Patch Radar
August 2026 security updates: Microsoft Patch Tuesday, macOS and Linux
Microsoft's Patch Tuesday on August 11, 2026 fixed 710 CVEs (84 critical, 1 exploited at release) in 58 security updates. Apple released 4 macOS updates fixing 26 CVEs. The Linux distributions released 6,159 fixes for 7,283 CVEs. Every August 2026 security update, ranked by whether its vulnerabilities are being exploited.
Which of your machines are still exposed? Get a demo.
518
Exploited CVEs with a fix available
35
Added to CISA KEV in the last 30 days
179,476
Fixes tracked across four platforms
1,420
CVEs in October's Patch Tuesday
Looks up an exact CVE ID, a Microsoft KB number, or a Linux advisory ID (DSA, DLA, RHSA, RLSA, ALSA, ELSA, SUSE-SU, openSUSE-SU, FEDORA or ALAS2023), or searches product, update and vulnerability names. An exact ID goes straight to its page.
Updates by month
What Microsoft, Apple and the Linux distributions released in a calendar month. Each list is in priority order: exploited (KEV or vendor-confirmed) first, then by exploited CVEs closed, then by highest EPSS. Counts include every update released that month, supported products or not. Third-party apps follow below, by recent vulnerability.
Microsoft
58 updates
330 CVEs fixed, 18 closing exploited CVEs
macOS
4 updates
26 CVEs fixed, 3 closing exploited CVEs
Linux
6,159 fixes
7,283 CVEs fixed, 49 closing exploited CVEs
Microsoft
All Microsoft fixes for August 2026Patch Tuesday was August 11, 2026: 710 CVEs (84 critical) in 58 security updates, 1 exploited at release. Read the write-up
Most affected Microsoft products, August 2026
Distinct CVEs fixed by this month's updates, by priority. A CVE counts once per product, however many updates fix it.
Patch nowUrgentHighRoutine
Show as a table
| Product family | CVEs | Patch now | Urgent | High | Routine | Exploited | Most urgent fix |
|---|---|---|---|---|---|---|---|
| Windows Server | 206 | 1 | 40 | 105 | 60 | 1 | KB5120228 |
| Windows 11 | 190 | 1 | 28 | 108 | 53 | 1 | KB5121000 |
| Windows 10 | 160 | 1 | 28 | 85 | 46 | 1 | KB5120238 |
| Microsoft Office | 63 | 0 | 12 | 27 | 24 | 0 | KB5002901 |
| SharePoint Server | 29 | 1 | 5 | 11 | 12 | 1 | KB5002893 |
| .NET and Visual Studio | 12 | 0 | 0 | 11 | 1 | 0 | KB5120418 |
| Exchange Server | 7 | 0 | 1 | 3 | 3 | 0 | KB5121573 |
Families group every version of a product: all Windows 11 releases, all Office apps, all SQL Server versions. 7 products and families had a CVE fixed this month.
| Priority | Update | Type | Released | CVEs | Exploited | Max EPSS | Max CVSS |
|---|---|---|---|---|---|---|---|
| Patch now | KB5120228 Windows Server 2025, Windows Server 2025 (Server Core installation) |
ServicingStack | Aug 11, 2026 | 204 | KEV1 | 0.0857 | 9.8 |
| Patch now | KB5120233 Windows Server 2025, Windows Server 2025 (Server Core installation) |
Security | Aug 11, 2026 | 204 | KEV1 | 0.0857 | 9.8 |
| Patch now | KB5120229 Windows Server 2022, Windows Server 2022 (Server Core installation) |
ServicingStack | Aug 11, 2026 | 184 | KEV1 | 0.0857 | 9.8 |
| Patch now | KB5120242 Windows Server 2022, Windows Server 2022 (Server Core installation) |
ServicingStack | Aug 11, 2026 | 184 | KEV1 | 0.0857 | 9.8 |
| Patch now | KB5121000 Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems |
ServicingStack | Aug 11, 2026 | 183 | KEV1 | 0.0857 | 9.8 |
| Patch now | KB5120994 Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more |
ServicingStack | Aug 11, 2026 | 182 | KEV1 | 0.0857 | 9.8 |
| Patch now | KB5121003 Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more |
Security | Aug 11, 2026 | 182 | KEV1 | 0.0857 | 9.8 |
| Patch now | KB5120238 Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more |
Security | Aug 11, 2026 | 174 | KEV1 | 0.0857 | 9.8 |
| Patch now | KB5120418 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 and 5 more |
Security | Aug 11, 2026 | 162 | KEV1 | 0.0857 | 9.8 |
| Patch now | KB5120240 Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems |
ServicingStack | Aug 11, 2026 | 160 | KEV1 | 0.0857 | 9.8 |
| Patch now | KB5120249 Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more |
Security | Aug 11, 2026 | 150 | KEV1 | 0.0857 | 8.8 |
| Patch now | KB5120385 Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) |
Security | Aug 11, 2026 | 136 | KEV1 | 0.0857 | 9.8 |
| Patch now | KB5120386 Windows Server 2012, Windows Server 2012 (Server Core installation) |
Security | Aug 11, 2026 | 131 | KEV1 | 0.0857 | 9.8 |
| Patch now | KB5002893 Microsoft SharePoint Server Subscription Edition |
Security | Aug 11, 2026 | 29 | KEV1 | 0.0819 | 9.3 |
| Patch now | KB5002894 Microsoft SharePoint Server 2019 |
Security | Aug 11, 2026 | 26 | KEV1 | 0.0819 | 9.3 |
| Patch now | KB5002896 Microsoft SharePoint Server 2019 |
Security | Aug 11, 2026 | 25 | KEV1 | 0.0819 | 8.8 |
| Patch now | KB5002905 Microsoft SharePoint Enterprise Server 2016 |
Security | Aug 11, 2026 | 22 | KEV1 | 0.0819 | 9.3 |
| Patch now | KB5002906 Microsoft SharePoint Enterprise Server 2016 |
Security | Aug 11, 2026 | 21 | KEV1 | 0.0819 | 8.8 |
| Urgent | KB5121573 Microsoft Exchange Server Subscription Edition RTM |
Security | Aug 11, 2026 | 7 | None | 0.0198 | 8.8 |
| Urgent | KB5121574 Microsoft Exchange Server 2019 Cumulative Update 15 |
Security | Aug 11, 2026 | 7 | None | 0.0198 | 8.8 |
| Urgent | KB5121575 Microsoft Exchange Server 2019 Cumulative Update 14 |
Security | Aug 11, 2026 | 7 | None | 0.0198 | 8.8 |
| Urgent | KB5121576 Microsoft Exchange Server 2016 Cumulative Update 23 |
Security | Aug 11, 2026 | 7 | None | 0.0198 | 8.8 |
| Urgent | KB5002901 Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition) |
Security | Aug 11, 2026 | 17 | None | 0.0097 | 7.8 |
| Urgent | KB5002903 Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) |
Security | Aug 11, 2026 | 23 | None | 0.0092 | 8.8 |
| Urgent | KB5002755 Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition) |
Security | Aug 11, 2026 | 3 | None | 0.0082 | 8.8 |
| Urgent | KB5002897 Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) |
Security | Aug 11, 2026 | 12 | None | 0.0054 | 7.8 |
| Urgent | KB5002902 Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) |
Security | Aug 11, 2026 | 1 | None | 0.0047 | 7.8 |
| Urgent | KB5123303 Windows Server 2022, Windows Server 2022 (Server Core installation) |
Security | Aug 11, 2026 | 3 | None | 0.0033 | 7.9 |
| Urgent | KB5129241 Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more |
Security | Aug 11, 2026 | 1 | None | 0.0030 | 7.8 |
| High | KB5122104 .NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows |
Security | Aug 11, 2026 | 9 | None | 0.0123 | 7.8 |
| High | KB5122105 .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Windows |
Security | Aug 11, 2026 | 9 | None | 0.0123 | 7.8 |
| High | KB5122106 .NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Windows |
Security | Aug 11, 2026 | 7 | None | 0.0123 | 7.8 |
| High | KB5120747 Microsoft .NET Framework 3.5 on Windows 11 Version 26H1 for ARM64-based Systems, Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems |
Security | Aug 11, 2026 | 5 | None | 0.0078 | 8.8 |
| High | KB5120698 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems and 2 more |
Security | Aug 11, 2026 | 4 | None | 0.0078 | 8.8 |
| High | KB5120703 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems and 2 more |
Security | Aug 11, 2026 | 4 | None | 0.0078 | 8.8 |
| High | KB5120711 Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems, Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems |
Security | Aug 11, 2026 | 4 | None | 0.0078 | 8.8 |
| High | KB5120695 Microsoft .NET Framework 3.5 on Windows Server 2012 R2, Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation) |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120699 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation) |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120700 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation) |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120701 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems and 3 more |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120702 Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016 and 1 more |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120704 Microsoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation) |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120705 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation) |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120706 Microsoft .NET Framework 4.8 on Windows Server 2012 R2, Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation) |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120708 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 and 1 more |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120709 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems and 3 more |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120710 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120713 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120714 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 (Server Core installation) |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5120716 Microsoft .NET Framework 3.5 on Windows Server 2012, Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation) |
Security | Aug 11, 2026 | 3 | None | 0.0078 | 8.8 |
| High | KB5002832 Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition) |
Security | Aug 11, 2026 | 5 | None | 0.0047 | 7.8 |
| High | KB5002791 Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) |
Security | Aug 11, 2026 | 1 | None | 0.0047 | 7.8 |
| High | KB5002795 Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) |
Security | Aug 11, 2026 | 1 | None | 0.0047 | 7.8 |
| High | KB5002813 Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition) |
Security | Aug 11, 2026 | 1 | None | 0.0047 | 7.8 |
| High | KB5002900 Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) |
Security | Aug 11, 2026 | 1 | None | 0.0047 | 7.8 |
| High | KB5123273 Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more |
Security | Aug 11, 2026 | 1 | None | 0.0019 | 7.9 |
| High | KB5123607 Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more |
Security | Aug 11, 2026 | 1 | None | 0.0019 | 7.9 |
| Routine | KB5002899 Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition) |
Security | Aug 11, 2026 | 1 | None | 0.0044 | 5.5 |
macOS
| Priority | Apple update | Released | CVEs | Exploited | Max EPSS | Max CVSS |
|---|---|---|---|---|---|---|
| Patch now | Sequoia 15.7.9 Sequoia |
Aug 6, 2026 | 1 | KEV1 | 0.0172 | 9.8 |
| Patch now | Sonoma 14.8.9 Sonoma |
Aug 6, 2026 | 1 | KEV1 | 0.0172 | 9.8 |
| Patch now | Tahoe 26.6.1 Tahoe |
Aug 6, 2026 | 1 | KEV1 | 0.0172 | 9.8 |
| High | Tahoe 26.6.2 Tahoe |
Aug 17, 2026 | 25 | None | 0.0069 | 9.6 |
| Distribution | Fixes | CVEs fixed | Closing exploited CVEs | Patch now |
|---|---|---|---|---|
 Debian |
3,040 | 3,040 | ||
 Ubuntu |
1,587 | 283 | ||
 Oracle Linux |
277 | 857 | 38 | 38 |
 Red Hat |
260 | 811 | 1 | 1 |
 Rocky Linux |
246 | 358 | ||
 AlmaLinux |
239 | 361 | ||
| SUSE Linux Enterprise | 223 | 1,764 | 4 | 4 |
 Amazon Linux |
132 | 1,078 | ||
 openSUSE Leap |
113 | 3,315 | 6 | 6 |
 Fedora |
42 | 64 |
Each row counts a CVE once for that distribution. The Linux total above counts it once overall, so a CVE fixed by more than one distribution makes the rows add up to more than the total.
Highest priority this month
| Priority | Fix | Released | CVEs | Exploited | Max EPSS | Max CVSS |
|---|---|---|---|---|---|---|
| Patch now | OPENSUSE-SU-2026:20460-1 chromium on opensuse-leap 16.0 |
Aug 31, 2026 | 86 | KEV3 | 0.1374 | 9.6 |
| Patch now | OPENSUSE-SU-2026:21555-1 dtb-aarch64, kernel-64kb, kernel-azure and 10 more on opensuse-leap 16.0 |
Aug 12, 2026 | 891 | KEV2 | 0.9811 | 10.0 |
| Patch now | SUSE-SU-2026:23237-1 kernel-default on sles 16.0 |
Aug 11, 2026 | 891 | KEV2 | 0.9811 | 10.0 |
| Patch now | SUSE-SU-2026:23231-1 kernel-64kb, kernel-azure, kernel-default-base and 6 more on sles 16.0 |
Aug 11, 2026 | 891 | KEV2 | 0.9811 | 10.0 |
| Patch now | SUSE-SU-2026:3790-1 kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7 |
Aug 25, 2026 | 268 | KEV1 | 0.9811 | 10.0 |
| Patch now | SUSE-SU-2026:3810-1 kernel-livepatch-SLE15-SP7-RT_Update_19 on sles 15.7 |
Aug 26, 2026 | 267 | KEV1 | 0.9811 | 10.0 |
| Patch now | OPENSUSE-SU-2026:20020-1 chromium on opensuse-leap 16.0 |
Aug 31, 2026 | 19 | KEV1 | 0.5533 | 8.8 |
| Patch now | OPENSUSE-SU-2026:20332-1 chromium on opensuse-leap 16.0 |
Aug 31, 2026 | 28 | KEV1 | 0.5496 | 9.8 |
| Patch now | OPENSUSE-SU-2025:20076-1 chromium on opensuse-leap 16.0 |
Aug 31, 2026 | 28 | KEV1 | 0.0808 | 9.8 |
| Patch now | RHSA-2026:69098 webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc and 1 more on RHEL 9 |
Aug 22, 2026 | 228 | KEV1 | 0.0742 | 9.6 |
Patch Tuesday, month by month
CVEs Microsoft released on each Patch Tuesday, counted by original release date and excluding Azure Linux, the same way the industry trackers count. Select a bar to see that month above.
Microsoft CVEs per Patch Tuesday
Oct 2026: 1,420 CVEs in 51 security updates
Show as a table
| Month | CVEs | Critical | Security updates | Exploited at release | Write-up |
|---|---|---|---|---|---|
| Oct 2026 | 1,420 | 80 | 51 | 1 | Read |
| Sep 2026 | 1,004 | 113 | 57 | 2 | Read |
| Aug 2026 | 710 | 84 | 58 | 1 | Read |
| Jul 2026 | 574 | 57 | 56 | 3 | Read |
| Jun 2026 | 246 | 30 | 28 | 0 | Read |
| May 2026 | 114 | 15 | 40 | 0 | Read |
| Apr 2026 | 176 | 7 | 50 | 2 | Read |
| Mar 2026 | 78 | 3 | 39 | 0 | Read |
| Feb 2026 | 53 | 2 | 29 | 6 | Read |
| Jan 2026 | 116 | 8 | 26 | 1 | Read |
| Dec 2025 | 72 | 0 | 29 | 1 | Read |
| Nov 2025 | 64 | 4 | 31 | 1 | None |
Third-party apps
Apps with vulnerabilities published, or added to CISA's Known Exploited Vulnerabilities catalog, in the last 90 days, most urgent first. Install the latest version: it fixes every vulnerability counted here. "First fixed in" is the oldest version that closes the most urgent one, so you can tell whether a machine on an older build is still exposed to it.
Most affected Windows apps
Last 90 days, distinct CVEs by priority
Patch nowUrgentHighRoutine
Most affected macOS apps
Last 90 days, distinct CVEs by priority
Patch nowUrgentHighRoutine
Windows apps
All Windows app fixesThe 50 most urgent of 488 apps.
| Priority | App | Latest version | CVEs | Exploited | Max EPSS | Max CVSS | First fixed in |
|---|---|---|---|---|---|---|---|
| Patch now | Microsoft Edge Microsoft |
156.0.4314.58 | 1,279 | KEV3 | 0.0981 | 9.8 | 154.0.4258.62 |
| Patch now | Microsoft Edge Beta Microsoft |
158.0.4370.7 | 1,279 | KEV3 | 0.0981 | 9.8 | 127.0.2651.8 |
| Patch now | Microsoft Edge Dev Microsoft |
159.0.4378.0 | 1,279 | KEV3 | 0.0981 | 9.8 | 152.0.4167.0 |
| Patch now | Microsoft Edge WebView2 Runtime Microsoft |
157.0.4341.42 | 1,273 | KEV3 | 0.0981 | 9.8 | 154.0.4258.62 |
| Patch now | Google Chrome Beta (EXE) Google |
158.0.8127.18 | 1,487 | KEV2 | 0.0351 | 9.8 | 154.0.8037.0 |
| Patch now | Google Chrome (EXE) Google |
157.0.8103.39 | 1,477 | KEV2 | 0.0351 | 9.8 | 153.0.8010.37 |
| Patch now | Google Chrome Dev (EXE) Google |
159.0.8144.0 | 1,477 | KEV2 | 0.0351 | 9.8 | 154.0.8013.2 |
| Urgent | Microsoft .NET Windows Desktop Runtime 8.0 Microsoft |
8.0.33 | 34 | None | 0.0166 | 9.8 | 8.0.32 |
| Urgent | Microsoft .NET Windows Desktop Runtime 10.0 Microsoft |
10.0.14 | 27 | None | 0.0166 | 9.8 | 10.0.14 |
| Urgent | Microsoft ASP.NET Core Hosting Bundle 10.0 Microsoft |
10.0.14 | 27 | None | 0.0166 | 9.8 | 10.0.14 |
| Urgent | Microsoft .NET Windows Desktop Runtime 9.0 Microsoft |
9.0.22 | 26 | None | 0.0166 | 9.8 | 9.0.21 |
| Urgent | Microsoft ASP.NET Core Hosting Bundle 9.0 Microsoft |
9.0.22 | 26 | None | 0.0166 | 9.8 | 9.0.21 |
| Urgent | Microsoft ASP.NET Core Hosting Bundle 8.0 Microsoft |
8.0.33 | 23 | None | 0.0166 | 9.8 | 8.0.32 |
| Urgent | Microsoft Visual Studio Code Microsoft |
1.143.1 | 30 | None | 0.0106 | 9.6 | 1.134.0 |
| Urgent | Microsoft SQL Server Management Studio 22 Microsoft |
22.11.3 | 1 | None | 0.0086 | 9.6 | 22.8.2 |
| Urgent | Python 3.14 Python Software Foundation |
3.14.10 | 10 | None | 0.0073 | 9.4 | 3.14.8 |
| Urgent | Python 3.13 Python Software Foundation |
3.13.17 | 8 | None | 0.0073 | 9.2 | 3.13.16 |
| Urgent | Mozilla Thunderbird (af) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (ar) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (ast) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (be) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (bg) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (br) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (ca) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (cak) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (cs) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (cy) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (da) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (de) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (dsb) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (el) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (en-CA) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (en-GB) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (en-US) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (es-AR) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (es-ES) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (es-MX) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (et) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (eu) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (fi) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (fr) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (fy-NL) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (ga-IE) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (gd) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (gl) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (he) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (hr) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (hsb) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (hu) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
| Urgent | Mozilla Thunderbird (hy-AM) Mozilla |
159.0 | 240 | None | 0.0072 | 10.0 | 141.0 |
macOS apps
13 apps.
| Priority | App | Latest version | CVEs | Exploited | Max EPSS | Max CVSS | First fixed in |
|---|---|---|---|---|---|---|---|
| Patch now | Microsoft Edge Microsoft |
157.0.4341.42 | 1,239 | KEV3 | 0.0981 | 9.8 | 154.0.4258.62 |
| Patch now | Google Chrome Google |
157.0.8103.39 | 1,442 | KEV2 | 0.0351 | 9.8 | 153.0.8010.37 |
| Urgent | Microsoft Visual Studio Code Microsoft |
1.145.2 | 30 | None | 0.0106 | 9.6 | 1.133.0 |
| Urgent | Mozilla Thunderbird Mozilla |
159.0 | 236 | None | 0.0072 | 10.0 | 154.0 |
| Urgent | Mozilla Firefox Mozilla |
159.0.1 | 230 | None | 0.0072 | 10.0 | 153.5.0 |
| Urgent | PyCharm JetBrains |
2026.3 | 4 | None | 0.0029 | 9.0 | 2026.2.4 |
| Urgent | WebStorm JetBrains |
2026.3 | 2 | None | 0.0029 | 9.0 | 2026.2.4 |
| High | Docker Desktop Docker |
4.98.0 | 2 | None | 0.0044 | 8.8 | 4.86.0 |
| High | VLC media player VideoLAN |
3.0.24 | 2 | None | 0.0024 | 7.3 | 3.0.24 |
| High | Parallels Desktop Parallels |
27.1.0 | 1 | None | 0.0017 | 7.8 | 26.4.1 |
| Routine | Microsoft Defender Microsoft |
101.26092.0012 | 1 | None | 0.0048 | 5.5 | 101.26042.0020 |
| Routine | OneDrive Microsoft |
26.189.0928 | 1 | None | 0.0039 | 6.7 | 26.098.0524 |
| Routine | KeePassXC KeePassXC |
2.8.0 | 2 | None | 0.0014 | 4.3 | 2.8.0 |
All fixes
One row per thing you install: a Microsoft KB, an app version, a macOS update or a Linux advisory. Sorted by priority, then by exploited CVEs closed, then by highest EPSS. Showing fixes released in the last 90 days; pick another range under Released.
| Priority | Fix | Platform | Released | CVEs | Exploited | Max EPSS | Max CVSS |
|---|---|---|---|---|---|---|---|
| Patch now | Google Chrome 156.0.8078.80
Google Chrome |
Windows apps | Oct 29, 2026 | 204 | KEV4 | 0.5496 | 9.8 |
| Patch now | Google Chrome Beta 158.0.8127.2
Google Chrome Beta |
Windows apps | Oct 28, 2026 | 201 | KEV4 | 0.5496 | 9.8 |
| Patch now | Google Chrome Dev 159.0.8130.0
Google Chrome Dev |
Windows apps | Oct 30, 2026 | 174 | KEV3 | 0.1374 | 9.8 |
| Patch now | OPENSUSE-SU-2026:20460-1
chromium on opensuse-leap 16.0 |
Linux | Aug 31, 2026 | 86 | KEV3 | 0.1374 | 9.6 |
| Patch now | ELSA-2026-87080
apcu-panel, libzip, libzip-devel and 34 more on ol 8 |
Linux | Nov 7, 2026 | 12 | KEV2 | 1.0000 | 9.8 |
| Patch now | SUSE-SU-2026:4853-1
apache2-mod_php7, php7, php7-embed and 3 more on sles 15.6, sles 15.7 |
Linux | Nov 7, 2026 | 12 | KEV2 | 1.0000 | 9.8 |
| Patch now | ALSA-2026:87080
apcu-panel, libzip, libzip-devel and 34 more on almalinux 8 |
Linux | Nov 7, 2026 | 12 | KEV2 | 1.0000 | 9.8 |
| Patch now | RLSA-2026:87080
libzip, php, php-pear and 4 more on rocky 8 |
Linux | Nov 7, 2026 | 12 | KEV2 | 1.0000 | 9.8 |
| Patch now | RHSA-2026:87080
apcu-panel, libzip, libzip-devel and 34 more on RHEL 8 |
Linux | Oct 24, 2026 | 12 | KEV2 | 1.0000 | 9.8 |
| Patch now | FEDORA-2026-D5F8446449
php, php-bcmath, php-bcmath-debuginfo and 55 more on Fedora 43 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | ELSA-2026-87070
php, php-bcmath, php-cli and 22 more on ol 10 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | ELSA-2026-87071
php8.4, php8.4-bcmath, php8.4-cli and 22 more on ol 10 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | ELSA-2026-87079
apcu-panel, php-pecl-apcu, php-pecl-apcu-devel and 4 more on ol 9 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | ELSA-2026-87151
php, php-bcmath, php-cli and 22 more on ol 9 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | ELSA-2026-87073
php-pecl-xdebug3 on ol 8 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | ALSA-2026:87079
apcu-panel, php-pecl-apcu, php-pecl-apcu-devel and 4 more on almalinux 9 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | ALSA-2026:87073
php-pecl-xdebug3 on almalinux 8 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | ALSA-2026:87070
php, php-bcmath, php-cli and 22 more on almalinux 10 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | ALSA-2026:87071
php8.4, php8.4-bcmath, php8.4-cli and 21 more on almalinux 10 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RLSA-2026:87079
php-pecl-apcu, php-pecl-redis6, php-pecl-rrd and 2 more on rocky 9 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RLSA-2026:87151
php on rocky 9 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RLSA-2026:87070
php on rocky 10 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RLSA-2026:87071
php8.4 on rocky 10 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RLSA-2026:87073
libzip, php, php-pear and 4 more on rocky 8 |
Linux | Nov 7, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RHSA-2026:87071
php8.4 on RHEL 10 |
Linux | Oct 24, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
Showing 1 to 25 of 20,324 fixes released in the last 90 days
1Next
How priority is set
Four tiers with published rules, the same rules the Patchblox Vulnerability Hub uses. A fix takes the highest tier of any CVE it closes.
Patch now
Exploited in the wild: the vendor reports exploitation, or the CVE is in CISA's Known Exploited Vulnerabilities catalog.
Urgent
The vendor rates exploitation as more likely, or rates the CVE Critical.
High
CVSS 7.0 or higher, or rated High by the vendor when no CVSS score is published.
Routine
Everything else. Still worth installing on your normal schedule.
EPSS is shown as context and breaks ties within a tier. It does not move a CVE between tiers: a probability model should not outrank a confirmed exploitation report.
Where the data comes from
Microsoft Security Response CenterCVEs, KBs, affected products, exploitation and disclosure status
CISA Known Exploited VulnerabilitiesDate added, remediation due date, known ransomware use
FIRST EPSSExploit prediction scores and percentiles. EPSS data provided by FIRST.org
Apple security releasesmacOS updates, components and actively exploited flags
Linux distribution advisoriesDebian, Ubuntu, Red Hat, Rocky Linux, AlmaLinux, Oracle Linux, SUSE Linux Enterprise, openSUSE Leap, Fedora and Amazon Linux fixed package versions
Patchblox catalogWindows and macOS application versions and the CVEs each version fixes
For tools and AI agents
Every Patch Radar page also comes as Markdown and JSON, with the same data as the page. Each CVE, fix and product page links its own versions.
Overviewpatch-radar.md: Patch Now, the months covered, Patch Tuesday totals and the most urgent apps
Guide for AI agentsllms.txt: the URL pattern for every CVE, fix, product and month file
Every pageSitemap: every CVE, fix, product and month page
This list is everyone's. Yours is shorter.
The tracker tells you what's exploited and what fixes it. Patchblox tells you which of your machines are still exposed, on every platform, and deploys the fix on Windows and Linux.
- Works from the Intune, Entra and Azure Update Manager data you already have
- Matches every installed app and OS build to the fix that closes its CVEs
- Deploys through rings with validation, then confirms the exposure closed
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.