPSSExploit prediction scores and percentiles. EPSS data provided by FIRST.org
Apple security releasesmacOS updates, components and actively exploited flags
Linux distribution advisoriesDebian, Ubuntu, Red Hat and Fedora fixed package versions
Patchblox catalogWindows and macOS application versions and the CVEs each version fixes
This list is everyone's. Yours is shorter.
The tracker tells you what's exploited and what fixes it. Patchblox tells you which of your machines are still exposed, on every platform, and deploys the fix on Windows and Linux.
- Works from the Intune, Entra and Azure Update Manager data you already have
- Matches every installed app and OS build to the fix that closes its CVEs
- Deploys through rings with validation, then confirms the exposure closed