Patch Day

Vendor patch releases, newest first. The lead section is Microsoft's Patch Tuesday, the Microsoft Security Response Center (MSRC) monthly release: in it, every row is Microsoft's own record (product, MSRC severity, and MSRC's exploitation assessment), and every Common Vulnerabilities and Exposures (CVE) identifier opens Microsoft's update guide. Below it, Cross-vendor Patch Day carries the other vendors that publish a machine-readable link from a CVE to its fix: today Android, from the Android Open Source Project, and Cisco. Some vendors are absent because no such feed exists: SAP requires a support login, and Adobe, Fortinet, and Ivanti publish their advisories as web pages only. Expanding any row opens the same detail panel the vulnerabilities table uses, with Known Exploited Vulnerabilities (KEV), Exploit Prediction Scoring System (EPSS), exploit intelligence, and references. Microsoft releases first published outside the month's second Tuesday appear with an Out-of-band badge.