State now. Changed: 0 tier promotions, +4 known-exploited vulnerability additions, 27 leak-site claims, and 0 confirmed breaches since yesterday.
Why today matters · Vendor patch cadence
Patch Day archive
Start with the month, not a maze of menus. Each card shows the patch activity returned for this build, which vendors contributed, and the strongest exploitation signals. Open one to browse those records in stable, server-rendered pages.
Why now: September 2026 is the newest patch month in this site build.
What changed
This page does not publish a page-specific change count. Open the daily comparison for material tracker changes, then start with the newest vendor patch month below.
Details
The summary names this build's complete set, and each month shows its vendor mix and strongest exploitation signals.
41,778Patch Day records in this site build
14months in this site build
9,734records also tracked in the vulnerability table
August 2026busiest month in this site build
Validated coverage. All returned records from the validated Microsoft, Red Hat, Cisco and Android exports are available in the built month pages. Ordinary next-page links work without JavaScript.
Newest
4,267 patch records in this monthSeptember 2026
Period: Month to date through 2026-09-12 21:29 UTC229 critical-severity records in this month2 records with Microsoft exploitation detected in this month4 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month1,579 records also tracked in the vulnerability table this month
Red Hat: 2,756 records in this monthMicrosoft: 1,228 records in this monthAndroid: 271 records in this monthCisco: 12 records in this month
Take me to September 2026’s vulnerabilities Busiest
9,232 patch records in this monthAugust 2026
433 critical-severity records in this month1 records with Microsoft exploitation detected in this month2 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month2,812 records also tracked in the vulnerability table this month
Red Hat: 6,354 records in this monthMicrosoft: 2,831 records in this monthCisco: 46 records in this monthAndroid: 1 records in this month
Take me to August 2026’s vulnerabilities Patch month
7,361 patch records in this monthJuly 2026
210 critical-severity records in this month3 records with Microsoft exploitation detected in this month6 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month2,253 records also tracked in the vulnerability table this month
Red Hat: 5,188 records in this monthMicrosoft: 2,157 records in this monthCisco: 16 records in this month
Take me to July 2026’s vulnerabilities Patch month
5,840 patch records in this monthJune 2026
263 critical-severity records in this month0 records with Microsoft exploitation detected in this month1 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month939 records also tracked in the vulnerability table this month
Red Hat: 4,401 records in this monthMicrosoft: 1,285 records in this monthAndroid: 144 records in this monthCisco: 10 records in this month
Take me to June 2026’s vulnerabilities Patch month
4,951 patch records in this monthMay 2026
154 critical-severity records in this month3 records with Microsoft exploitation detected in this month4 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month702 records also tracked in the vulnerability table this month
Red Hat: 3,802 records in this monthMicrosoft: 1,129 records in this monthCisco: 19 records in this monthAndroid: 1 records in this month
Take me to May 2026’s vulnerabilities Patch month
4,656 patch records in this monthApril 2026
142 critical-severity records in this month2 records with Microsoft exploitation detected in this month6 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month393 records also tracked in the vulnerability table this month
Red Hat: 3,882 records in this monthMicrosoft: 738 records in this monthCisco: 31 records in this monthAndroid: 5 records in this month
Take me to April 2026’s vulnerabilities Patch month
3,314 patch records in this monthMarch 2026
78 critical-severity records in this month0 records with Microsoft exploitation detected in this month2 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month201 records also tracked in the vulnerability table this month
Red Hat: 2,647 records in this monthMicrosoft: 462 records in this monthAndroid: 136 records in this monthCisco: 69 records in this month
Take me to March 2026’s vulnerabilities Patch month
193 patch records in this monthFebruary 2026
15 critical-severity records in this month6 records with Microsoft exploitation detected in this month7 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month84 records also tracked in the vulnerability table this month
Microsoft: 172 records in this monthCisco: 20 records in this monthAndroid: 1 records in this month
Take me to February 2026’s vulnerabilities Patch month
315 patch records in this monthJanuary 2026
30 critical-severity records in this month2 records with Microsoft exploitation detected in this month3 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month139 records also tracked in the vulnerability table this month
Microsoft: 315 records in this month
Take me to January 2026’s vulnerabilities Patch month
349 patch records in this monthDecember 2025
15 critical-severity records in this month1 records with Microsoft exploitation detected in this month2 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month83 records also tracked in the vulnerability table this month
Microsoft: 349 records in this month
Take me to December 2025’s vulnerabilities Patch month
184 patch records in this monthNovember 2025
14 critical-severity records in this month1 records with Microsoft exploitation detected in this month3 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month81 records also tracked in the vulnerability table this month
Microsoft: 184 records in this month
Take me to November 2025’s vulnerabilities Patch month
429 patch records in this monthOctober 2025
41 critical-severity records in this month3 records with Microsoft exploitation detected in this month4 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month224 records also tracked in the vulnerability table this month
Microsoft: 429 records in this month
Take me to October 2025’s vulnerabilities Patch month
401 patch records in this monthSeptember 2025
15 critical-severity records in this month0 records with Microsoft exploitation detected in this month2 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month110 records also tracked in the vulnerability table this month
Microsoft: 401 records in this month
Take me to September 2025’s vulnerabilities Patch month
286 patch records in this monthAugust 2025
21 critical-severity records in this month0 records with Microsoft exploitation detected in this month0 Microsoft records in the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog this month134 records also tracked in the vulnerability table this month
Microsoft: 286 records in this month
Take me to August 2025’s vulnerabilities Vendor coverage
What the archive covers, and why some vendors are absent.
- MicrosoftCoveredPatch Tuesday: the Microsoft Security Response Center monthly release, tracked in depth on this page.
- AndroidCoveredGoogle Android Security Bulletins via the OSV feed. The fix commit is the CVE-to-patch link; severity is Android's qualitative rating (no CVSS).
- CiscoCoveredCisco public CSAF 2.0 advisories: per-CVE CVSS, a Security Impact Rating, and vendor-fix remediation links.
- Red HatCoveredRed Hat CSAF 2.0 security advisories (RHSA/RHBA/RHEA): a per-CVE CVSS base score where the advisory publishes one (v3 or v4), else Red Hat's own document severity, plus vendor-fix remediation links. CC BY 4.0, attributed to Red Hat, Inc. 29030 of 29030 row(s) carry a link to the original advisory (a document that publishes no self reference carries none).
- SAPNo machine-readable feedSAP Security Patch Day notes list the CVEs, but the patch detail (the Note that maps a CVE to its fix) requires an S-user support login. No anonymous machine-readable CVE-to-patch mapping exists.
- AdobeNo machine-readable feedAdobe publishes security bulletins (APSB) as HTML pages only, with no structured feed and no machine-readable CVE-to-patch mapping.
- FortinetNo machine-readable feedFortiGuard PSIRT advisories are HTML and RSS only, with no CSAF or JSON feed carrying a machine-readable CVE-to-fixed-version mapping.
- IvantiNo machine-readable feedIvanti security advisories are HTML only, with no structured feed and no machine-readable CVE-to-patch mapping.
Cross-vendor sources and licences
- Android Google Android Security Bulletins (via OSV) via feedAdvisory data under the Android Open Source Project (Apache 2.0); OSV feed CC-BY 4.0.
- Cisco Cisco Security Advisories (CSAF 2.0)Cisco Security Vulnerability Policy; CSAF documents published credential-free.
- Red Hat Red Hat Security Data (CSAF 2.0 advisories)CC BY 4.0, per Red Hat's own CSAF document legal_disclaimer; requires attribution to Red Hat, Inc. and a link to the original advisory.
Full obligations and source details are on the attributions page.
How this is computed
The archive groups source-returned vendor patch records by month. Counts describe this site build, tracked totals identify records also present in the vulnerability table, and source obligations remain listed above.
Method reviewed on .