{
 "schema_version": "1.0",
 "site": "https://patchgap.ai/",
 "generated_at": "2026-11-07T16:04:48Z",
 "last_checked": "2026-11-07T16:04:48+00:00",
 "agent_instructions": "You are my morning security checker, and you can run read-only checks on this computer. Every run (including the first): 1) Read https://patchgap.ai/status.json (tiny). Note its feed_version and last_checked. 2) Read https://patchgap.ai/today.json (small digest of what matters now; plain text copy at https://patchgap.ai/today.txt). 3) Read https://patchgap.ai/windows.json if this is a Windows PC or https://patchgap.ai/mac.json if it is a Mac. It lists each app, its minimum safe version, a read-only version-check command and the menu path. You never need https://patchgap.ai/feed.json; only open one item's json_url if you need more detail. Check which of those apps are installed and what version each one is, using only the read-only commands from those files or each app's About menu. Then tell me in plain English what I need to update, why, and the exact steps, with the official link from the files. Put anything marked being attacked now or no patch yet first. Check feed freshness and the applicable release channel. Missing or stale version information means unknown, not safe. After an approved update and any required restart, recheck the installed version before marking the fix verified. Remember the feed_version and the time you checked for next time. Do not install, update, uninstall or change anything without asking me first. Only use the official links from these files. If you are not sure whether I am affected, say so. Always reply with a report, even if it is just \"nothing new today\". If a file fails to load, name the file and the error in your report and continue with the others.",
 "agent_rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "counts": {
  "incidents": 53,
  "exploited_in_wild": 34,
  "no_patch": 2,
  "partial": 3,
  "patched": 48,
  "products": 24
 },
 "incidents": [
  {
   "id": "fearless-wallet-extension-leaks-private-keys",
   "url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys/",
   "path": "/incidents/fearless-wallet-extension-leaks-private-keys/",
   "json_url": "https://patchgap.ai/incidents/fearless-wallet-extension-leaks-private-keys.json",
   "title": "Fearless Wallet browser add-on stole users' wallet keys. There is no safe version.",
   "category": "wallets",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "fearless-wallet-extension"
   ],
   "status": "no-patch",
   "status_label": "No patch yet",
   "severity": "critical",
   "severity_source": "Rated by us as critical: the add-on sent secret wallet keys to attackers. No official score.",
   "exploited_in_wild": "yes",
   "exploited_note": "The Polkadot Community Foundation says 8 users reported stolen coins (17,286 DOT).",
   "exploited_source_url": "https://forum.polkadot.network/t/security-notice-fearless-wallet-browser-extension-leaked-private-keys/19058",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-21",
   "updated_at": "2026-10-27",
   "cves": [],
   "summary": "Fearless Wallet is a browser add-on for storing Polkadot coins. It is not an official Polkadot wallet. The Polkadot Community Foundation says some versions secretly sent your wallet's secret key to a thief's server when you unlocked the wallet. Hackers have already taken coins. Deleting the add-on or changing your password does not help. You have to move your money to a new wallet.",
   "am_i_affected": "You are affected if you used the Fearless Wallet add-on in Chrome (or Firefox) at any time since February 2025. Open chrome://extensions to see if it is installed. Versions 3.0.1, 3.0.3, 3.0.4 and 3.0.5 are named in the notice. The Fearless phone apps were not found to have the bad code.",
   "action": "Fearless Wallet add-on: move your coins to a new wallet now",
   "affected": [
    {
     "product": "fearless-wallet-extension",
     "product_name": "Fearless Wallet browser extension",
     "platform": "windows",
     "affected_versions": "Browser add-on versions 3.0.1, 3.0.3, 3.0.4 and 3.0.5 (Chrome confirmed; Firefox build uses the same code)",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "No safe version exists.",
     "fixed_source_urls": [
      "https://forum.polkadot.network/t/security-notice-fearless-wallet-browser-extension-leaked-private-keys/19058"
     ],
     "check": {
      "menu_path": "In Chrome, open chrome://extensions and look for Fearless Wallet. Click Details to see the version. In Firefox, open about:addons.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": null
    },
    {
     "product": "fearless-wallet-extension",
     "product_name": "Fearless Wallet browser extension",
     "platform": "macos",
     "affected_versions": "Browser add-on versions 3.0.1, 3.0.3, 3.0.4 and 3.0.5 (Chrome confirmed; Firefox build uses the same code)",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "No safe version exists.",
     "fixed_source_urls": [
      "https://forum.polkadot.network/t/security-notice-fearless-wallet-browser-extension-leaked-private-keys/19058"
     ],
     "check": {
      "menu_path": "In Chrome, open chrome://extensions and look for Fearless Wallet. Click Details to see the version. In Firefox, open about:addons.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": null
    },
    {
     "product": "fearless-wallet-extension",
     "product_name": "Fearless Wallet browser extension",
     "platform": "linux",
     "affected_versions": "Browser add-on versions 3.0.1, 3.0.3, 3.0.4 and 3.0.5 (Chrome confirmed; Firefox build uses the same code)",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "No safe version exists.",
     "fixed_source_urls": [
      "https://forum.polkadot.network/t/security-notice-fearless-wallet-browser-extension-leaked-private-keys/19058"
     ],
     "check": {
      "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": null
    }
   ],
   "fix_steps": [
    "Make a NEW wallet in a different, trusted wallet app. Do not use Fearless for this. Foundation suggests Nova Wallet.",
    "Move your coins from the old account to the new one as soon as you can. Check every network the old account used.",
    "Do NOT unlock the Fearless add-on again if you can avoid it. If you need to move coins, use the recovery phrase in another wallet app.",
    "If your coins are staked or locked, follow the foundation's notice for steps.",
    "Ignore anyone who messages you offering to 'recover' your coins. They are scammers."
   ],
   "official_patch_links": [
    {
     "label": "Polkadot Community Foundation notice",
     "url": "https://forum.polkadot.network/t/security-notice-fearless-wallet-browser-extension-leaked-private-keys/19058"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://forum.polkadot.network/t/security-notice-fearless-wallet-browser-extension-leaked-private-keys/19058",
     "title": "Polkadot Community Foundation: Security notice, Fearless Wallet browser extension leaked private keys",
     "date": "2026-10-21",
     "kind": "primary",
     "official": true
    },
    {
     "url": "https://www.0xcert.com/advisory/0xCERT-2026-0266",
     "title": "0xCERT advisory 0xCERT-2026-0266",
     "date": "2026-10-21",
     "kind": "research",
     "official": false
    }
   ]
  },
  {
   "id": "adobe-reader-attacked-bug-apr-2026",
   "url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026/",
   "path": "/incidents/adobe-reader-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026.json",
   "title": "Adobe Acrobat Reader: a bad PDF could take over your computer, and it was used in real attacks",
   "category": "apps",
   "platforms": [
    "windows",
    "macos"
   ],
   "products": [
    "adobe-reader"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "critical",
   "severity_source": "Adobe: Critical, priority 1 (APSB26-43)",
   "exploited_in_wild": "yes",
   "exploited_note": "Adobe says it is aware of this being used in real attacks. CISA lists it too (added Apr 13, 2026).",
   "exploited_source_url": "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-04-11",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-34621"
   ],
   "summary": "Opening a booby-trapped PDF in Adobe Acrobat or Acrobat Reader could let it run its own code on your computer. Attackers were already doing this. Adobe fixed it on April 11, 2026.",
   "am_i_affected": "You are at risk if Acrobat Reader or Acrobat is version 26.001.21367 or older (Acrobat 2024: 24.001.30356 or older).",
   "action": "Update Acrobat Reader to 26.001.21411 or newer",
   "affected": [
    {
     "product": "adobe-reader",
     "product_name": "Adobe Acrobat Reader",
     "platform": "windows",
     "affected_versions": "Acrobat Reader and Acrobat (Continuous) 26.001.21367 and earlier; Acrobat 2024 24.001.30356 and earlier",
     "fixed_version": "26.001.21411 (Acrobat 2024: 24.001.30362 Windows / 24.001.30360 Mac)",
     "fixed_min": "26.001.21411",
     "fix_note": null,
     "fixed_source_urls": [
      "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html"
     ],
     "check": {
      "menu_path": "Open Acrobat Reader > Help (or Menu > Help) > About Adobe Acrobat Reader.",
      "command": "(Get-Item \"$env:ProgramFiles\\Adobe\\Acrobat DC\\Acrobat\\Acrobat.exe\").VersionInfo.ProductVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://get.adobe.com/reader/"
    },
    {
     "product": "adobe-reader",
     "product_name": "Adobe Acrobat Reader",
     "platform": "macos",
     "affected_versions": "Acrobat Reader and Acrobat (Continuous) 26.001.21367 and earlier; Acrobat 2024 24.001.30356 and earlier",
     "fixed_version": "26.001.21411 (Acrobat 2024: 24.001.30362 Windows / 24.001.30360 Mac)",
     "fixed_min": "26.001.21411",
     "fix_note": null,
     "fixed_source_urls": [
      "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html"
     ],
     "check": {
      "menu_path": "Open Acrobat Reader > Acrobat Reader menu > About Adobe Acrobat Reader.",
      "command": "mdls -name kMDItemVersion \"/Applications/Adobe Acrobat Reader.app\"",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://get.adobe.com/reader/"
    }
   ],
   "fix_steps": [
    "Open Acrobat Reader.",
    "Click Help > Check for Updates (on some versions: Menu > Help > Check for updates).",
    "Install the update and restart Reader.",
    "Do not open PDFs from emails you did not expect."
   ],
   "official_patch_links": [
    {
     "label": "Adobe security bulletin APSB26-43",
     "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html"
    },
    {
     "label": "Adobe: download Acrobat Reader",
     "url": "https://get.adobe.com/reader/"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html",
     "title": "Adobe: Security update available for Adobe Acrobat Reader (APSB26-43)",
     "date": "2026-04-11",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-34621 (added 2026-04-13)",
     "date": "2026-04-13",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34621",
     "title": "NVD: CVE-2026-34621",
     "date": "2026-04-11",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "electrum-wallet-fake-server-fee-bump-theft",
   "url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft/",
   "path": "/incidents/electrum-wallet-fake-server-fee-bump-theft/",
   "json_url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json",
   "title": "Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3.",
   "category": "wallets",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "electrum"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Electrum's own advisory rates it High.",
   "exploited_in_wild": "yes",
   "exploited_note": "Electrum's advisory says some servers are doing this right now, and two users reported it. One lost money.",
   "exploited_source_url": "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-23",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-117601"
   ],
   "summary": "Electrum is a Bitcoin wallet app. It talks to servers to learn about payments. A bad server can hide a payment you just sent and show a fake one that pays a thief instead. If you then use the 'increase fee' button, you sign the fake payment and the thief gets paid. Electrum 4.8.3 fixes this. Electrum says it is already happening.",
   "am_i_affected": "You are at risk if you use Electrum older than 4.8.3 and connect to servers you do not run yourself. Electrum says people who connect to a server they trust, such as their own, are not affected.",
   "action": "Update Electrum to 4.8.3",
   "affected": [
    {
     "product": "electrum",
     "product_name": "Electrum",
     "platform": "windows",
     "affected_versions": "Electrum older than 4.8.3",
     "fixed_version": "4.8.3",
     "fixed_min": "4.8.3",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
      "https://raw.githubusercontent.com/spesmilo/electrum/refs/heads/master/RELEASE-NOTES"
     ],
     "check": {
      "menu_path": "Open Electrum. Click Help > About Electrum.",
      "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Electrum*' | Select-Object DisplayName,DisplayVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://electrum.org/#download"
    },
    {
     "product": "electrum",
     "product_name": "Electrum",
     "platform": "macos",
     "affected_versions": "Electrum older than 4.8.3",
     "fixed_version": "4.8.3",
     "fixed_min": "4.8.3",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
      "https://raw.githubusercontent.com/spesmilo/electrum/refs/heads/master/RELEASE-NOTES"
     ],
     "check": {
      "menu_path": "Open Electrum. Click Help > About Electrum.",
      "command": "defaults read \"/Applications/Electrum.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://electrum.org/#download"
    },
    {
     "product": "electrum",
     "product_name": "Electrum",
     "platform": "linux",
     "affected_versions": "Electrum older than 4.8.3",
     "fixed_version": "4.8.3",
     "fixed_min": "4.8.3",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
      "https://raw.githubusercontent.com/spesmilo/electrum/refs/heads/master/RELEASE-NOTES"
     ],
     "check": {
      "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://electrum.org/#download"
    }
   ],
   "fix_steps": [
    "Go to electrum.org and download Electrum 4.8.3 or newer. Check the signature the way the website explains.",
    "Install it over your old copy. Your wallet files stay in place.",
    "Until you update: before you sign ANY payment (including a fee increase), read the address and the amount on screen to make sure they are right.",
    "Do not use the 'increase fee' button on a payment you do not recognize."
   ],
   "official_patch_links": [
    {
     "label": "Electrum: official download",
     "url": "https://electrum.org/#download"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
     "title": "Electrum security advisory GHSA-6jp4-8v48-cc5v",
     "date": "2026-10-24",
     "kind": "ghsa",
     "official": true
    },
    {
     "url": "https://raw.githubusercontent.com/spesmilo/electrum/refs/heads/master/RELEASE-NOTES",
     "title": "Electrum release notes for 4.8.3 (Oct 23, 2026)",
     "date": "2026-10-23",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "iphone-ads-and-hijacked-tags-spyware",
   "url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware/",
   "path": "/incidents/iphone-ads-and-hijacked-tags-spyware/",
   "json_url": "https://patchgap.ai/incidents/iphone-ads-and-hijacked-tags-spyware.json",
   "title": "iPhone: criminals are using bad ads and old website tags to attack iPhones that are not updated",
   "category": "phones",
   "platforms": [
    "ios"
   ],
   "products": [
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Rated by us as high. Researchers report real attacks. No official score.",
   "exploited_in_wild": "yes",
   "exploited_note": "Researchers at iVerify and Report URI say they saw real attacks. Apple has not commented on this report.",
   "exploited_source_url": "https://www.iverify.com/blog/blog-malvertising-coruna-darksword-iphone-exploits",
   "confidence": "unconfirmed",
   "confidence_note": "The attack report comes from security researchers, not Apple. Apple's page only tells us which iOS versions are the newest.",
   "first_reported": "2026-10-21",
   "updated_at": "2026-10-27",
   "cves": [],
   "summary": "Researchers say criminals are using bad ads and old, taken-over website pieces (called tags) to attack iPhones that are behind on updates. Just visiting a bad page on an out-of-date iPhone could install spying software that steals saved passwords and crypto wallet data. Phones that are up to date are said to be safe.",
   "am_i_affected": "You may be at risk if your iPhone or iPad has not been updated in a while. Go to Settings > General > About to see your iOS version, then Settings > General > Software Update.",
   "action": "Update your iPhone or iPad to the newest iOS",
   "affected": [
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iPhones and iPads that are behind on updates",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Install the newest iOS Apple offers for your phone. On Oct 26, 2026 these were iOS 27.2, 26.7.2 and 18.7.11 (older iPhones).",
     "fixed_source_urls": [
      "https://support.apple.com/en-us/100100"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "Open Settings > General > Software Update.",
    "Tap Update Now and let it finish.",
    "Turn on Automatic Updates on the same screen.",
    "If your phone cannot update, think about replacing it. Do not use it for banking."
   ],
   "official_patch_links": [
    {
     "label": "Apple: security releases",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/100100",
     "title": "Apple: security releases (newest iOS versions as of Oct 26, 2026)",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.iverify.com/blog/blog-malvertising-coruna-darksword-iphone-exploits",
     "title": "iVerify and Report URI: infected ads and expired tags deliver iPhone spyware",
     "date": "2026-10-21",
     "kind": "research",
     "official": false
    },
    {
     "url": "https://blog.report-uri.com/deadtag-how-forgotten-website-tags-became-a-delivery-network-for-iphone-spyware/",
     "title": "Report URI: DeadTag",
     "date": "2026-10-22",
     "kind": "research",
     "official": false
    }
   ]
  },
  {
   "id": "plex-media-server-plex2shell-attacks",
   "url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks/",
   "path": "/incidents/plex-media-server-plex2shell-attacks/",
   "json_url": "https://patchgap.ai/incidents/plex-media-server-plex2shell-attacks.json",
   "title": "Plex Media Server: hackers are chaining bugs to break in. Update to 1.43.3 or newer.",
   "category": "apps",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "plex-media-server"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Rated by us as high. CISA says attackers chain this bug with others. NVD rates the single bug 5.3 (medium).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA added four Plex Media Server bugs to its list of bugs used in real attacks on Oct 20, 2026, and says they can be chained together.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-20",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-96652",
    "CVE-2026-96654",
    "CVE-2026-96655",
    "CVE-2026-96656"
   ],
   "summary": "If you run Plex Media Server on a PC or Mac, hackers can use a chain of bugs to take over that computer. The US government (CISA) says this is happening now. Plex fixed the problems in Plex Media Server 1.43.3. Plex Desktop 1.115.0 got security fixes too. Update both if you use them.",
   "am_i_affected": "You are at risk if you run Plex Media Server older than 1.43.3 and it can be reached from the internet or your home network. People who only use the Plex app to watch (not the server) are not affected by the server bug.",
   "action": "Update Plex Media Server to 1.43.3 or newer",
   "affected": [
    {
     "product": "plex-media-server",
     "product_name": "Plex Media Server",
     "platform": "windows",
     "affected_versions": "Plex Media Server 1.43.2 and older",
     "fixed_version": "1.43.3 (build 1.43.3.10861)",
     "fixed_min": "1.43.3",
     "fix_note": null,
     "fixed_source_urls": [
      "https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319",
      "https://nvd.nist.gov/vuln/detail/CVE-2026-96652"
     ],
     "check": {
      "menu_path": "Open Plex Media Server's app or tray icon and look for its version (About or Settings). You can also open Plex in your web browser and go to Settings.",
      "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Plex Media Server*' | Select-Object DisplayName,DisplayVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.plex.tv/media-server-downloads/"
    },
    {
     "product": "plex-media-server",
     "product_name": "Plex Media Server",
     "platform": "macos",
     "affected_versions": "Plex Media Server 1.43.2 and older",
     "fixed_version": "1.43.3 (build 1.43.3.10861)",
     "fixed_min": "1.43.3",
     "fix_note": null,
     "fixed_source_urls": [
      "https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319",
      "https://nvd.nist.gov/vuln/detail/CVE-2026-96652"
     ],
     "check": {
      "menu_path": "Look for the Plex Media Server icon in the menu bar and open its About window.",
      "command": "defaults read \"/Applications/Plex Media Server.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.plex.tv/media-server-downloads/"
    },
    {
     "product": "plex-media-server",
     "product_name": "Plex Media Server",
     "platform": "linux",
     "affected_versions": "Plex Media Server 1.43.2 and older",
     "fixed_version": "1.43.3 (build 1.43.3.10861)",
     "fixed_min": "1.43.3",
     "fix_note": null,
     "fixed_source_urls": [
      "https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319",
      "https://nvd.nist.gov/vuln/detail/CVE-2026-96652"
     ],
     "check": {
      "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://www.plex.tv/media-server-downloads/"
    }
   ],
   "fix_steps": [
    "Go to the official Plex Media Server downloads page.",
    "Download the newest version for your computer and install it over the old one.",
    "Or turn on automatic updates in Plex Media Server's settings.",
    "If your server is on a NAS box, ask its maker for the update, or install the package by hand.",
    "Do not leave your server open to the internet if you do not need to."
   ],
   "official_patch_links": [
    {
     "label": "Plex: official Media Server downloads",
     "url": "https://www.plex.tv/media-server-downloads/"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog (CVE-2026-96652, -96654, -96655 and -96656, added Oct 20, 2026)",
     "date": "2026-10-20",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319",
     "title": "Plex forum: Important security update for Plex Media Server 1.43.2 and earlier",
     "date": "2026-09-01",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652",
     "title": "NVD: CVE-2026-96652",
     "date": "2026-09-23",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "windows-shell-zero-day-oct-2026",
   "url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026/",
   "path": "/incidents/windows-shell-zero-day-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-shell-zero-day-oct-2026.json",
   "title": "Windows: a bug that lets a bad file skip Windows' safety warnings is being used by hackers",
   "category": "windows",
   "platforms": [
    "windows"
   ],
   "products": [
    "windows"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "NVD score 8.8 out of 10 (CVE-2026-96951)",
   "exploited_in_wild": "yes",
   "exploited_note": "Microsoft marks it as 'Exploitation Detected' and the US government's CISA lists it as used in real attacks (added Oct 13, 2026).",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-13",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-96951"
   ],
   "summary": "Windows normally shows a warning when you open a file you got from the internet or an email. A bug in Windows lets some bad files skip that warning. Hackers are already using this bug. Microsoft fixed it in its October 2026 update (Oct 13). You still have to install that update.",
   "am_i_affected": "You are at risk if your Windows computer has not installed the October 13, 2026 update or any update after it. Open Settings > Windows Update. If it says 'You're up to date' and Update history shows an update from October 2026 or later, you are covered.",
   "action": "Run Windows Update (October 2026 update or newer)",
   "affected": [
    {
     "product": "windows",
     "product_name": "Windows 10 and 11",
     "platform": "windows",
     "affected_versions": "Windows computers that have not installed Microsoft's October 13, 2026 security update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by the October 13, 2026 Windows security update (or any newer update). Microsoft's Update Guide lists the exact update for each Windows version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct"
     ],
     "check": {
      "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
      "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    }
   ],
   "fix_steps": [
    "Open Start > Settings > Windows Update.",
    "Click Check for updates.",
    "Let the updates download and install.",
    "Restart your computer when it asks.",
    "Until you have updated, do not open files from emails or chats you did not expect, even if they look normal."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: how to update Windows",
     "url": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    },
    {
     "label": "Microsoft October 2026 update notes",
     "url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct",
     "title": "Microsoft: October 2026 Security Updates release notes",
     "date": "2026-10-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-96951",
     "date": "2026-10-13",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96951",
     "title": "NVD: CVE-2026-96951",
     "date": "2026-10-13",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "macos-coregraphics-zero-day-sept-2026",
   "url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026/",
   "path": "/incidents/macos-coregraphics-zero-day-sept-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-coregraphics-zero-day-sept-2026.json",
   "title": "Mac and iPhone: a bad file could take over your device, and Apple says it was used in real attacks",
   "category": "mac",
   "platforms": [
    "macos",
    "ios"
   ],
   "products": [
    "macos",
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "NVD score 8.8 out of 10 (CVE-2026-86950)",
   "exploited_in_wild": "yes",
   "exploited_note": "Apple says it may have been used in an 'extremely sophisticated attack against specific targeted individuals' on iPhones before iOS 27. CISA lists it as exploited (added Sept 29, 2026).",
   "exploited_source_url": "https://support.apple.com/en-us/149229",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-09-28",
   "updated_at": "2026-10-28",
   "cves": [
    "CVE-2026-86950"
   ],
   "summary": "A bug in the part of Apple's software that draws pictures and files (CoreGraphics) could let a bad file run a program on your Mac, iPhone or iPad. Apple says it was used in a very targeted attack on iPhones. Apple fixed it on September 28, 2026, and on October 26 it sent the same fix to older iPhones and iPads (iOS 18.7.11). The newer October 26 Mac updates also include the fix.",
   "am_i_affected": "You are at risk if your Mac runs macOS Tahoe older than 26.7.1 or macOS Sequoia older than 15.8.1, or if your iPhone or iPad runs iOS 26 older than 26.7.1 or iOS 18 older than 18.7.11. If you installed the October 26 updates you are covered.",
   "action": "Update your Mac (Tahoe 26.7.1 / Sequoia 15.8.1 or newer) and your iPhone or iPad (iOS 26.7.1 / 18.7.11 or newer)",
   "affected": [
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Tahoe before 26.7.1; macOS Sequoia before 15.8.1",
     "fixed_version": "26.7.1 (Tahoe) / 15.8.1 (Sequoia)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/149228",
      "https://support.apple.com/en-us/149229"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS and iPadOS 26 before 26.7.1; iOS and iPadOS 18 before 18.7.11 (older iPhones such as iPhone XS and XR)",
     "fixed_version": "26.7.1 / 18.7.11",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/149226",
      "https://support.apple.com/en-us/149225"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "On a Mac: click the Apple menu > System Settings > General > Software Update, then click Update Now.",
    "On an iPhone or iPad: open Settings > General > Software Update and install the newest version.",
    "Restart when asked."
   ],
   "official_patch_links": [
    {
     "label": "Apple: how to update your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple: how to update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/118575"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/149228",
     "title": "Apple: About the security content of macOS Tahoe 26.7.1",
     "date": "2026-09-28",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149229",
     "title": "Apple: About the security content of macOS Sequoia 15.8.1",
     "date": "2026-09-28",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities entry for CVE-2026-86950",
     "date": "2026-09-29",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86950",
     "title": "NVD: CVE-2026-86950",
     "date": "2026-09-28",
     "kind": "nvd",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149226",
     "title": "Apple: About the security content of iOS 26.7.1 and iPadOS 26.7.1",
     "date": "2026-09-28",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149225",
     "title": "Apple: About the security content of iOS 18.7.11 and iPadOS 18.7.11",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "windows-attacked-bugs-sep-2026",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026/",
   "path": "/incidents/windows-attacked-bugs-sep-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-sep-2026.json",
   "title": "Windows: bugs fixed in the September 2026 update were used in real attacks",
   "category": "windows",
   "platforms": [
    "windows"
   ],
   "products": [
    "windows"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists these as used in real attacks (added 2026-09-08). Microsoft's Security Update Guide marks them as exploited.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-09-08",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-81963",
    "CVE-2026-85880"
   ],
   "summary": "Two bugs, one in Windows Update itself, let a program that is already on your PC take full control of it. Microsoft fixed it in the September 2026 Windows update. Any newer monthly update also includes the fix.",
   "am_i_affected": "You are at risk only if your Windows PC has not installed any monthly update since September 2026. Open Settings > Windows Update. If it says 'You're up to date', you are covered.",
   "action": "Run Windows Update (September 2026 update or newer)",
   "affected": [
    {
     "product": "windows",
     "product_name": "Windows 10 and 11",
     "platform": "windows",
     "affected_versions": "Windows 10 and 11 PCs without the September 2026 security update or a newer one",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by the September 2026 Windows security update (2026-09-08) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963",
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880"
     ],
     "check": {
      "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
      "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    }
   ],
   "fix_steps": [
    "Open Start > Settings > Windows Update.",
    "Click Check for updates.",
    "Let the updates download and install.",
    "Restart your computer when it asks."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: how to update Windows",
     "url": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    },
    {
     "label": "Microsoft: CVE-2026-81963 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963",
     "title": "Microsoft Security Update Guide: CVE-2026-81963 (September 2026 update)",
     "date": "2026-09-08",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880",
     "title": "Microsoft Security Update Guide: CVE-2026-85880 (September 2026 update)",
     "date": "2026-09-08",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-81963, CVE-2026-85880 (added 2026-09-08)",
     "date": "2026-09-08",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81963",
     "title": "NVD: CVE-2026-81963",
     "date": "2026-09-08",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "chrome-attacked-bug-sep-2026-b",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b/",
   "path": "/incidents/chrome-attacked-bug-sep-2026-b/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-b.json",
   "title": "Chrome and Edge (Sep 2026, second fix): a bug in the part that runs website code (V8) was used in real attacks",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome",
    "edge"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Google says it is aware that attacks using CVE-2026-87491 exist. CISA lists it as used in real attacks (added 2026-09-09).",
   "exploited_source_url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-09-08",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-87491"
   ],
   "summary": "A bad website could use a bug in the part that runs website code (V8) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 153.0.8010.36. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.",
   "am_i_affected": "You are at risk if Chrome is older than 153.0.8010.36 or Edge is older than 152.0.4191.66. Newer versions are safe from this one.",
   "action": "Update Chrome to 153.0.8010.36 or newer and restart Edge",
   "affected": [
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome versions before 153.0.8010.36",
     "fixed_version": "153.0.8010.36 or 153.0.8010.37",
     "fixed_min": "153.0.8010.36",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome versions before 153.0.8010.36",
     "fixed_version": "153.0.8010.36 or 153.0.8010.37",
     "fixed_min": "153.0.8010.36",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome versions before 153.0.8010.36",
     "fixed_version": "153.0.8010.36 or 153.0.8010.37",
     "fixed_min": "153.0.8010.36",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "windows",
     "affected_versions": "Edge versions before 152.0.4191.66",
     "fixed_version": "152.0.4191.66",
     "fixed_min": "152.0.4191.66",
     "fix_note": null,
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.",
      "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "macos",
     "affected_versions": "Edge versions before 152.0.4191.66",
     "fixed_version": "152.0.4191.66",
     "fixed_min": "152.0.4191.66",
     "fix_note": null,
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.",
      "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    }
   ],
   "fix_steps": [
    "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.",
    "Click Relaunch.",
    "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart."
   ],
   "official_patch_links": [
    {
     "label": "Google: update Chrome",
     "url": "https://support.google.com/chrome/answer/95414"
    },
    {
     "label": "Google Chrome release note",
     "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html"
    },
    {
     "label": "Microsoft Edge security release notes",
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html",
     "title": "Google Chrome Releases: Stable Channel Update for Desktop (2026-09-08)",
     "date": "2026-09-08",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-87491 (added 2026-09-09)",
     "date": "2026-09-09",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security",
     "title": "Microsoft: Release notes for Microsoft Edge security updates",
     "date": "2026-09-04",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87491",
     "title": "NVD: CVE-2026-87491",
     "date": "2026-09-08",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "chrome-attacked-bug-sep-2026-a",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a/",
   "path": "/incidents/chrome-attacked-bug-sep-2026-a/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-sep-2026-a.json",
   "title": "Chrome and Edge (Sep 2026, first fix): a bug in the part that runs website code (V8) was used in real attacks",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome",
    "edge"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Google says it is aware that attacks using CVE-2026-85046 exist. CISA lists it as used in real attacks (added 2026-09-04).",
   "exploited_source_url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-09-03",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-85046"
   ],
   "summary": "A bad website could use a bug in the part that runs website code (V8) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 152.0.7977.82. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.",
   "am_i_affected": "You are at risk if Chrome is older than 152.0.7977.82 or Edge is older than 152.0.4191.62. Newer versions are safe from this one.",
   "action": "Update Chrome to 152.0.7977.82 or newer and restart Edge",
   "affected": [
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome versions before 152.0.7977.82",
     "fixed_version": "152.0.7977.82 or 152.0.7977.83",
     "fixed_min": "152.0.7977.82",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome versions before 152.0.7977.82",
     "fixed_version": "152.0.7977.82 or 152.0.7977.83",
     "fixed_min": "152.0.7977.82",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome versions before 152.0.7977.82",
     "fixed_version": "152.0.7977.82 or 152.0.7977.83",
     "fixed_min": "152.0.7977.82",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "windows",
     "affected_versions": "Edge versions before 152.0.4191.62",
     "fixed_version": "152.0.4191.62",
     "fixed_min": "152.0.4191.62",
     "fix_note": null,
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.",
      "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "macos",
     "affected_versions": "Edge versions before 152.0.4191.62",
     "fixed_version": "152.0.4191.62",
     "fixed_min": "152.0.4191.62",
     "fix_note": null,
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.",
      "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    }
   ],
   "fix_steps": [
    "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.",
    "Click Relaunch.",
    "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart."
   ],
   "official_patch_links": [
    {
     "label": "Google: update Chrome",
     "url": "https://support.google.com/chrome/answer/95414"
    },
    {
     "label": "Google Chrome release note",
     "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html"
    },
    {
     "label": "Microsoft Edge security release notes",
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html",
     "title": "Google Chrome Releases: Stable Channel Update for Desktop (2026-09-03)",
     "date": "2026-09-03",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-85046 (added 2026-09-04)",
     "date": "2026-09-04",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security",
     "title": "Microsoft: Release notes for Microsoft Edge security updates",
     "date": "2026-09-02",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85046",
     "title": "NVD: CVE-2026-85046",
     "date": "2026-09-03",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "windows-attacked-bugs-aug-2026",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026/",
   "path": "/incidents/windows-attacked-bugs-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-aug-2026.json",
   "title": "Windows: a bug fixed in the August 2026 update was used in real attacks",
   "category": "windows",
   "platforms": [
    "windows"
   ],
   "products": [
    "windows"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists this as used in real attacks (added 2026-08-11). Microsoft's Security Update Guide marks it as exploited.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-08-11",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-68820"
   ],
   "summary": "A bug in the part of Windows that handles network connections lets a program that is already on your PC take full control of it. Microsoft fixed it in the August 2026 Windows update. Any newer monthly update also includes the fix.",
   "am_i_affected": "You are at risk only if your Windows PC has not installed any monthly update since August 2026. Open Settings > Windows Update. If it says 'You're up to date', you are covered.",
   "action": "Run Windows Update (August 2026 update or newer)",
   "affected": [
    {
     "product": "windows",
     "product_name": "Windows 10 and 11",
     "platform": "windows",
     "affected_versions": "Windows 10 and 11 PCs without the August 2026 security update or a newer one",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by the August 2026 Windows security update (2026-08-11) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820"
     ],
     "check": {
      "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
      "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    }
   ],
   "fix_steps": [
    "Open Start > Settings > Windows Update.",
    "Click Check for updates.",
    "Let the updates download and install.",
    "Restart your computer when it asks."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: how to update Windows",
     "url": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    },
    {
     "label": "Microsoft: CVE-2026-68820 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820",
     "title": "Microsoft Security Update Guide: CVE-2026-68820 (August 2026 update)",
     "date": "2026-08-11",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-68820 (added 2026-08-11)",
     "date": "2026-08-11",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68820",
     "title": "NVD: CVE-2026-68820",
     "date": "2026-08-11",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "macos-screen-sharing-attacked-bug-aug-2026",
   "url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026/",
   "path": "/incidents/macos-screen-sharing-attacked-bug-aug-2026/",
   "json_url": "https://patchgap.ai/incidents/macos-screen-sharing-attacked-bug-aug-2026.json",
   "title": "Mac: a Screen Sharing bug let attackers on the network get in without a password",
   "category": "mac",
   "platforms": [
    "macos"
   ],
   "products": [
    "macos"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists it as used in real attacks (added Aug 18, 2026).",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-08-06",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-65400"
   ],
   "summary": "If Screen Sharing is turned on, a bug let someone on the same network connect to your Mac without the right password. Apple fixed it on August 6, 2026. Most home users have Screen Sharing turned off.",
   "am_i_affected": "You are at risk if Screen Sharing is on and your Mac runs macOS Tahoe older than 26.6.1, Sequoia older than 15.7.9 or Sonoma older than 14.8.9. Check System Settings > General > Sharing.",
   "action": "Update macOS (Aug 2026 update or newer)",
   "affected": [
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Tahoe before 26.6.1, Sequoia before 15.7.9, Sonoma before 14.8.9",
     "fixed_version": "26.6.1 (Tahoe) / 15.7.9 (Sequoia) / 14.8.9 (Sonoma)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/148170",
      "https://support.apple.com/en-us/148171",
      "https://support.apple.com/en-us/148172"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    }
   ],
   "fix_steps": [
    "Click the Apple menu > System Settings > General > Software Update.",
    "Install the update it offers.",
    "Restart your Mac when asked.",
    "If you do not use it, turn off Screen Sharing in System Settings > General > Sharing."
   ],
   "official_patch_links": [
    {
     "label": "Apple: update macOS on your Mac",
     "url": "https://support.apple.com/en-us/108382"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/148170",
     "title": "Apple: About the security content of macOS Tahoe 26.6.1",
     "date": "2026-08-06",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/148171",
     "title": "Apple: About the security content of macOS Sequoia 15.7.9",
     "date": "2026-08-06",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/148172",
     "title": "Apple: About the security content of macOS Sonoma 14.8.9",
     "date": "2026-08-06",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-65400 (added 2026-08-18)",
     "date": "2026-08-18",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65400",
     "title": "NVD: CVE-2026-65400",
     "date": "2026-08-06",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "chrome-attacked-bug-jun-2026",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026/",
   "path": "/incidents/chrome-attacked-bug-jun-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-jun-2026.json",
   "title": "Chrome and Edge (Jun 2026): a bug in the part that runs website code (V8) was used in real attacks",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome",
    "edge"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Google says it is aware that attacks using CVE-2026-11645 exist. CISA lists it as used in real attacks (added 2026-06-09).",
   "exploited_source_url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-06-08",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-11645"
   ],
   "summary": "A bad website could use a bug in the part that runs website code (V8) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 149.0.7827.102. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.",
   "am_i_affected": "You are at risk if Chrome is older than 149.0.7827.102 or Edge is older than 149.0.4022.69. Newer versions are safe from this one.",
   "action": "Update Chrome to 149.0.7827.102 or newer and restart Edge",
   "affected": [
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome versions before 149.0.7827.102",
     "fixed_version": "149.0.7827.102 or 149.0.7827.103",
     "fixed_min": "149.0.7827.102",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome versions before 149.0.7827.102",
     "fixed_version": "149.0.7827.102 or 149.0.7827.103",
     "fixed_min": "149.0.7827.102",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome versions before 149.0.7827.102",
     "fixed_version": "149.0.7827.102 or 149.0.7827.103",
     "fixed_min": "149.0.7827.102",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "windows",
     "affected_versions": "Edge versions before 149.0.4022.69",
     "fixed_version": "149.0.4022.69",
     "fixed_min": "149.0.4022.69",
     "fix_note": null,
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.",
      "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "macos",
     "affected_versions": "Edge versions before 149.0.4022.69",
     "fixed_version": "149.0.4022.69",
     "fixed_min": "149.0.4022.69",
     "fix_note": null,
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.",
      "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    }
   ],
   "fix_steps": [
    "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.",
    "Click Relaunch.",
    "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart."
   ],
   "official_patch_links": [
    {
     "label": "Google: update Chrome",
     "url": "https://support.google.com/chrome/answer/95414"
    },
    {
     "label": "Google Chrome release note",
     "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html"
    },
    {
     "label": "Microsoft Edge security release notes",
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html",
     "title": "Google Chrome Releases: Stable Channel Update for Desktop (2026-06-08)",
     "date": "2026-06-08",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-11645 (added 2026-06-09)",
     "date": "2026-06-09",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security",
     "title": "Microsoft: Release notes for Microsoft Edge security updates",
     "date": "2026-06-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11645",
     "title": "NVD: CVE-2026-11645",
     "date": "2026-06-08",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "windows-attacked-bugs-apr-2026",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026/",
   "path": "/incidents/windows-attacked-bugs-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-apr-2026.json",
   "title": "Windows: a bug fixed in the April 2026 update was used in real attacks",
   "category": "windows",
   "platforms": [
    "windows"
   ],
   "products": [
    "windows"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists this as used in real attacks (added 2026-04-28). Microsoft's Security Update Guide marks it as exploited.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-04-14",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-32202"
   ],
   "summary": "A bug in Windows File Explorer lets a bad file or shared folder fool Windows. It can leak your Windows sign-in details to attackers. Microsoft fixed it in the April 2026 Windows update. Any newer monthly update also includes the fix.",
   "am_i_affected": "You are at risk only if your Windows PC has not installed any monthly update since April 2026. Open Settings > Windows Update. If it says 'You're up to date', you are covered.",
   "action": "Run Windows Update (April 2026 update or newer)",
   "affected": [
    {
     "product": "windows",
     "product_name": "Windows 10 and 11",
     "platform": "windows",
     "affected_versions": "Windows 10 and 11 PCs without the April 2026 security update or a newer one",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by the April 2026 Windows security update (2026-04-14) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202"
     ],
     "check": {
      "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
      "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    }
   ],
   "fix_steps": [
    "Open Start > Settings > Windows Update.",
    "Click Check for updates.",
    "Let the updates download and install.",
    "Restart your computer when it asks."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: how to update Windows",
     "url": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    },
    {
     "label": "Microsoft: CVE-2026-32202 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202",
     "title": "Microsoft Security Update Guide: CVE-2026-32202 (April 2026 update)",
     "date": "2026-04-14",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-32202 (added 2026-04-28)",
     "date": "2026-04-28",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32202",
     "title": "NVD: CVE-2026-32202",
     "date": "2026-04-14",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "microsoft-defender-attacked-bugs-2026",
   "url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026/",
   "path": "/incidents/microsoft-defender-attacked-bugs-2026/",
   "json_url": "https://patchgap.ai/incidents/microsoft-defender-attacked-bugs-2026.json",
   "title": "Windows: three bugs in Microsoft Defender, the built-in antivirus, were used in real attacks",
   "category": "windows",
   "platforms": [
    "windows"
   ],
   "products": [
    "windows"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists all three as used in real attacks (added Apr 22 and May 20, 2026).",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-04-14",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-33825",
    "CVE-2026-41091",
    "CVE-2026-45498"
   ],
   "summary": "Microsoft Defender is the antivirus built into Windows. Three bugs in it let a bad program that is already on your PC take more control, or stop Defender from working. Microsoft fixed them in April and May 2026. Defender normally updates itself in the background.",
   "am_i_affected": "You are at risk only if Defender has not updated since May 2026. Open Windows Security > Virus & threat protection > Protection updates and click Check for updates. If it finds nothing new, you are covered.",
   "action": "Check for Defender updates in Windows Security",
   "affected": [
    {
     "product": "windows",
     "product_name": "Windows 10 and 11",
     "platform": "windows",
     "affected_versions": "Microsoft Defender on Windows 10 and 11 without the April and May 2026 Defender updates",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by Microsoft Defender updates released in April 2026 (CVE-2026-33825) and May 2026 (the other two). Defender installs these by itself; Microsoft's pages list the fixed Defender versions.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825",
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091",
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498"
     ],
     "check": {
      "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
      "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    }
   ],
   "fix_steps": [
    "Open Start and type Windows Security, then open it.",
    "Click Virus & threat protection.",
    "Under Virus & threat protection updates, click Protection updates.",
    "Click Check for updates.",
    "Also run Windows Update (Settings > Windows Update) and restart if asked."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: how to update Windows",
     "url": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    },
    {
     "label": "Microsoft: CVE-2026-41091 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825",
     "title": "Microsoft Security Update Guide: CVE-2026-33825 (April 2026 update)",
     "date": "2026-04-14",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091",
     "title": "Microsoft Security Update Guide: CVE-2026-41091 (May 2026 update)",
     "date": "2026-05-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498",
     "title": "Microsoft Security Update Guide: CVE-2026-45498 (May 2026 update)",
     "date": "2026-05-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-33825 (added 2026-04-22)",
     "date": "2026-04-22",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-41091, CVE-2026-45498 (added 2026-05-20)",
     "date": "2026-05-20",
     "kind": "cisa",
     "official": true
    }
   ]
  },
  {
   "id": "chrome-attacked-bug-apr-2026",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026/",
   "path": "/incidents/chrome-attacked-bug-apr-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-apr-2026.json",
   "title": "Chrome and Edge (Mar 2026): a bug in the part that handles 3D graphics (Dawn) was used in real attacks",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome",
    "edge"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Google says it is aware that attacks using CVE-2026-5281 exist. CISA lists it as used in real attacks (added 2026-04-01).",
   "exploited_source_url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-03-31",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-5281"
   ],
   "summary": "A bad website could use a bug in the part that handles 3D graphics (Dawn) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 146.0.7680.177. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.",
   "am_i_affected": "You are at risk if Chrome is older than 146.0.7680.177 or Edge is older than 146.0.3856.97. Newer versions are safe from this one.",
   "action": "Update Chrome to 146.0.7680.177 or newer and restart Edge",
   "affected": [
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome versions before 146.0.7680.177",
     "fixed_version": "146.0.7680.177 or 146.0.7680.178",
     "fixed_min": "146.0.7680.177",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome versions before 146.0.7680.177",
     "fixed_version": "146.0.7680.177 or 146.0.7680.178",
     "fixed_min": "146.0.7680.177",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome versions before 146.0.7680.177",
     "fixed_version": "146.0.7680.177 or 146.0.7680.178",
     "fixed_min": "146.0.7680.177",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "windows",
     "affected_versions": "Edge versions before 146.0.3856.97",
     "fixed_version": "146.0.3856.97",
     "fixed_min": "146.0.3856.97",
     "fix_note": null,
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.",
      "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "macos",
     "affected_versions": "Edge versions before 146.0.3856.97",
     "fixed_version": "146.0.3856.97",
     "fixed_min": "146.0.3856.97",
     "fix_note": null,
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.",
      "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    }
   ],
   "fix_steps": [
    "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.",
    "Click Relaunch.",
    "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart."
   ],
   "official_patch_links": [
    {
     "label": "Google: update Chrome",
     "url": "https://support.google.com/chrome/answer/95414"
    },
    {
     "label": "Google Chrome release note",
     "url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html"
    },
    {
     "label": "Microsoft Edge security release notes",
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html",
     "title": "Google Chrome Releases: Stable Channel Update for Desktop (2026-03-31)",
     "date": "2026-03-31",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-5281 (added 2026-04-01)",
     "date": "2026-04-01",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security",
     "title": "Microsoft: Release notes for Microsoft Edge security updates",
     "date": "2026-04-01",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5281",
     "title": "NVD: CVE-2026-5281",
     "date": "2026-03-31",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "chrome-attacked-bug-mar-2026",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026/",
   "path": "/incidents/chrome-attacked-bug-mar-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-mar-2026.json",
   "title": "Chrome and Edge (Mar 2026): bugs in the parts that run website code (V8) and draw images (Skia) were used in real attacks",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome",
    "edge"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Google says it is aware that attacks using CVE-2026-3910, CVE-2026-3909 exist. CISA lists them as used in real attacks (added 2026-03-13).",
   "exploited_source_url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-03-13",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-3910",
    "CVE-2026-3909"
   ],
   "summary": "A bad website could use a bug in the parts that run website code (V8) and draw images (Skia) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 146.0.7680.80. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.",
   "am_i_affected": "You are at risk if Chrome is older than 146.0.7680.80 or Edge is older than 146.0.3856.62. Newer versions are safe from this one.",
   "action": "Update Chrome to 146.0.7680.80 or newer and restart Edge",
   "affected": [
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome versions before 146.0.7680.80",
     "fixed_version": "146.0.7680.80",
     "fixed_min": "146.0.7680.80",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome versions before 146.0.7680.80",
     "fixed_version": "146.0.7680.80",
     "fixed_min": "146.0.7680.80",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome versions before 146.0.7680.80",
     "fixed_version": "146.0.7680.80",
     "fixed_min": "146.0.7680.80",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "windows",
     "affected_versions": "Edge versions before 146.0.3856.62",
     "fixed_version": "146.0.3856.62",
     "fixed_min": "146.0.3856.62",
     "fix_note": null,
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.",
      "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "macos",
     "affected_versions": "Edge versions before 146.0.3856.62",
     "fixed_version": "146.0.3856.62",
     "fixed_min": "146.0.3856.62",
     "fix_note": null,
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.",
      "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    }
   ],
   "fix_steps": [
    "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.",
    "Click Relaunch.",
    "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart."
   ],
   "official_patch_links": [
    {
     "label": "Google: update Chrome",
     "url": "https://support.google.com/chrome/answer/95414"
    },
    {
     "label": "Google Chrome release note",
     "url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html"
    },
    {
     "label": "Microsoft Edge security release notes",
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html",
     "title": "Google Chrome Releases: Stable Channel Update for Desktop (2026-03-13)",
     "date": "2026-03-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-3910, CVE-2026-3909 (added 2026-03-13)",
     "date": "2026-03-13",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security",
     "title": "Microsoft: Release notes for Microsoft Edge security updates",
     "date": "2026-03-16",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3910",
     "title": "NVD: CVE-2026-3910",
     "date": "2026-03-13",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "chrome-attacked-bug-feb-2026",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026/",
   "path": "/incidents/chrome-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-feb-2026.json",
   "title": "Chrome and Edge (Feb 2026): a bug in the part that handles page styles (CSS) was used in real attacks",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome",
    "edge"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Google says it is aware that attacks using CVE-2026-2441 exist. CISA lists it as used in real attacks (added 2026-02-17).",
   "exploited_source_url": "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-02-13",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-2441"
   ],
   "summary": "A bad website could use a bug in the part that handles page styles (CSS) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 145.0.7632.75. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.",
   "am_i_affected": "You are at risk if Chrome is older than 145.0.7632.75 or Edge has not updated since 2026-02. Newer versions are safe from this one.",
   "action": "Update Chrome to 145.0.7632.75 or newer and restart Edge",
   "affected": [
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome versions before 145.0.7632.75",
     "fixed_version": "145.0.7632.75 or 145.0.7632.76",
     "fixed_min": "145.0.7632.75",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome versions before 145.0.7632.75",
     "fixed_version": "145.0.7632.75 or 145.0.7632.76",
     "fixed_min": "145.0.7632.75",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome versions before 145.0.7632.75",
     "fixed_version": "145.0.7632.75 or 145.0.7632.76",
     "fixed_min": "145.0.7632.75",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "windows",
     "affected_versions": "Edge versions released before Microsoft's matching security update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Microsoft's Edge security release notes list the Edge update that includes the Chromium fix for CVE-2026-2441.",
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.",
      "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "macos",
     "affected_versions": "Edge versions released before Microsoft's matching security update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Microsoft's Edge security release notes list the Edge update that includes the Chromium fix for CVE-2026-2441.",
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.",
      "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    }
   ],
   "fix_steps": [
    "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.",
    "Click Relaunch.",
    "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart."
   ],
   "official_patch_links": [
    {
     "label": "Google: update Chrome",
     "url": "https://support.google.com/chrome/answer/95414"
    },
    {
     "label": "Google Chrome release note",
     "url": "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html"
    },
    {
     "label": "Microsoft Edge security release notes",
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html",
     "title": "Google Chrome Releases: Stable Channel Update for Desktop (2026-02-13)",
     "date": "2026-02-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-2441 (added 2026-02-17)",
     "date": "2026-02-17",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security",
     "title": "Microsoft: Release notes for Microsoft Edge security updates",
     "date": "2026-02-17",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2441",
     "title": "NVD: CVE-2026-2441",
     "date": "2026-02-13",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "apple-attacked-bug-feb-2026",
   "url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026/",
   "path": "/incidents/apple-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bug-feb-2026.json",
   "title": "Mac and iPhone: a core system bug was used in targeted attacks",
   "category": "mac",
   "platforms": [
    "macos",
    "ios"
   ],
   "products": [
    "macos",
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Apple says it may have been used in an extremely sophisticated attack against specific people. CISA lists it as used in real attacks (added Feb 12, 2026).",
   "exploited_source_url": "https://support.apple.com/en-us/126348",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-02-11",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-20700"
   ],
   "summary": "A bug in a core part of Apple's systems let attackers who already had a foothold run their own code. Apple says it was used against specific people. Apple fixed it in macOS Tahoe 26.3 and iOS 26.3.",
   "am_i_affected": "You are at risk if your Mac runs macOS Tahoe older than 26.3 or your iPhone runs iOS 26 older than 26.3.",
   "action": "Update macOS and iPhone (26.3 or newer)",
   "affected": [
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Tahoe before 26.3",
     "fixed_version": "26.3 (Tahoe)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/126348"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS and iPadOS 26 before 26.3",
     "fixed_version": "iOS 26.3",
     "fixed_min": "26.3",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/126346"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "Click the Apple menu > System Settings > General > Software Update.",
    "Install the update it offers.",
    "Restart your Mac when asked.",
    "On iPhone or iPad: Settings > General > Software Update."
   ],
   "official_patch_links": [
    {
     "label": "Apple: update macOS on your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple: update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/126348",
     "title": "Apple: About the security content of macOS Tahoe 26.3",
     "date": "2026-02-11",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/126346",
     "title": "Apple: About the security content of iOS 26.3 and iPadOS 26.3",
     "date": "2026-02-11",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-20700 (added 2026-02-12)",
     "date": "2026-02-12",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20700",
     "title": "NVD: CVE-2026-20700",
     "date": "2026-02-11",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "windows-attacked-bugs-feb-2026",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026/",
   "path": "/incidents/windows-attacked-bugs-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-feb-2026.json",
   "title": "Windows: bugs fixed in the February 2026 update were used in real attacks",
   "category": "windows",
   "platforms": [
    "windows"
   ],
   "products": [
    "windows"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists these as used in real attacks (added 2026-02-10). Microsoft's Security Update Guide marks them as exploited.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-02-10",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-21510",
    "CVE-2026-21513",
    "CVE-2026-21519",
    "CVE-2026-21525",
    "CVE-2026-21533"
   ],
   "summary": "Five Windows bugs were being used by attackers at once. Two let a bad link or file skip the warning Windows normally shows. The others let a program that is already on your PC take more control or crash parts of Windows. Microsoft fixed it in the February 2026 Windows update. Any newer monthly update also includes the fix.",
   "am_i_affected": "You are at risk only if your Windows PC has not installed any monthly update since February 2026. Open Settings > Windows Update. If it says 'You're up to date', you are covered.",
   "action": "Run Windows Update (February 2026 update or newer)",
   "affected": [
    {
     "product": "windows",
     "product_name": "Windows 10 and 11",
     "platform": "windows",
     "affected_versions": "Windows 10 and 11 PCs without the February 2026 security update or a newer one",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by the February 2026 Windows security update (2026-02-10) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21510",
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21513",
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21519",
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21525",
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21533"
     ],
     "check": {
      "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
      "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    }
   ],
   "fix_steps": [
    "Open Start > Settings > Windows Update.",
    "Click Check for updates.",
    "Let the updates download and install.",
    "Restart your computer when it asks."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: how to update Windows",
     "url": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    },
    {
     "label": "Microsoft: CVE-2026-21510 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21510"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21510",
     "title": "Microsoft Security Update Guide: CVE-2026-21510 (February 2026 update)",
     "date": "2026-02-10",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21513",
     "title": "Microsoft Security Update Guide: CVE-2026-21513 (February 2026 update)",
     "date": "2026-02-10",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21519",
     "title": "Microsoft Security Update Guide: CVE-2026-21519 (February 2026 update)",
     "date": "2026-02-10",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21525",
     "title": "Microsoft Security Update Guide: CVE-2026-21525 (February 2026 update)",
     "date": "2026-02-10",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21533",
     "title": "Microsoft Security Update Guide: CVE-2026-21533 (February 2026 update)",
     "date": "2026-02-10",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-21510, CVE-2026-21513, CVE-2026-21519, CVE-2026-21525, CVE-2026-21533 (added 2026-02-10)",
     "date": "2026-02-10",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21510",
     "title": "NVD: CVE-2026-21510",
     "date": "2026-02-10",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "office-word-attacked-bug-feb-2026",
   "url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026/",
   "path": "/incidents/office-word-attacked-bug-feb-2026/",
   "json_url": "https://patchgap.ai/incidents/office-word-attacked-bug-feb-2026.json",
   "title": "Microsoft Word: a bug that lets a bad document skip a safety check was used in real attacks",
   "category": "apps",
   "platforms": [
    "windows"
   ],
   "products": [
    "microsoft-office"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists it as used in real attacks (added Feb 10, 2026). Microsoft marks it as exploited.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-02-10",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-21514"
   ],
   "summary": "A bug in Microsoft Word lets a booby-trapped document get around a safety check. Microsoft fixed it in the February 2026 Office update.",
   "am_i_affected": "You are at risk if Word on your Windows PC has not updated since February 10, 2026.",
   "action": "Update Office (February 2026 update or newer)",
   "affected": [
    {
     "product": "microsoft-office",
     "product_name": "Microsoft Office (Word, Excel, Outlook, PowerPoint)",
     "platform": "windows",
     "affected_versions": "Microsoft Word / Office on Windows without the February 2026 update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by Microsoft's February 2026 Office security update (Feb 10, 2026) or any newer update.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21514"
     ],
     "check": {
      "menu_path": "Open Word (or Excel). Click File > Account > Update Options > Update Now. The version is shown under About Word.",
      "command": "(Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Office\\ClickToRun\\Configuration' -ErrorAction SilentlyContinue).VersionToReport",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    }
   ],
   "fix_steps": [
    "Open Word, Excel or any Office app.",
    "Click File > Account.",
    "Click Update Options > Update Now.",
    "Close all Office apps when asked so the update can finish."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: install Office updates",
     "url": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    },
    {
     "label": "Microsoft: CVE-2026-21514 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21514"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21514",
     "title": "Microsoft Security Update Guide: CVE-2026-21514 (February 2026 update)",
     "date": "2026-02-10",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-21514 (added 2026-02-10)",
     "date": "2026-02-10",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21514",
     "title": "NVD: CVE-2026-21514",
     "date": "2026-02-10",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "notepad-plus-plus-updater-hijack-2026",
   "url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026/",
   "path": "/incidents/notepad-plus-plus-updater-hijack-2026/",
   "json_url": "https://patchgap.ai/incidents/notepad-plus-plus-updater-hijack-2026.json",
   "title": "Notepad++: its old updater could be tricked into installing a fake update, and attackers did it",
   "category": "apps",
   "platforms": [
    "windows"
   ],
   "products": [
    "notepad-plus-plus"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Notepad++ says a state-backed group used it against selected organizations. CISA lists it as used in real attacks (added Feb 12, 2026).",
   "exploited_source_url": "https://notepad-plus-plus.org/news/clarification-security-incident/",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-02-05",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2025-15556"
   ],
   "summary": "Notepad++ is a free text editor for Windows. Its built-in updater did not check that an update really came from Notepad++. Attackers who took over the old hosting company sent fake updates to some chosen targets. Version 8.8.9 added the check, and the maker says to install 8.9.1 or newer.",
   "am_i_affected": "You are at risk if Notepad++ is older than 8.9.1. Most home users were not targeted, but you should still update.",
   "action": "Download Notepad++ 8.9.1 or newer from notepad-plus-plus.org",
   "affected": [
    {
     "product": "notepad-plus-plus",
     "product_name": "Notepad++",
     "platform": "windows",
     "affected_versions": "Notepad++ before 8.8.9 (the maker recommends 8.9.1 or newer)",
     "fixed_version": "8.9.1 (first fix in 8.8.9)",
     "fixed_min": "8.9.1",
     "fix_note": null,
     "fixed_source_urls": [
      "https://notepad-plus-plus.org/news/clarification-security-incident/",
      "https://community.notepad-plus-plus.org/topic/27298/notepad-v8-8-9-vulnerability-fix"
     ],
     "check": {
      "menu_path": "Open Notepad++ > ? menu > About Notepad++.",
      "command": "(Get-Item \"$env:ProgramFiles\\Notepad++\\notepad++.exe\").VersionInfo.ProductVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://notepad-plus-plus.org/downloads/"
    }
   ],
   "fix_steps": [
    "Open notepad-plus-plus.org and click Download (type the address yourself).",
    "Download the newest installer and run it.",
    "You can turn off the auto-updater during install if you prefer."
   ],
   "official_patch_links": [
    {
     "label": "Notepad++: official downloads",
     "url": "https://notepad-plus-plus.org/downloads/"
    },
    {
     "label": "Notepad++: security incident note",
     "url": "https://notepad-plus-plus.org/news/clarification-security-incident/"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://notepad-plus-plus.org/news/clarification-security-incident/",
     "title": "Notepad++: Important Clarification: Notepad++ Security Incident",
     "date": "2026-02-05",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://community.notepad-plus-plus.org/topic/27298/notepad-v8-8-9-vulnerability-fix",
     "title": "Notepad++ Community (official): Notepad++ v8.8.9 release notes",
     "date": "2025-12-09",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-15556 (added 2026-02-12)",
     "date": "2026-02-12",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15556",
     "title": "NVD: CVE-2025-15556",
     "date": "2026-02-12",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "office-attacked-bug-jan-2026",
   "url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026/",
   "path": "/incidents/office-attacked-bug-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/office-attacked-bug-jan-2026.json",
   "title": "Microsoft Office: a bug that lets a bad document skip Office's safety checks was used in real attacks",
   "category": "apps",
   "platforms": [
    "windows"
   ],
   "products": [
    "microsoft-office"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists it as used in real attacks (added Jan 26, 2026). Microsoft marks it as exploited.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-01-26",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-21509"
   ],
   "summary": "A bug in Microsoft Office lets a booby-trapped document get around a safety check that normally blocks risky content. Attackers sent such documents by email. Microsoft released fixes in January 2026. Microsoft 365 users get the fix after Office restarts; some older Office versions needed extra steps from Microsoft.",
   "am_i_affected": "You are at risk if you use Office on Windows and it has not updated since January 2026. Older boxed versions (Office 2016 and 2019) needed a separate fix, so check Microsoft's page for your version.",
   "action": "Update Office (January 2026 update or newer)",
   "affected": [
    {
     "product": "microsoft-office",
     "product_name": "Microsoft Office (Word, Excel, Outlook, PowerPoint)",
     "platform": "windows",
     "affected_versions": "Microsoft Office on Windows (Microsoft 365, Office 2016, 2019, 2021 and 2024) without Microsoft's January 2026 fix",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by Microsoft's January 2026 Office updates or any newer update. Microsoft's page lists the fix for each Office version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509"
     ],
     "check": {
      "menu_path": "Open Word (or Excel). Click File > Account > Update Options > Update Now. The version is shown under About Word.",
      "command": "(Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Office\\ClickToRun\\Configuration' -ErrorAction SilentlyContinue).VersionToReport",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    }
   ],
   "fix_steps": [
    "Open Word, Excel or any Office app.",
    "Click File > Account.",
    "Click Update Options > Update Now.",
    "Close all Office apps when asked so the update can finish.",
    "Do not open Office files from emails you did not expect."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: install Office updates",
     "url": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    },
    {
     "label": "Microsoft: CVE-2026-21509 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509",
     "title": "Microsoft Security Update Guide: CVE-2026-21509 (January 2026 update)",
     "date": "2026-01-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-21509 (added 2026-01-26)",
     "date": "2026-01-26",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21509",
     "title": "NVD: CVE-2026-21509",
     "date": "2026-01-26",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "windows-attacked-bugs-jan-2026",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026/",
   "path": "/incidents/windows-attacked-bugs-jan-2026/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-jan-2026.json",
   "title": "Windows: a bug fixed in the January 2026 update was used in real attacks",
   "category": "windows",
   "platforms": [
    "windows"
   ],
   "products": [
    "windows"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists this as used in real attacks (added 2026-01-13). Microsoft's Security Update Guide marks it as exploited.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-01-13",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-20805"
   ],
   "summary": "A bug in the part of Windows that draws windows on the screen lets a bad program read secret data from memory. Attackers use it as one step in a bigger attack. Microsoft fixed it in the January 2026 Windows update. Any newer monthly update also includes the fix.",
   "am_i_affected": "You are at risk only if your Windows PC has not installed any monthly update since January 2026. Open Settings > Windows Update. If it says 'You're up to date', you are covered.",
   "action": "Run Windows Update (January 2026 update or newer)",
   "affected": [
    {
     "product": "windows",
     "product_name": "Windows 10 and 11",
     "platform": "windows",
     "affected_versions": "Windows 10 and 11 PCs without the January 2026 security update or a newer one",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by the January 2026 Windows security update (2026-01-13) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20805"
     ],
     "check": {
      "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
      "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    }
   ],
   "fix_steps": [
    "Open Start > Settings > Windows Update.",
    "Click Check for updates.",
    "Let the updates download and install.",
    "Restart your computer when it asks."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: how to update Windows",
     "url": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    },
    {
     "label": "Microsoft: CVE-2026-20805 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20805"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20805",
     "title": "Microsoft Security Update Guide: CVE-2026-20805 (January 2026 update)",
     "date": "2026-01-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-20805 (added 2026-01-13)",
     "date": "2026-01-13",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20805",
     "title": "NVD: CVE-2026-20805",
     "date": "2026-01-13",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "apple-webkit-attacked-bug-dec-2025",
   "url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025/",
   "path": "/incidents/apple-webkit-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json",
   "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
   "category": "mac",
   "platforms": [
    "macos",
    "ios"
   ],
   "products": [
    "macos",
    "safari",
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Apple says it may have been used in an extremely sophisticated attack against specific people. CISA lists it as used in real attacks (added Dec 15, 2025).",
   "exploited_source_url": "https://support.apple.com/en-us/125886",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2025-12-12",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2025-43529",
    "CVE-2025-14174"
   ],
   "summary": "A bug in WebKit, the engine that shows web pages in Safari and every iPhone browser, let a booby-trapped web page run code on the device. Apple says it was used against specific people. Apple fixed it on December 12, 2025.",
   "am_i_affected": "You are at risk if your Mac runs macOS Tahoe older than 26.2 and Safari older than 26.2, or your iPhone runs iOS 26 older than 26.2.",
   "action": "Update macOS, Safari and iPhone (26.2 or newer)",
   "affected": [
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Tahoe before 26.2",
     "fixed_version": "26.2 (Tahoe)",
     "fixed_min": null,
     "fix_note": "On older macOS (Sequoia, Sonoma), installing Safari 26.2 fixes it.",
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125886",
      "https://support.apple.com/en-us/125892"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "safari",
     "product_name": "Safari",
     "platform": "macos",
     "affected_versions": "Safari before 26.2",
     "fixed_version": "26.2",
     "fixed_min": "26.2",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125892"
     ],
     "check": {
      "menu_path": "Open Safari. Menu bar: Safari > About Safari.",
      "command": "mdls -name kMDItemVersion \"/Applications/Safari.app\"",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS and iPadOS 26 before 26.2",
     "fixed_version": "iOS 26.2",
     "fixed_min": "26.2",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125884"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "Click the Apple menu > System Settings > General > Software Update.",
    "Install the update it offers.",
    "Restart your Mac when asked.",
    "On iPhone or iPad: Settings > General > Software Update."
   ],
   "official_patch_links": [
    {
     "label": "Apple: update macOS on your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple: update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/125886",
     "title": "Apple: About the security content of macOS Tahoe 26.2",
     "date": "2025-12-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/125892",
     "title": "Apple: About the security content of Safari 26.2",
     "date": "2025-12-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/125884",
     "title": "Apple: About the security content of iOS 26.2 and iPadOS 26.2",
     "date": "2025-12-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-43529 (added 2025-12-15)",
     "date": "2025-12-15",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43529",
     "title": "NVD: CVE-2025-43529",
     "date": "2025-12-12",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "chrome-attacked-bug-dec-2025",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025/",
   "path": "/incidents/chrome-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-dec-2025.json",
   "title": "Chrome and Edge (Dec 2025): a bug in the part that draws graphics (ANGLE) was used in real attacks",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome",
    "edge"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Google says it is aware that attacks using CVE-2025-14174 exist. CISA lists it as used in real attacks (added 2025-12-12).",
   "exploited_source_url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2025-12-10",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2025-14174"
   ],
   "summary": "A bad website could use a bug in the part that draws graphics (ANGLE) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 143.0.7499.109. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.",
   "am_i_affected": "You are at risk if Chrome is older than 143.0.7499.109 or Edge has not updated since 2025-12. Newer versions are safe from this one.",
   "action": "Update Chrome to 143.0.7499.109 or newer and restart Edge",
   "affected": [
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome versions before 143.0.7499.109",
     "fixed_version": "143.0.7499.109 or 143.0.7499.110",
     "fixed_min": "143.0.7499.109",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome versions before 143.0.7499.109",
     "fixed_version": "143.0.7499.109 or 143.0.7499.110",
     "fixed_min": "143.0.7499.109",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome versions before 143.0.7499.109",
     "fixed_version": "143.0.7499.109 or 143.0.7499.110",
     "fixed_min": "143.0.7499.109",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "windows",
     "affected_versions": "Edge versions released before Microsoft's matching security update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Microsoft's Edge security release notes list the Edge update that includes the Chromium fix for CVE-2025-14174.",
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.",
      "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "macos",
     "affected_versions": "Edge versions released before Microsoft's matching security update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Microsoft's Edge security release notes list the Edge update that includes the Chromium fix for CVE-2025-14174.",
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.",
      "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    }
   ],
   "fix_steps": [
    "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.",
    "Click Relaunch.",
    "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart."
   ],
   "official_patch_links": [
    {
     "label": "Google: update Chrome",
     "url": "https://support.google.com/chrome/answer/95414"
    },
    {
     "label": "Google Chrome release note",
     "url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html"
    },
    {
     "label": "Microsoft Edge security release notes",
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html",
     "title": "Google Chrome Releases: Stable Channel Update for Desktop (2025-12-10)",
     "date": "2025-12-10",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-14174 (added 2025-12-12)",
     "date": "2025-12-12",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security",
     "title": "Microsoft: Release notes for Microsoft Edge security updates",
     "date": "2025-12-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14174",
     "title": "NVD: CVE-2025-14174",
     "date": "2025-12-10",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "windows-attacked-bugs-dec-2025",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025/",
   "path": "/incidents/windows-attacked-bugs-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-dec-2025.json",
   "title": "Windows: a bug fixed in the December 2025 update was used in real attacks",
   "category": "windows",
   "platforms": [
    "windows"
   ],
   "products": [
    "windows"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists this as used in real attacks (added 2025-12-09). Microsoft's Security Update Guide marks it as exploited.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2025-12-09",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2025-62221"
   ],
   "summary": "A bug in the part of Windows that handles cloud files (like OneDrive) lets a program that is already on your PC take full control of it. Microsoft fixed it in the December 2025 Windows update. Any newer monthly update also includes the fix.",
   "am_i_affected": "You are at risk only if your Windows PC has not installed any monthly update since December 2025. Open Settings > Windows Update. If it says 'You're up to date', you are covered.",
   "action": "Run Windows Update (December 2025 update or newer)",
   "affected": [
    {
     "product": "windows",
     "product_name": "Windows 10 and 11",
     "platform": "windows",
     "affected_versions": "Windows 10 and 11 PCs without the December 2025 security update or a newer one",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by the December 2025 Windows security update (2025-12-09) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62221"
     ],
     "check": {
      "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
      "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    }
   ],
   "fix_steps": [
    "Open Start > Settings > Windows Update.",
    "Click Check for updates.",
    "Let the updates download and install.",
    "Restart your computer when it asks."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: how to update Windows",
     "url": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    },
    {
     "label": "Microsoft: CVE-2025-62221 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62221"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62221",
     "title": "Microsoft Security Update Guide: CVE-2025-62221 (December 2025 update)",
     "date": "2025-12-09",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-62221 (added 2025-12-09)",
     "date": "2025-12-09",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62221",
     "title": "NVD: CVE-2025-62221",
     "date": "2025-12-09",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "chrome-attacked-bug-nov-2025",
   "url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025/",
   "path": "/incidents/chrome-attacked-bug-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/chrome-attacked-bug-nov-2025.json",
   "title": "Chrome and Edge (Nov 2025): a bug in the part that runs website code (V8) was used in real attacks",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome",
    "edge"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Google says it is aware that attacks using CVE-2025-13223 exist. CISA lists it as used in real attacks (added 2025-11-19).",
   "exploited_source_url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2025-11-17",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2025-13223"
   ],
   "summary": "A bad website could use a bug in the part that runs website code (V8) of Chrome to run its own code on your computer. Attackers were already using it. Google fixed it in Chrome 142.0.7444.175. Edge is built on the same code and got the same fix. Both update themselves, but only after you restart the browser.",
   "am_i_affected": "You are at risk if Chrome is older than 142.0.7444.175 or Edge is older than 142.0.3595.90. Newer versions are safe from this one.",
   "action": "Update Chrome to 142.0.7444.175 or newer and restart Edge",
   "affected": [
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome versions before 142.0.7444.175",
     "fixed_version": "142.0.7444.175 (Windows) / 142.0.7444.176 (Mac)",
     "fixed_min": "142.0.7444.175",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome versions before 142.0.7444.175",
     "fixed_version": "142.0.7444.175 (Windows) / 142.0.7444.176 (Mac)",
     "fixed_min": "142.0.7444.175",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome versions before 142.0.7444.175",
     "fixed_version": "142.0.7444.175 (Windows) / 142.0.7444.176 (Mac)",
     "fixed_min": "142.0.7444.175",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "windows",
     "affected_versions": "Edge versions before 142.0.3595.90",
     "fixed_version": "142.0.3595.90",
     "fixed_min": "142.0.3595.90",
     "fix_note": null,
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.",
      "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "macos",
     "affected_versions": "Edge versions before 142.0.3595.90",
     "fixed_version": "142.0.3595.90",
     "fixed_min": "142.0.3595.90",
     "fix_note": null,
     "fixed_source_urls": [
      "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
     ],
     "check": {
      "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.",
      "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    }
   ],
   "fix_steps": [
    "In Chrome, open the three-dot menu > Help > About Google Chrome. It checks and downloads the update.",
    "Click Relaunch.",
    "In Edge, open the three-dot menu > Help and feedback > About Microsoft Edge, then click Restart."
   ],
   "official_patch_links": [
    {
     "label": "Google: update Chrome",
     "url": "https://support.google.com/chrome/answer/95414"
    },
    {
     "label": "Google Chrome release note",
     "url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html"
    },
    {
     "label": "Microsoft Edge security release notes",
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html",
     "title": "Google Chrome Releases: Stable Channel Update for Desktop (2025-11-17)",
     "date": "2025-11-17",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-13223 (added 2025-11-19)",
     "date": "2025-11-19",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security",
     "title": "Microsoft: Release notes for Microsoft Edge security updates",
     "date": "2025-11-18",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13223",
     "title": "NVD: CVE-2025-13223",
     "date": "2025-11-17",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "windows-attacked-bugs-nov-2025",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025/",
   "path": "/incidents/windows-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-nov-2025.json",
   "title": "Windows: bugs fixed in the November 2025 update were used in real attacks",
   "category": "windows",
   "platforms": [
    "windows"
   ],
   "products": [
    "windows"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists both as used in real attacks (CVE-2025-62215 added Nov 12, 2025; CVE-2025-60710 added Apr 13, 2026). Microsoft's Security Update Guide marks them as exploited.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2025-11-11",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2025-62215",
    "CVE-2025-60710"
   ],
   "summary": "Two bugs in Windows let a program that is already on your PC give itself full control of the computer. Both were fixed in the November 2025 update. Microsoft fixed it in the November 2025 Windows update. Any newer monthly update also includes the fix.",
   "am_i_affected": "You are at risk only if your Windows PC has not installed any monthly update since November 2025. Open Settings > Windows Update. If it says 'You're up to date', you are covered.",
   "action": "Run Windows Update (November 2025 update or newer)",
   "affected": [
    {
     "product": "windows",
     "product_name": "Windows 10 and 11",
     "platform": "windows",
     "affected_versions": "Windows 10 and 11 PCs without the November 2025 security update or a newer one",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by the November 2025 Windows security update (2025-11-11) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62215",
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710"
     ],
     "check": {
      "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
      "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    }
   ],
   "fix_steps": [
    "Open Start > Settings > Windows Update.",
    "Click Check for updates.",
    "Let the updates download and install.",
    "Restart your computer when it asks."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: how to update Windows",
     "url": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    },
    {
     "label": "Microsoft: CVE-2025-62215 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62215"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62215",
     "title": "Microsoft Security Update Guide: CVE-2025-62215 (November 2025 update)",
     "date": "2025-11-11",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710",
     "title": "Microsoft Security Update Guide: CVE-2025-60710 (November 2025 update)",
     "date": "2025-11-11",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-62215 (added 2025-11-12)",
     "date": "2025-11-12",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-60710 (added 2026-04-13)",
     "date": "2026-04-13",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62215",
     "title": "NVD: CVE-2025-62215",
     "date": "2025-11-11",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "apple-attacked-bugs-nov-2025",
   "url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025/",
   "path": "/incidents/apple-attacked-bugs-nov-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025.json",
   "title": "Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks",
   "category": "mac",
   "platforms": [
    "macos",
    "ios"
   ],
   "products": [
    "macos",
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA added both to its list of bugs used in real attacks on Mar 20, 2026.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2025-11-03",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2025-43510",
    "CVE-2025-43520"
   ],
   "summary": "Two bugs in the core of Apple's systems let a bad app take more control of a Mac, iPhone or iPad. Apple fixed them in November 2025. In March 2026 the US government said attackers were using them.",
   "am_i_affected": "You are at risk if your Mac runs macOS Tahoe older than 26.1, Sequoia older than 15.7.2 or Sonoma older than 14.8.2, or your iPhone runs iOS 26 older than 26.1.",
   "action": "Update your Mac and iPhone (Nov 2025 updates or newer)",
   "affected": [
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Tahoe before 26.1, Sequoia before 15.7.2, Sonoma before 14.8.2",
     "fixed_version": "26.1 (Tahoe) / 15.7.2 (Sequoia) / 14.8.2 (Sonoma)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125634",
      "https://support.apple.com/en-us/125635",
      "https://support.apple.com/en-us/125636"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS and iPadOS 26 before 26.1",
     "fixed_version": "iOS 26.1",
     "fixed_min": "26.1",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125632"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "Click the Apple menu > System Settings > General > Software Update.",
    "Install the update it offers.",
    "Restart your Mac when asked.",
    "On iPhone or iPad: Settings > General > Software Update."
   ],
   "official_patch_links": [
    {
     "label": "Apple: update macOS on your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple: update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/100100"
    },
    {
     "label": "Apple security releases",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/125634",
     "title": "Apple: About the security content of macOS Tahoe 26.1",
     "date": "2025-11-03",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/125635",
     "title": "Apple: About the security content of macOS Sequoia 15.7.2",
     "date": "2025-11-03",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/125636",
     "title": "Apple: About the security content of macOS Sonoma 14.8.2",
     "date": "2025-11-03",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/125632",
     "title": "Apple: About the security content of iOS 26.1 and iPadOS 26.1",
     "date": "2025-11-03",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-43510, CVE-2025-43520 (added 2026-03-20)",
     "date": "2026-03-20",
     "kind": "cisa",
     "official": true
    }
   ]
  },
  {
   "id": "windows-attacked-bugs-oct-2025",
   "url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025/",
   "path": "/incidents/windows-attacked-bugs-oct-2025/",
   "json_url": "https://patchgap.ai/incidents/windows-attacked-bugs-oct-2025.json",
   "title": "Windows: bugs fixed in the October 2025 update were used in real attacks",
   "category": "windows",
   "platforms": [
    "windows"
   ],
   "products": [
    "windows"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists these as used in real attacks (added 2025-10-14). Microsoft's Security Update Guide marks them as exploited.",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2025-10-14",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2025-24990",
    "CVE-2025-59230"
   ],
   "summary": "Two bugs in Windows let a program that is already on your PC take full control of it. One is in an old modem driver that ships with Windows; Microsoft removed that driver in the October 2025 update. Microsoft fixed it in the October 2025 Windows update. Any newer monthly update also includes the fix.",
   "am_i_affected": "You are at risk only if your Windows PC has not installed any monthly update since October 2025. Open Settings > Windows Update. If it says 'You're up to date', you are covered.",
   "action": "Run Windows Update (October 2025 update or newer)",
   "affected": [
    {
     "product": "windows",
     "product_name": "Windows 10 and 11",
     "platform": "windows",
     "affected_versions": "Windows 10 and 11 PCs without the October 2025 security update or a newer one",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed by the October 2025 Windows security update (2025-10-14) or any newer monthly update. Microsoft's page lists the exact update for each Windows version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24990",
      "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59230"
     ],
     "check": {
      "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
      "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    }
   ],
   "fix_steps": [
    "Open Start > Settings > Windows Update.",
    "Click Check for updates.",
    "Let the updates download and install.",
    "Restart your computer when it asks."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: how to update Windows",
     "url": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    },
    {
     "label": "Microsoft: CVE-2025-24990 details",
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24990"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24990",
     "title": "Microsoft Security Update Guide: CVE-2025-24990 (October 2025 update)",
     "date": "2025-10-14",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59230",
     "title": "Microsoft Security Update Guide: CVE-2025-59230 (October 2025 update)",
     "date": "2025-10-14",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-24990, CVE-2025-59230 (added 2025-10-14)",
     "date": "2025-10-14",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24990",
     "title": "NVD: CVE-2025-24990",
     "date": "2025-10-14",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "winrar-attacked-path-bugs-2025",
   "url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025/",
   "path": "/incidents/winrar-attacked-path-bugs-2025/",
   "json_url": "https://patchgap.ai/incidents/winrar-attacked-path-bugs-2025.json",
   "title": "WinRAR: opening a bad archive could drop a hidden program on your PC, and attackers used it",
   "category": "apps",
   "platforms": [
    "windows"
   ],
   "products": [
    "winrar"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists both bugs as used in real attacks (CVE-2025-8088 added Aug 12, 2025; CVE-2025-6218 added Dec 9, 2025).",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2025-07-30",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2025-6218",
    "CVE-2025-8088"
   ],
   "summary": "WinRAR opens .rar and .zip files. Two bugs let a booby-trapped archive save files outside the folder you chose, for example into your Startup folder so a bad program runs next time you sign in. Attackers sent such files by email. Version 7.13 fixes both. WinRAR does not update itself.",
   "am_i_affected": "You are at risk if WinRAR on Windows is older than 7.13. Mac and Android versions are not affected.",
   "action": "Install WinRAR 7.13 or newer from win-rar.com",
   "affected": [
    {
     "product": "winrar",
     "product_name": "WinRAR",
     "platform": "windows",
     "affected_versions": "WinRAR for Windows before 7.13 (one bug before 7.12)",
     "fixed_version": "7.13",
     "fixed_min": "7.13",
     "fix_note": null,
     "fixed_source_urls": [
      "https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5"
     ],
     "check": {
      "menu_path": "Open WinRAR > Help > About WinRAR.",
      "command": "(Get-Item \"$env:ProgramFiles\\WinRAR\\WinRAR.exe\").VersionInfo.ProductVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.win-rar.com/download.html"
    }
   ],
   "fix_steps": [
    "Go to win-rar.com (type the address yourself) and open Download.",
    "Download WinRAR 7.13 or newer and run the installer over your old version.",
    "Do not open archives from emails you did not expect."
   ],
   "official_patch_links": [
    {
     "label": "WinRAR: official download",
     "url": "https://www.win-rar.com/download.html"
    },
    {
     "label": "WinRAR 7.13 release note",
     "url": "https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5",
     "title": "WinRAR News: WinRAR 7.13 Final released (CVE-2025-8088)",
     "date": "2025-07-30",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=276&cHash=b5165454d983fc9717bc8748901a64f9",
     "title": "WinRAR News: WinRAR 7.12 Beta 1 released (fix for CVE-2025-6218)",
     "date": "2025-06-10",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-6218 (added 2025-12-09)",
     "date": "2025-12-09",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-8088 (added 2025-08-12)",
     "date": "2025-08-12",
     "kind": "cisa",
     "official": true
    }
   ]
  },
  {
   "id": "apple-webkit-pointer-auth-cve-2024-27834",
   "url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "path": "/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834.json",
   "title": "Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes.",
   "category": "browsers",
   "platforms": [
    "macos",
    "ios"
   ],
   "products": [
    "safari",
    "macos",
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists it as used in real attacks (added Nov 4, 2026).",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2024-05-13",
   "updated_at": "2026-11-04",
   "cves": [
    "CVE-2024-27834"
   ],
   "summary": "Apple fixed a browser engine bug in May 2024. On November 4, 2026, CISA said that bug is being used in real attacks. If you installed Apple updates from May 2024 or later, you already have the fix. This mainly matters for a Mac, iPhone, or iPad that has not updated since before mid-May 2024.",
   "am_i_affected": "You are at risk only if your device never got the May 2024 updates: Safari older than 17.5, macOS Sonoma older than 14.5 (or Ventura older than 13.6.7, Monterey older than 12.7.5), or iPhone/iPad older than iOS 17.5 / 16.7.8. On a Mac check Apple menu > About This Mac and Safari > About Safari. On an iPhone go to Settings > General > About.",
   "action": "Install any Apple update from May 2024 or later (most people already did)",
   "affected": [
    {
     "product": "safari",
     "product_name": "Safari",
     "platform": "macos",
     "affected_versions": "Safari before 17.5 (on macOS Monterey and Ventura standalone Safari updates)",
     "fixed_version": "Safari 17.5",
     "fixed_min": "17.5",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/120896"
     ],
     "check": {
      "menu_path": "Open Safari. Menu bar: Safari > About Safari.",
      "command": "mdls -name kMDItemVersion \"/Applications/Safari.app\"",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Sonoma before 14.5; Ventura before 13.6.7; Monterey before 12.7.5",
     "fixed_version": "14.5 (Sonoma) / 13.6.7 (Ventura) / 12.7.5 (Monterey)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/120903",
      "https://support.apple.com/en-us/120900",
      "https://support.apple.com/en-us/120899"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS/iPadOS before 17.5, and older devices before 16.7.8",
     "fixed_version": "iOS/iPadOS 17.5 or 16.7.8",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/120905",
      "https://support.apple.com/en-us/120898"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "On a Mac: Apple menu > System Settings > General > Software Update, then install what it offers and restart if asked.",
    "On an iPhone or iPad: Settings > General > Software Update, then install what it offers.",
    "If Safari updates on its own for older Macs: open Software Update the same way, or open Safari > About Safari after updating."
   ],
   "official_patch_links": [
    {
     "label": "Apple: update macOS on your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple: update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/120896",
     "title": "Apple: About the security content of Safari 17.5",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120903",
     "title": "Apple: About the security content of macOS Sonoma 14.5",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120900",
     "title": "Apple: About the security content of macOS Ventura 13.6.7",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120899",
     "title": "Apple: About the security content of macOS Monterey 12.7.5",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120905",
     "title": "Apple: About the security content of iOS 17.5 and iPadOS 17.5",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120898",
     "title": "Apple: About the security content of iOS 16.7.8 and iPadOS 16.7.8",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2024-27834 (added 2026-11-04)",
     "date": "2026-11-04",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog",
     "title": "CISA alert: Adds One Known Exploited Vulnerability to Catalog (CVE-2024-27834)",
     "date": "2026-11-04",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27834",
     "title": "NVD: CVE-2024-27834",
     "date": "2024-05-14",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "windows-secure-boot-blackx-bootkit",
   "url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit/",
   "path": "/incidents/windows-secure-boot-blackx-bootkit/",
   "json_url": "https://patchgap.ai/incidents/windows-secure-boot-blackx-bootkit.json",
   "title": "Windows: a hidden start-up virus (BlackX) works even on updated PCs, unless one extra step is done",
   "category": "windows",
   "platforms": [
    "windows"
   ],
   "products": [
    "windows"
   ],
   "status": "partial",
   "status_label": "Partly patched",
   "severity": "medium",
   "severity_source": "NVD score 4.4 for the old bug it uses (CVE-2022-21894). Real attacks so far hit government targets.",
   "exploited_in_wild": "yes",
   "exploited_note": "Kaspersky says it found BlackX used in a spying campaign against government offices in Central Asia in early 2026.",
   "exploited_source_url": "https://securelist.com/uefi-bootkit-blackx/121539/",
   "confidence": "unconfirmed",
   "confidence_note": "The attacks come from Kaspersky's research report. Microsoft has not published anything about BlackX itself. Microsoft's own guide confirms the extra step is off by default.",
   "first_reported": "2026-10-22",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2022-21894"
   ],
   "summary": "Secure Boot is a lock that checks your computer's start-up files. Researchers at Kaspersky found a virus called BlackX that gets past this lock. It uses an old bug that Microsoft fixed in 2023, but the fix is not fully switched on unless an extra step is done by hand. The attacks found so far hit government targets, so most home users are at low risk. Still, it is worth knowing about.",
   "am_i_affected": "Probably not a big risk for a home computer, but it could be if your PC uses Secure Boot and the extra Microsoft step was never done. A read-only check is below. Ask an IT helper before you change anything, because the wrong steps can stop old recovery drives from working.",
   "action": "Windows: install updates, then check the extra Secure Boot step",
   "affected": [
    {
     "product": "windows",
     "product_name": "Windows 10 and 11",
     "platform": "windows",
     "affected_versions": "Windows PCs with Secure Boot where Microsoft's extra 'revocation' step was never turned on",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Microsoft's protection is in updates from July 9, 2024 and later, but it is NOT turned on by default. You must turn it on by following Microsoft's guide.",
     "fixed_source_urls": [
      "https://support.microsoft.com/en-us/servicing/os/windows/2023/03/how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023"
     ],
     "check": {
      "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
      "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    }
   ],
   "fix_steps": [
    "First install all Windows updates (Settings > Windows Update).",
    "Make a backup of your important files.",
    "Read Microsoft's guide (link below) before changing anything. Microsoft warns that turning this on can make older start-up or recovery drives stop working.",
    "If you are not comfortable with these steps, ask an IT helper. Do not skip the backup.",
    "Run the read-only check to see if the change is already on."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: how to manage the Windows Boot Manager revocations (KB5025885)",
     "url": "https://support.microsoft.com/en-us/servicing/os/windows/2023/03/how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023"
    }
   ],
   "extra_checks": [
    {
     "platform": "windows",
     "label": "Is the old Windows start-up certificate already blocked? (True = blocked, False = not yet). Needs 'Run as administrator'.",
     "command": "[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI dbx).bytes) -match 'Microsoft Windows Production PCA 2011'",
     "shell": "PowerShell (Admin)",
     "read_only": true
    }
   ],
   "sources": [
    {
     "url": "https://securelist.com/uefi-bootkit-blackx/121539/",
     "title": "Kaspersky Securelist: BlackX bootkit",
     "date": "2026-10-22",
     "kind": "research",
     "official": false
    },
    {
     "url": "https://support.microsoft.com/en-us/servicing/os/windows/2023/03/how-to-manage-the-windows-boot-manager-revocations-for-secure-boot-changes-associated-with-cve-2023",
     "title": "Microsoft: Windows Boot Manager revocations for Secure Boot (KB5025885)",
     "date": "2023-05-09",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21894",
     "title": "NVD: CVE-2022-21894",
     "date": "2022-01-11",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "popcorn-time-time4popcorn-dead-updater",
   "url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater/",
   "path": "/incidents/popcorn-time-time4popcorn-dead-updater/",
   "json_url": "https://patchgap.ai/incidents/popcorn-time-time4popcorn-dead-updater.json",
   "title": "Popcorn Time (Time4Popcorn): the app's updater is open to takeover. There is no fix. Remove it.",
   "category": "apps",
   "platforms": [
    "windows",
    "macos"
   ],
   "products": [
    "time4popcorn"
   ],
   "status": "no-patch",
   "status_label": "No patch yet",
   "severity": "critical",
   "severity_source": "NVD score 9.8 out of 10 (CVE-2026-30612)",
   "exploited_in_wild": "unknown",
   "exploited_note": "A security company (Eye Research) used the hole to switch the updater off, from Nov 2025 to Mar 2026. We found no report of criminals using it.",
   "exploited_source_url": "https://labs.eye.security/operation-ixim-preventing-a-botnet-of-millions-of-popcorn-time-users/",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-08-27",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-30612"
   ],
   "summary": "Time4Popcorn is an old movie-streaming app. Its updater looked for updates at a web address nobody owned any more and did not check who sent the update. Anyone who took over that address could send code to every computer with the app. A security company found this and switched the updater off. The app is no longer kept up to date, so there is no real fix. The safe move is to remove it.",
   "am_i_affected": "You are affected if you ever installed Popcorn Time or Time4Popcorn on Windows or Mac. Check Start > Settings > Apps (Windows) or Finder > Applications (Mac).",
   "action": "Remove Popcorn Time (Time4Popcorn). There is no fix",
   "affected": [
    {
     "product": "time4popcorn",
     "product_name": "Popcorn Time (Time4Popcorn)",
     "platform": "windows",
     "affected_versions": "Time4Popcorn for Windows 6.2.1.18 and older",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "No fixed version exists.",
     "fixed_source_urls": [
      "https://nvd.nist.gov/vuln/detail/CVE-2026-30612"
     ],
     "check": {
      "menu_path": "Start > Settings > Apps > Installed apps. Search for \"Popcorn\".",
      "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Popcorn*' | Select-Object DisplayName,DisplayVersion; Get-Process | Where-Object ProcessName -like '*popcorn*' | Select-Object ProcessName,Id",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": null
    },
    {
     "product": "time4popcorn",
     "product_name": "Popcorn Time (Time4Popcorn)",
     "platform": "macos",
     "affected_versions": "Time4Popcorn for Mac 6.2.1.17 and older",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "No fixed version exists.",
     "fixed_source_urls": [
      "https://nvd.nist.gov/vuln/detail/CVE-2026-30612"
     ],
     "check": {
      "menu_path": "Open Finder > Applications and look for Popcorn Time or Time4Popcorn.",
      "command": "ls /Applications | grep -i popcorn",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": null
    }
   ],
   "fix_steps": [
    "Close the app.",
    "Windows: Start > Settings > Apps > Installed apps. Find Popcorn Time or Time4Popcorn, click the three dots, then Uninstall.",
    "Mac: open Finder > Applications, drag the app to the Trash, then empty the Trash.",
    "Run a scan with your antivirus after you remove it.",
    "Change important passwords if you are worried. Do this from another, clean device."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: uninstall apps in Windows",
     "url": "https://support.microsoft.com/windows/uninstall-or-remove-apps-and-programs-in-windows-4b55f974-2cc6-2d2b-d092-5905080eaf98"
    },
    {
     "label": "Apple: uninstall apps on your Mac",
     "url": "https://support.apple.com/guide/mac-help/uninstall-apps-mh35835/mac"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30612",
     "title": "NVD: CVE-2026-30612 (Time4Popcorn)",
     "date": "2026-08-27",
     "kind": "nvd",
     "official": true
    },
    {
     "url": "https://labs.eye.security/operation-ixim-preventing-a-botnet-of-millions-of-popcorn-time-users/",
     "title": "Eye Research: Operation IXIM, preventing a botnet of millions of Popcorn Time users",
     "date": "2026-10-22",
     "kind": "research",
     "official": false
    }
   ]
  },
  {
   "id": "chrome-157-nov-3-security-fixes",
   "url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes/",
   "path": "/incidents/chrome-157-nov-3-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-157-nov-3-security-fixes.json",
   "title": "Google Chrome 157 fixes 213 security bugs (Nov 3). Restart Chrome to get it.",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "critical",
   "severity_source": "Google rates seven of the fixed bugs 'Critical' in its release notes.",
   "exploited_in_wild": "no",
   "exploited_note": "Chrome's release notes do not say any of the bugs are being attacked.",
   "exploited_source_url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-11-03",
   "updated_at": "2026-11-03",
   "cves": [],
   "summary": "Google moved Chrome to version 157 on November 3, 2026. It fixes 213 security bugs, and seven are rated 'Critical', which means a bad web page could take over parts of your computer. Google says the update rolls out over the coming days and weeks, and it only works after you close and re-open Chrome.",
   "am_i_affected": "You are at risk if Chrome is older than version 157.0.8103.38. Click the three dots > Help > About Google Chrome to see your version.",
   "action": "Update Chrome to 157.0.8103.38 or newer",
   "affected": [
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome before 157.0.8103.38",
     "fixed_version": "157.0.8103.38 or 157.0.8103.39",
     "fixed_min": "157.0.8103.38",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome before 157.0.8103.38",
     "fixed_version": "157.0.8103.38 or 157.0.8103.39",
     "fixed_min": "157.0.8103.38",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome before 157.0.8103.38",
     "fixed_version": "157.0.8103.38",
     "fixed_min": "157.0.8103.38",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    }
   ],
   "fix_steps": [
    "Open Chrome.",
    "Click the three dots at the top right > Help > About Google Chrome.",
    "Wait while Chrome gets the update. If it says Chrome is up to date on 156, check again in a day or two, since Google sends it out slowly.",
    "Click Relaunch.",
    "Check that the version number is 157.0.8103.38 or higher."
   ],
   "official_patch_links": [
    {
     "label": "Google: how to update Chrome",
     "url": "https://support.google.com/chrome/answer/95414"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html",
     "title": "Chrome Releases: Stable Channel Update for Desktop (Nov 3, 2026)",
     "date": "2026-11-03",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "chrome-156-oct-29-security-fixes",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes/",
   "path": "/incidents/chrome-156-oct-29-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-29-security-fixes.json",
   "title": "Google Chrome update fixes 21 more security bugs (Oct 29). Restart Chrome to get it.",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "critical",
   "severity_source": "Google rates one of the fixed bugs 'Critical' and most of the rest 'High' in its release notes.",
   "exploited_in_wild": "no",
   "exploited_note": "Chrome's release notes do not say any of the bugs are being attacked.",
   "exploited_source_url": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-29",
   "updated_at": "2026-10-29",
   "cves": [],
   "summary": "Google released another Chrome update on October 29, 2026. It fixes 21 security bugs. One is rated 'Critical', which means a bad web page could take over parts of your computer. Chrome downloads the update by itself over the next days, but it only works after you close and re-open Chrome.",
   "am_i_affected": "You are at risk if Chrome is older than version 156.0.8078.79. Click the three dots > Help > About Google Chrome to see your version.",
   "action": "Update Chrome to 156.0.8078.79 or newer",
   "affected": [
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome before 156.0.8078.79",
     "fixed_version": "156.0.8078.79 or 156.0.8078.80",
     "fixed_min": "156.0.8078.79",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome before 156.0.8078.79",
     "fixed_version": "156.0.8078.79 or 156.0.8078.80",
     "fixed_min": "156.0.8078.79",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome before 156.0.8078.79",
     "fixed_version": "156.0.8078.79",
     "fixed_min": "156.0.8078.79",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    }
   ],
   "fix_steps": [
    "Open Chrome.",
    "Click the three dots at the top right > Help > About Google Chrome.",
    "Wait while Chrome gets the update.",
    "Click Relaunch.",
    "Check that the version number is 156.0.8078.79 or higher."
   ],
   "official_patch_links": [
    {
     "label": "Google: how to update Chrome",
     "url": "https://support.google.com/chrome/answer/95414"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html",
     "title": "Chrome Releases: Stable Channel Update for Desktop (Oct 29, 2026)",
     "date": "2026-10-29",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "chrome-156-oct-27-security-fixes",
   "url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes/",
   "path": "/incidents/chrome-156-oct-27-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-oct-27-security-fixes.json",
   "title": "Google Chrome update fixes 52 more security bugs (Oct 27). Restart Chrome to get it.",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "critical",
   "severity_source": "Google rates several of the fixed bugs 'Critical' in its release notes.",
   "exploited_in_wild": "no",
   "exploited_note": "Chrome's release notes do not say any of the bugs are being attacked.",
   "exploited_source_url": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-27",
   "updated_at": "2026-10-28",
   "cves": [],
   "summary": "Google released a new Chrome update on October 27, 2026. It fixes 52 security bugs. Four are rated 'Critical', which means a bad web page could take over parts of your computer. Chrome downloads the update by itself over the next days, but it only works after you close and re-open Chrome.",
   "am_i_affected": "You are at risk if Chrome is older than version 156.0.8078.73. Click the three dots > Help > About Google Chrome to see your version.",
   "action": "Update Chrome to 156.0.8078.73 or newer",
   "affected": [
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome before 156.0.8078.73",
     "fixed_version": "156.0.8078.73 or 156.0.8078.74",
     "fixed_min": "156.0.8078.73",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome before 156.0.8078.73",
     "fixed_version": "156.0.8078.73 or 156.0.8078.74",
     "fixed_min": "156.0.8078.73",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome before 156.0.8078.73",
     "fixed_version": "156.0.8078.73",
     "fixed_min": "156.0.8078.73",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    }
   ],
   "fix_steps": [
    "Open Chrome.",
    "Click the three dots at the top right > Help > About Google Chrome.",
    "Wait while Chrome gets the update.",
    "Click Relaunch.",
    "Check that the version number is 156.0.8078.73 or higher."
   ],
   "official_patch_links": [
    {
     "label": "Google: how to update Chrome",
     "url": "https://support.google.com/chrome/answer/95414"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html",
     "title": "Chrome Releases: Stable Channel Update for Desktop (Oct 27, 2026)",
     "date": "2026-10-27",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "chrome-156-security-fixes",
   "url": "https://patchgap.ai/incidents/chrome-156-security-fixes/",
   "path": "/incidents/chrome-156-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/chrome-156-security-fixes.json",
   "title": "Google Chrome 156 fixes 353 security bugs. Restart Chrome to get it.",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "critical",
   "severity_source": "Google rates several of the fixed bugs 'Critical' in its release notes.",
   "exploited_in_wild": "no",
   "exploited_note": "Chrome's release notes do not say any of the bugs are being attacked.",
   "exploited_source_url": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-20",
   "updated_at": "2026-10-27",
   "cves": [],
   "summary": "Google released Chrome 156 on October 20, 2026. It fixes 353 security bugs. Several are rated 'Critical', which means a bad web page could take over parts of your computer. Chrome downloads the update by itself, but it only works after you close and re-open Chrome.",
   "am_i_affected": "You are at risk if Chrome is older than version 156.0.8078.47. Click the three dots > Help > About Google Chrome to see your version.",
   "action": "Update Chrome to 156.0.8078.47 or newer",
   "affected": [
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome before 156.0.8078.47",
     "fixed_version": "156.0.8078.47 or 156.0.8078.48",
     "fixed_min": "156.0.8078.47",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome before 156.0.8078.47",
     "fixed_version": "156.0.8078.47 or 156.0.8078.48",
     "fixed_min": "156.0.8078.47",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome before 156.0.8078.47",
     "fixed_version": "156.0.8078.47",
     "fixed_min": "156.0.8078.47",
     "fix_note": null,
     "fixed_source_urls": [
      "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    }
   ],
   "fix_steps": [
    "Open Chrome.",
    "Click the three dots at the top right > Help > About Google Chrome.",
    "Wait while Chrome gets the update.",
    "Click Relaunch.",
    "Check that the version number now starts with 156."
   ],
   "official_patch_links": [
    {
     "label": "Google: how to update Chrome",
     "url": "https://support.google.com/chrome/answer/95414"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html",
     "title": "Chrome Releases: Stable Channel Update for Desktop (Chrome 156)",
     "date": "2026-10-20",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "signal-desktop-call-hang-up-bug",
   "url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug/",
   "path": "/incidents/signal-desktop-call-hang-up-bug/",
   "json_url": "https://patchgap.ai/incidents/signal-desktop-call-hang-up-bug.json",
   "title": "Signal Desktop: update so calls end when you hang up",
   "category": "apps",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "signal-desktop"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "critical",
   "severity_source": "NVD score 9.3 out of 10 (not yet fully reviewed by NVD).",
   "exploited_in_wild": "unknown",
   "exploited_note": "No report that anyone is using this bug.",
   "exploited_source_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113380",
   "confidence": "unconfirmed",
   "confidence_note": "NVD names the Signal call library (RingRTC), not each Signal app. Signal Desktop uses this library, so it is very likely affected, but Signal has not published a notice we could find.",
   "first_reported": "2026-10-20",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-113380"
   ],
   "summary": "Signal's calling code had a bug. Someone on the other end of a call could overload it so your 'hang up' did not fully end the call. News reports said your microphone or camera could stay on. Signal fixed the calling code in version 2.72.0, and Signal Desktop 8.31.0 and newer include the fixed library.",
   "am_i_affected": "You may be at risk if you use Signal Desktop older than 8.31.0. Open Signal and check Help > About Signal Desktop. We have only checked 8.31.0 and later, so an earlier version might also be fixed, but we cannot confirm it.",
   "action": "Update Signal Desktop to 8.31.0",
   "affected": [
    {
     "product": "signal-desktop",
     "product_name": "Signal Desktop",
     "platform": "windows",
     "affected_versions": "Signal Desktop older than 8.31.0 (earlier builds not checked)",
     "fixed_version": "8.31.0",
     "fixed_min": "8.31.0",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/signalapp/Signal-Desktop/blob/v8.31.0/package.json",
      "https://github.com/signalapp/Signal-Desktop/blob/v8.32.0/package.json"
     ],
     "check": {
      "menu_path": "Open Signal. Windows and Linux: Help > About Signal Desktop. Mac: Signal > About Signal Desktop.",
      "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Signal*' | Select-Object DisplayName,DisplayVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://signal.org/download/"
    },
    {
     "product": "signal-desktop",
     "product_name": "Signal Desktop",
     "platform": "macos",
     "affected_versions": "Signal Desktop older than 8.31.0 (earlier builds not checked)",
     "fixed_version": "8.31.0",
     "fixed_min": "8.31.0",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/signalapp/Signal-Desktop/blob/v8.31.0/package.json",
      "https://github.com/signalapp/Signal-Desktop/blob/v8.32.0/package.json"
     ],
     "check": {
      "menu_path": "Open Signal. Menu bar: Signal > About Signal Desktop.",
      "command": "defaults read \"/Applications/Signal.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://signal.org/download/"
    },
    {
     "product": "signal-desktop",
     "product_name": "Signal Desktop",
     "platform": "linux",
     "affected_versions": "Signal Desktop older than 8.31.0 (earlier builds not checked)",
     "fixed_version": "8.31.0",
     "fixed_min": "8.31.0",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/signalapp/Signal-Desktop/blob/v8.31.0/package.json",
      "https://github.com/signalapp/Signal-Desktop/blob/v8.32.0/package.json"
     ],
     "check": {
      "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://signal.org/download/"
    }
   ],
   "fix_steps": [
    "Open Signal Desktop. It normally updates itself and asks you to restart.",
    "If it did not, download the newest version from signal.org.",
    "Check Help > About Signal Desktop shows 8.31.0 or newer.",
    "When a call ends, check that your microphone and camera lights go off."
   ],
   "official_patch_links": [
    {
     "label": "Signal: official download",
     "url": "https://signal.org/download/"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113380",
     "title": "NVD: CVE-2026-113380 (RingRTC before 2.72.0)",
     "date": "2026-10-20",
     "kind": "nvd",
     "official": true
    },
    {
     "url": "https://github.com/signalapp/Signal-Desktop/blob/v8.31.0/package.json",
     "title": "Signal Desktop v8.31.0 package.json (uses RingRTC 2.72.1)",
     "date": "2026-10-15",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://github.com/signalapp/Signal-Desktop/blob/v8.32.0/package.json",
     "title": "Signal Desktop v8.32.0 package.json (uses RingRTC 2.72.1)",
     "date": "2026-10-20",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "opencode-windows-sign-in-code-run",
   "url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run/",
   "path": "/incidents/opencode-windows-sign-in-code-run/",
   "json_url": "https://patchgap.ai/incidents/opencode-windows-sign-in-code-run.json",
   "title": "OpenCode AI helper on Windows: a bad connected tool could run code when you sign in",
   "category": "ai",
   "platforms": [
    "windows"
   ],
   "products": [
    "opencode"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "critical",
   "severity_source": "Proposed 9.8 by the researchers at Pillar Security. There is no official score.",
   "exploited_in_wild": "no",
   "exploited_note": "No report that anyone has used this bug.",
   "exploited_source_url": "https://thehackernews.com/2026/10/opencode-flaw-lets-malicious-mcp.html",
   "confidence": "unconfirmed",
   "confidence_note": "OpenCode's makers did not publish a security notice or a CVE. The fix version comes from the researchers' report and the project's release page, which does not mention a security fix.",
   "first_reported": "2026-10-19",
   "updated_at": "2026-10-27",
   "cves": [],
   "summary": "OpenCode is an AI helper that works with code. It can connect to outside tools (called MCP servers). On Windows and in WSL, a bad or hijacked tool could make OpenCode run a command on your computer when you start a sign-in to that tool. News reports say version 1.18.33 fixes it, but OpenCode's makers did not announce it.",
   "am_i_affected": "You may be at risk if you use OpenCode on Windows (or in WSL) between version 1.0.137 and 1.18.32 and you connect it to outside tools that need sign-in. Mac and Linux are not affected, according to the report.",
   "action": "Update OpenCode to 1.18.33",
   "affected": [
    {
     "product": "opencode",
     "product_name": "OpenCode",
     "platform": "windows",
     "affected_versions": "OpenCode 1.0.137 to 1.18.32 on Windows and WSL (per researchers)",
     "fixed_version": "1.18.33",
     "fixed_min": "1.18.33",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/anomalyco/opencode/releases/tag/v1.18.33"
     ],
     "check": {
      "menu_path": "Open PowerShell and type the command below.",
      "command": "opencode --version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://github.com/anomalyco/opencode/releases"
    }
   ],
   "fix_steps": [
    "Update OpenCode to 1.18.33 or newer.",
    "Check that opencode --version shows the new version.",
    "Only connect OpenCode to outside tools you trust. Do not start a sign-in to a tool you do not trust."
   ],
   "official_patch_links": [
    {
     "label": "OpenCode releases (official GitHub)",
     "url": "https://github.com/anomalyco/opencode/releases/tag/v1.18.33"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://github.com/anomalyco/opencode/releases/tag/v1.18.33",
     "title": "OpenCode release v1.18.33",
     "date": "2026-09-28",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://thehackernews.com/2026/10/opencode-flaw-lets-malicious-mcp.html",
     "title": "The Hacker News: OpenCode flaw lets malicious MCP servers run code on Windows and WSL",
     "date": "2026-10-22",
     "kind": "press",
     "official": false
    }
   ]
  },
  {
   "id": "firefox-159-security-fixes",
   "url": "https://patchgap.ai/incidents/firefox-159-security-fixes/",
   "path": "/incidents/firefox-159-security-fixes/",
   "json_url": "https://patchgap.ai/incidents/firefox-159-security-fixes.json",
   "title": "Firefox 159 fixes 167 security bugs, and 159.0.1 fixes one more",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "firefox"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Mozilla rates the advisory 'high'.",
   "exploited_in_wild": "unknown",
   "exploited_note": "Mozilla's advisory does not say any of these bugs are being attacked.",
   "exploited_source_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-27",
   "updated_at": "2026-11-03",
   "cves": [
    "CVE-2026-117861",
    "CVE-2026-120572"
   ],
   "summary": "Mozilla released Firefox 159 on October 27, 2026. It fixes 167 security bugs. 13 of them could let a bad web page break out of the safety box Firefox keeps web pages in. On November 3, 2026, Mozilla released Firefox 159.0.1, which fixes one more serious bug in how Firefox lays out web pages. Firefox usually updates itself. You can start the update by hand.",
   "am_i_affected": "You are at risk if Firefox is older than version 159.0.1. People who use the long-term release (ESR) need ESR 153.6 or ESR 115.44.",
   "action": "Update Firefox to 159.0.1 (or ESR 153.6 / 115.44)",
   "affected": [
    {
     "product": "firefox",
     "product_name": "Mozilla Firefox",
     "platform": "windows",
     "affected_versions": "Firefox before 159.0.1; Firefox ESR before 153.6; ESR 115 before 115.44",
     "fixed_version": "159.0.1 (ESR: 153.6 or 115.44)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/",
      "https://www.mozilla.org/en-US/security/advisories/mfsa2026-123/",
      "https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/",
      "https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/"
     ],
     "check": {
      "menu_path": "Click the three lines at the top right > Help > About Firefox. Firefox checks for updates there.",
      "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Mozilla Firefox*' | Select-Object DisplayName,DisplayVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.mozilla.org/firefox/new/"
    },
    {
     "product": "firefox",
     "product_name": "Mozilla Firefox",
     "platform": "macos",
     "affected_versions": "Firefox before 159.0.1; Firefox ESR before 153.6; ESR 115 before 115.44",
     "fixed_version": "159.0.1 (ESR: 153.6 or 115.44)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/",
      "https://www.mozilla.org/en-US/security/advisories/mfsa2026-123/",
      "https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/",
      "https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/"
     ],
     "check": {
      "menu_path": "Firefox menu bar: Firefox > About Firefox.",
      "command": "defaults read \"/Applications/Firefox.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.mozilla.org/firefox/new/"
    },
    {
     "product": "firefox",
     "product_name": "Mozilla Firefox",
     "platform": "linux",
     "affected_versions": "Firefox before 159.0.1; Firefox ESR before 153.6; ESR 115 before 115.44",
     "fixed_version": "159.0.1 (ESR: 153.6 or 115.44)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/",
      "https://www.mozilla.org/en-US/security/advisories/mfsa2026-123/",
      "https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/",
      "https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/"
     ],
     "check": {
      "menu_path": "Firefox menu > Help > About Firefox.",
      "command": "firefox --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.mozilla.org/firefox/new/"
    }
   ],
   "fix_steps": [
    "Open Firefox.",
    "Click the three lines at the top right > Help > About Firefox.",
    "Wait while it downloads the update.",
    "Click Restart to update Firefox."
   ],
   "official_patch_links": [
    {
     "label": "Mozilla: download Firefox",
     "url": "https://www.mozilla.org/firefox/new/"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/",
     "title": "Mozilla: Security fixes in Firefox 159 (MFSA 2026-118)",
     "date": "2026-10-27",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-123/",
     "title": "Mozilla: Security fix in Firefox 159.0.1 (MFSA 2026-123)",
     "date": "2026-11-03",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/",
     "title": "Mozilla: Security fixes in Firefox ESR 115.44 (MFSA 2026-119)",
     "date": "2026-10-27",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/",
     "title": "Mozilla: Security fixes in Firefox ESR 153.6 (MFSA 2026-120)",
     "date": "2026-10-27",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-117861",
     "title": "NVD: CVE-2026-117861 (one of the safety-box bugs)",
     "date": "2026-10-27",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "teamviewer-15-83-security-update",
   "url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update/",
   "path": "/incidents/teamviewer-15-83-security-update/",
   "json_url": "https://patchgap.ai/incidents/teamviewer-15-83-security-update.json",
   "title": "TeamViewer: update to version 15.83. A bad remote session could run code on your computer.",
   "category": "apps",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "teamviewer"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "TeamViewer rates it up to 8.8 out of 10 (High).",
   "exploited_in_wild": "no",
   "exploited_note": "TeamViewer says it is not aware of any attacks in the wild.",
   "exploited_source_url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-27",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-92372",
    "CVE-2026-92374",
    "CVE-2026-111585"
   ],
   "summary": "TeamViewer lets people control a computer from far away. On Oct 27, 2026 it fixed bugs in the app. On Mac and Linux, a bad remote session or a bad session recording file could run a program on your computer. Another bug could let someone with a basic account on a Mac gain full control. A bug on all systems could crash the app or run code if you connect to a bad computer. Version 15.83 fixes these.",
   "am_i_affected": "You are at risk if you have TeamViewer older than 15.83. Open TeamViewer and click Help > About TeamViewer to see your version.",
   "action": "Update TeamViewer to 15.83",
   "affected": [
    {
     "product": "teamviewer",
     "product_name": "TeamViewer",
     "platform": "windows",
     "affected_versions": "TeamViewer Full Client older than 15.83",
     "fixed_version": "15.83",
     "fixed_min": "15.83",
     "fix_note": null,
     "fixed_source_urls": [
      "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/"
     ],
     "check": {
      "menu_path": "Open TeamViewer. Click Help > About TeamViewer (or the gear icon > About).",
      "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*TeamViewer*' | Select-Object DisplayName,DisplayVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.teamviewer.com/download/"
    },
    {
     "product": "teamviewer",
     "product_name": "TeamViewer",
     "platform": "macos",
     "affected_versions": "TeamViewer Full Client and Host older than 15.83",
     "fixed_version": "15.83",
     "fixed_min": "15.83",
     "fix_note": null,
     "fixed_source_urls": [
      "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/"
     ],
     "check": {
      "menu_path": "Open TeamViewer. Menu bar: TeamViewer > About TeamViewer.",
      "command": "defaults read \"/Applications/TeamViewer.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.teamviewer.com/download/"
    },
    {
     "product": "teamviewer",
     "product_name": "TeamViewer",
     "platform": "linux",
     "affected_versions": "TeamViewer Full Client older than 15.83",
     "fixed_version": "15.83",
     "fixed_min": "15.83",
     "fix_note": null,
     "fixed_source_urls": [
      "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/"
     ],
     "check": {
      "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://www.teamviewer.com/download/"
    }
   ],
   "fix_steps": [
    "Open TeamViewer.",
    "Click Help > Check for new version (or the update message inside the app).",
    "Or go to the official download page and install the newest version.",
    "Only connect to computers you know and trust until you have updated."
   ],
   "official_patch_links": [
    {
     "label": "TeamViewer: official download",
     "url": "https://www.teamviewer.com/download/"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/",
     "title": "TeamViewer bulletin TV-2026-1011: Security update for TeamViewer clients",
     "date": "2026-10-27",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/",
     "title": "TeamViewer bulletin TV-2026-1012: Remote Management add-ons",
     "date": "2026-10-27",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "macos-27-2-security-updates-oct-26",
   "url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26/",
   "path": "/incidents/macos-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26.json",
   "title": "Mac: macOS and Safari updates out today fix hundreds of security bugs",
   "category": "mac",
   "platforms": [
    "macos"
   ],
   "products": [
    "macos",
    "safari"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Apple lists 262, 213 and 197 fixed bugs in the three macOS updates (no single score).",
   "exploited_in_wild": "unknown",
   "exploited_note": "Apple's notes for these updates do not say any of the bugs are being attacked.",
   "exploited_source_url": "https://support.apple.com/en-us/149521",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-26",
   "updated_at": "2026-10-27",
   "cves": [],
   "summary": "On October 26, 2026 Apple released new versions for Macs: macOS Golden Gate 27.2, macOS Tahoe 26.7.2 and macOS Sequoia 15.8.2, plus Safari 27.2. Together they fix hundreds of security bugs, such as ones where a bad picture or web page could crash an app or harm your Mac. Install the update that matches your Mac.",
   "am_i_affected": "You are at risk if your Mac is on an older version than the ones below. Click the Apple menu > About This Mac to see your version.",
   "action": "Update your Mac and Safari (Oct 26 updates)",
   "affected": [
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Golden Gate before 27.2; macOS Tahoe before 26.7.2; macOS Sequoia before 15.8.2",
     "fixed_version": "27.2 (Golden Gate) / 26.7.2 (Tahoe) / 15.8.2 (Sequoia)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/149521",
      "https://support.apple.com/en-us/149522",
      "https://support.apple.com/en-us/149523"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "safari",
     "product_name": "Safari",
     "platform": "macos",
     "affected_versions": "Safari before 27.2 on macOS Sequoia and macOS Tahoe",
     "fixed_version": "27.2",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/149527"
     ],
     "check": {
      "menu_path": "Open Safari. Menu bar: Safari > About Safari.",
      "command": "mdls -name kMDItemVersion \"/Applications/Safari.app\"",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    }
   ],
   "fix_steps": [
    "Click the Apple menu > System Settings > General > Software Update.",
    "Click Update Now (or Upgrade Now if it offers a new macOS).",
    "Wait for the download and install. Your Mac will restart.",
    "Open Safari afterwards and check Safari > About Safari shows 27.2 on Sequoia or Tahoe."
   ],
   "official_patch_links": [
    {
     "label": "Apple: how to update your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple security releases",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/149521",
     "title": "Apple: About the security content of macOS Golden Gate 27.2",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149522",
     "title": "Apple: About the security content of macOS Tahoe 26.7.2",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149523",
     "title": "Apple: About the security content of macOS Sequoia 15.8.2",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149527",
     "title": "Apple: About the security content of Safari 27.2",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/100100",
     "title": "Apple: security releases list",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "iphone-ios-27-2-security-updates-oct-26",
   "url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26/",
   "path": "/incidents/iphone-ios-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/iphone-ios-27-2-security-updates-oct-26.json",
   "title": "iPhone and iPad: October 26 updates fix hundreds of security bugs",
   "category": "phones",
   "platforms": [
    "ios"
   ],
   "products": [
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Apple lists about 163 fixed bugs in iOS 27.2 and about 134 in iOS 26.7.2 (no single score).",
   "exploited_in_wild": "unknown",
   "exploited_note": "Apple's notes for iOS 27.2 and iOS 26.7.2 do not say any of these bugs are being attacked.",
   "exploited_source_url": "https://support.apple.com/en-us/149230",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-26",
   "updated_at": "2026-11-05",
   "cves": [],
   "summary": "On October 26, 2026 Apple released new versions for iPhone and iPad: iOS 27.2 and iPadOS 27.2, plus iOS 26.7.2 and iPadOS 26.7.2 for phones still on the older line. Together they fix hundreds of security bugs, such as ones where a bad picture, video, or web page could crash an app or harm your phone. Install the update that matches your device.",
   "am_i_affected": "You are at risk if your iPhone or iPad is on an older version than the ones below. Open Settings > General > About to see your version.",
   "action": "Update your iPhone or iPad (Oct 26 updates)",
   "affected": [
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS and iPadOS 27 before 27.2; iOS and iPadOS 26 before 26.7.2",
     "fixed_version": "27.2 / 26.7.2",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/149230",
      "https://support.apple.com/en-us/149227"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "Open Settings > General > Software Update.",
    "Tap Update Now (or Download and Install).",
    "Enter your passcode if asked, then wait for the download and install. Your phone will restart.",
    "Open Settings > General > About and check that the version is 27.2 or 26.7.2 (or newer)."
   ],
   "official_patch_links": [
    {
     "label": "Apple: how to update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/118575"
    },
    {
     "label": "Apple security releases",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/149230",
     "title": "Apple: About the security content of iOS 27.2 and iPadOS 27.2",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149227",
     "title": "Apple: About the security content of iOS 26.7.2 and iPadOS 26.7.2",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/100100",
     "title": "Apple: security releases list",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "tailscale-ssh-flaws-tailworm",
   "url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm/",
   "path": "/incidents/tailscale-ssh-flaws-tailworm/",
   "json_url": "https://patchgap.ai/incidents/tailscale-ssh-flaws-tailworm.json",
   "title": "Tailscale SSH: serious bugs are now fixed in Tailscale 1.104.4. Update now.",
   "category": "network",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "tailscale"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Tailscale calls them 'serious security issues'. No score published.",
   "exploited_in_wild": "unknown",
   "exploited_note": "Tailscale's notices do not say anyone is using these bugs.",
   "exploited_source_url": "https://tailscale.com/ssh-investigation-update",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-25",
   "updated_at": "2026-10-28",
   "cves": [],
   "summary": "A researcher published bugs in Tailscale SSH, a feature of the Tailscale app. Some people who are already allowed to connect could get more power than they should. Tailscale fixed these bugs in version 1.104.4 and posted four notices about them (TS-2026-014 to TS-2026-017). Update Tailscale to 1.104.4 or newer.",
   "am_i_affected": "This is mostly about the Tailscale SSH and Tailscale Serve features. If you never turned them on, this probably does not apply to you. Still, update Tailscale to 1.104.4 or newer to be safe.",
   "action": "Update Tailscale to 1.104.4 or newer",
   "affected": [
    {
     "product": "tailscale",
     "product_name": "Tailscale",
     "platform": "windows",
     "affected_versions": "Tailscale older than 1.104.4 (mainly if you use Tailscale SSH or Serve)",
     "fixed_version": "1.104.4",
     "fixed_min": "1.104.4",
     "fix_note": null,
     "fixed_source_urls": [
      "https://tailscale.com/security-bulletins"
     ],
     "check": {
      "menu_path": "Click the Tailscale icon (tray on Windows, menu bar on Mac) and choose About Tailscale.",
      "command": "tailscale version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://tailscale.com/download"
    },
    {
     "product": "tailscale",
     "product_name": "Tailscale",
     "platform": "macos",
     "affected_versions": "Tailscale older than 1.104.4 (mainly if you use Tailscale SSH or Serve)",
     "fixed_version": "1.104.4",
     "fixed_min": "1.104.4",
     "fix_note": null,
     "fixed_source_urls": [
      "https://tailscale.com/security-bulletins"
     ],
     "check": {
      "menu_path": "Click the Tailscale icon in the menu bar > About Tailscale.",
      "command": "tailscale version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://tailscale.com/download"
    },
    {
     "product": "tailscale",
     "product_name": "Tailscale",
     "platform": "linux",
     "affected_versions": "Tailscale older than 1.104.4 (mainly if you use Tailscale SSH or Serve)",
     "fixed_version": "1.104.4",
     "fixed_min": "1.104.4",
     "fix_note": null,
     "fixed_source_urls": [
      "https://tailscale.com/security-bulletins"
     ],
     "check": {
      "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://tailscale.com/download"
    }
   ],
   "fix_steps": [
    "Update Tailscale to version 1.104.4 or newer (the Tailscale icon > check for updates, or download it from the official site).",
    "If you use Tailscale SSH: limit who can connect to only the people and devices that need it."
   ],
   "official_patch_links": [
    {
     "label": "Tailscale: security bulletins",
     "url": "https://tailscale.com/security-bulletins"
    },
    {
     "label": "Tailscale: official download",
     "url": "https://tailscale.com/download"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://tailscale.com/ssh-investigation-update",
     "title": "Tailscale: SSH investigation and remediation update",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://tailscale.com/security-bulletins",
     "title": "Tailscale security bulletins TS-2026-014 to TS-2026-017 (fixed in 1.104.4)",
     "date": "2026-10-27",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "emudhra-fake-website-certificates",
   "url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates/",
   "path": "/incidents/emudhra-fake-website-certificates/",
   "json_url": "https://patchgap.ai/incidents/emudhra-fake-website-certificates.json",
   "title": "Fake website certificates: browsers and computers are blocking a certificate company's weak keys",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "chrome",
    "firefox",
    "edge",
    "windows",
    "macos",
    "tailscale"
   ],
   "status": "partial",
   "status_label": "Partly patched",
   "severity": "high",
   "severity_source": "Mozilla and Google both treat it as a serious break in website trust. No score exists.",
   "exploited_in_wild": "no",
   "exploited_note": "Google says no fake certificates were found in public records before it blocked the keys. The company (eMudhra) says it issued no certificates from those keys.",
   "exploited_source_url": "https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-17",
   "updated_at": "2026-10-27",
   "cves": [],
   "summary": "When you visit a secure website, your browser trusts a 'certificate' to prove the site is real. A company called eMudhra made weak secret keys for 8 of its certificate makers. Someone could use them to make fake certificates and pretend to be any website. Mozilla, Google, Apple and Microsoft all blocked those keys in the days after Oct 17. Most of this is automatic. Make sure your browser and your computer are up to date.",
   "am_i_affected": "Most people are already protected because the block went out by itself within hours. Browsers and computers that were offline, or had special settings, may be behind. Update your browser and your computer to be sure. Mac command-line tools still need a future Apple update.",
   "action": "Update your browsers, Windows, Mac and Tailscale",
   "affected": [
    {
     "product": "firefox",
     "product_name": "Mozilla Firefox",
     "platform": "windows",
     "affected_versions": "Firefox with settings that stopped the automatic block",
     "fixed_version": "158.0.1 (ESR: 153.5.1 or 115.43.1)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/"
     ],
     "check": {
      "menu_path": "Click the three lines at the top right > Help > About Firefox. Firefox checks for updates there.",
      "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Mozilla Firefox*' | Select-Object DisplayName,DisplayVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.mozilla.org/firefox/new/"
    },
    {
     "product": "firefox",
     "product_name": "Mozilla Firefox",
     "platform": "macos",
     "affected_versions": "Firefox with settings that stopped the automatic block",
     "fixed_version": "158.0.1 (ESR: 153.5.1 or 115.43.1)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/"
     ],
     "check": {
      "menu_path": "Firefox menu bar: Firefox > About Firefox.",
      "command": "defaults read \"/Applications/Firefox.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.mozilla.org/firefox/new/"
    },
    {
     "product": "firefox",
     "product_name": "Mozilla Firefox",
     "platform": "linux",
     "affected_versions": "Firefox with settings that stopped the automatic block",
     "fixed_version": "158.0.1 (ESR: 153.5.1 or 115.43.1)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/"
     ],
     "check": {
      "menu_path": "Firefox menu > Help > About Firefox.",
      "command": "firefox --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.mozilla.org/firefox/new/"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "windows",
     "affected_versions": "Chrome that has not yet received the Oct 27 trust-list update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Chrome blocked the keys the same day with no update. It removes the whole root certificate in a release that began rolling out Oct 27, 2026.",
     "fixed_source_urls": [
      "https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
      "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "macos",
     "affected_versions": "Chrome that has not yet received the Oct 27 trust-list update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Chrome blocked the keys the same day with no update. It removes the whole root certificate in a release that began rolling out Oct 27, 2026.",
     "fixed_source_urls": [
      "https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/"
     ],
     "check": {
      "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
      "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "chrome",
     "product_name": "Google Chrome",
     "platform": "linux",
     "affected_versions": "Chrome that has not yet received the Oct 27 trust-list update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Chrome blocked the keys the same day with no update. It removes the whole root certificate in a release that began rolling out Oct 27, 2026.",
     "fixed_source_urls": [
      "https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/"
     ],
     "check": {
      "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
      "command": "google-chrome --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.google.com/chrome/answer/95414"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "windows",
     "affected_versions": "Edge that has not yet received the Oct 27 trust-list update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Microsoft Edge blocks the keys automatically. Microsoft planned to remove the affected roots from Edge's trust list on Oct 27, 2026.",
     "fixed_source_urls": [
      "https://www.microsoft.com/en-us/msrc/blog/2026/10/microsoft-response-to-compromised-emudhra-certificate-authority-keys"
     ],
     "check": {
      "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.",
      "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    },
    {
     "product": "edge",
     "product_name": "Microsoft Edge",
     "platform": "macos",
     "affected_versions": "Edge that has not yet received the Oct 27 trust-list update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Microsoft Edge blocks the keys automatically. Microsoft planned to remove the affected roots from Edge's trust list on Oct 27, 2026.",
     "fixed_source_urls": [
      "https://www.microsoft.com/en-us/msrc/blog/2026/10/microsoft-response-to-compromised-emudhra-certificate-authority-keys"
     ],
     "check": {
      "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.",
      "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.microsoft.com/edge/download"
    },
    {
     "product": "windows",
     "product_name": "Windows 10 and 11",
     "platform": "windows",
     "affected_versions": "Windows without Microsoft's Oct 26, 2026 trust-list update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Microsoft released an out-of-band Windows update on Oct 26, 2026 that removes seven affected certificates.",
     "fixed_source_urls": [
      "https://www.microsoft.com/en-us/msrc/blog/2026/10/microsoft-response-to-compromised-emudhra-certificate-authority-keys"
     ],
     "check": {
      "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
      "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"
    },
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "Mac command-line tools (not Safari or other apps)",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Apple blocked the certificates automatically from Oct 19, 2026 (and the root on Oct 23). A future macOS update will block them in command-line tools too.",
     "fixed_source_urls": [
      "https://support.apple.com/en-us/149555"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "tailscale",
     "product_name": "Tailscale",
     "platform": "windows",
     "affected_versions": "Tailscale older than v1.104.2",
     "fixed_version": "1.104.2",
     "fixed_min": "1.104.2",
     "fix_note": "Tailscale v1.104.2 (Oct 21, 2026) includes Go 1.27.3, which refuses the compromised certificates.",
     "fixed_source_urls": [
      "https://tailscale.com/security-bulletins",
      "https://tailscale.com/changelog"
     ],
     "check": {
      "menu_path": "Click the Tailscale icon (tray on Windows, menu bar on Mac) and choose About Tailscale.",
      "command": "tailscale version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://tailscale.com/download"
    },
    {
     "product": "tailscale",
     "product_name": "Tailscale",
     "platform": "macos",
     "affected_versions": "Tailscale older than v1.104.2",
     "fixed_version": "1.104.2",
     "fixed_min": "1.104.2",
     "fix_note": "Tailscale v1.104.2 (Oct 21, 2026) includes Go 1.27.3, which refuses the compromised certificates.",
     "fixed_source_urls": [
      "https://tailscale.com/security-bulletins",
      "https://tailscale.com/changelog"
     ],
     "check": {
      "menu_path": "Click the Tailscale icon in the menu bar > About Tailscale.",
      "command": "tailscale version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://tailscale.com/download"
    },
    {
     "product": "tailscale",
     "product_name": "Tailscale",
     "platform": "linux",
     "affected_versions": "Tailscale older than v1.104.2",
     "fixed_version": "1.104.2",
     "fixed_min": "1.104.2",
     "fix_note": "Tailscale v1.104.2 (Oct 21, 2026) includes Go 1.27.3, which refuses the compromised certificates.",
     "fixed_source_urls": [
      "https://tailscale.com/security-bulletins",
      "https://tailscale.com/changelog"
     ],
     "check": {
      "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://tailscale.com/download"
    }
   ],
   "fix_steps": [
    "Update your browser: Chrome (three dots > Help > About Google Chrome), Firefox (three lines > Help > About Firefox), Edge (three dots > Help and feedback > About Microsoft Edge).",
    "Run Windows Update (Settings > Windows Update) and install everything, including the update from Oct 26.",
    "On a Mac, run Software Update (System Settings > General > Software Update).",
    "If you use Tailscale, update it to the newest version.",
    "A site that suddenly shows a certificate warning might use the blocked company. That is expected. Do not click through the warning. Tell the site owner."
   ],
   "official_patch_links": [
    {
     "label": "Mozilla: blog post about the eMudhra block",
     "url": "https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/"
    },
    {
     "label": "Apple: about the compromised eMudhra certificates",
     "url": "https://support.apple.com/en-us/149555"
    },
    {
     "label": "Microsoft: response to the eMudhra keys",
     "url": "https://www.microsoft.com/en-us/msrc/blog/2026/10/microsoft-response-to-compromised-emudhra-certificate-authority-keys"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/",
     "title": "Mozilla Security Blog: Protecting Firefox users after the eMudhra compromise",
     "date": "2026-10-20",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/",
     "title": "Google: Protecting Chrome and Android users from compromised eMudhra certificates",
     "date": "2026-10-20",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149555",
     "title": "Apple Support: About the compromised eMudhra intermediate CAs",
     "date": "2026-10-23",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.microsoft.com/en-us/msrc/blog/2026/10/microsoft-response-to-compromised-emudhra-certificate-authority-keys",
     "title": "Microsoft MSRC: Response to compromised eMudhra keys",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://tailscale.com/changelog",
     "title": "Tailscale changelog (Oct 21, 2026 entry)",
     "date": "2026-10-21",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://emudhra.com/en/post/certificate-security-incident",
     "title": "eMudhra: Statement on the certificate security incident",
     "date": "2026-10-21",
     "kind": "primary",
     "official": true
    },
    {
     "url": "https://tailscale.com/security-bulletins",
     "title": "Tailscale security bulletin TS-2026-013 (eMudhra certificates)",
     "date": "2026-10-21",
     "kind": "vendor",
     "official": true
    }
   ]
  },
  {
   "id": "office-october-2026-updates",
   "url": "https://patchgap.ai/incidents/office-october-2026-updates/",
   "path": "/incidents/office-october-2026-updates/",
   "json_url": "https://patchgap.ai/incidents/office-october-2026-updates.json",
   "title": "Microsoft Office (Word, Excel, Outlook): update to get 164 security fixes",
   "category": "apps",
   "platforms": [
    "windows",
    "macos"
   ],
   "products": [
    "microsoft-office"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Microsoft lists many bugs in Word, Excel, Outlook and PowerPoint that can run a program when you open a bad file (Tenable's scanner notes list them).",
   "exploited_in_wild": "no",
   "exploited_note": "Microsoft's October 2026 notes name only one attacked bug (the Windows one). None of the Office fixes are marked as attacked.",
   "exploited_source_url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-13",
   "updated_at": "2026-10-27",
   "cves": [],
   "summary": "Microsoft fixed 164 problems in Office this month. Some of them let a bad Word, Excel or Outlook file take over your computer when you open it. Microsoft has not said that hackers are using the Office bugs yet. Update Office to be safe.",
   "am_i_affected": "You are at risk if you use Word, Excel, Outlook, PowerPoint or OneNote and have not updated Office since early October 2026.",
   "action": "Update Microsoft Office (Word, Excel, Outlook, PowerPoint)",
   "affected": [
    {
     "product": "microsoft-office",
     "product_name": "Microsoft Office (Word, Excel, Outlook, PowerPoint)",
     "platform": "windows",
     "affected_versions": "Microsoft 365 / Office on Windows that has not installed the October 2026 update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed in the October 2026 Office updates (Microsoft Update Guide lists the version).",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct"
     ],
     "check": {
      "menu_path": "Open Word (or Excel). Click File > Account > Update Options > Update Now. The version is shown under About Word.",
      "command": "(Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Office\\ClickToRun\\Configuration' -ErrorAction SilentlyContinue).VersionToReport",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    },
    {
     "product": "microsoft-office",
     "product_name": "Microsoft Office (Word, Excel, Outlook, PowerPoint)",
     "platform": "macos",
     "affected_versions": "Office for Mac that has not installed the October 2026 update",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Fixed in the October 2026 Office updates for Mac. Microsoft's Update Guide lists the version.",
     "fixed_source_urls": [
      "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct"
     ],
     "check": {
      "menu_path": "Open Word. Menu bar: Word > About Word. Or Word > Check for Updates.",
      "command": "defaults read \"/Applications/Microsoft Word.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    }
   ],
   "fix_steps": [
    "Open Word or Excel.",
    "Windows: click File > Account > Update Options > Update Now.",
    "Mac: click Help > Check for Updates, then Update.",
    "Close and open Office again when it finishes.",
    "Do not open Office files from people you do not know until you have updated."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft: install Office updates",
     "url": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5"
    },
    {
     "label": "Microsoft October 2026 update notes",
     "url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct",
     "title": "Microsoft: October 2026 Security Updates release notes (164 Office fixes)",
     "date": "2026-10-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.tenable.com/plugins/nessus/365620",
     "title": "Tenable: Office C2R October 2026 security updates (list of bugs)",
     "date": "2026-10",
     "kind": "research",
     "official": false
    }
   ]
  },
  {
   "id": "zoom-october-2026-security-bulletins",
   "url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins/",
   "path": "/incidents/zoom-october-2026-security-bulletins/",
   "json_url": "https://patchgap.ai/incidents/zoom-october-2026-security-bulletins.json",
   "title": "Zoom: update to 7.2.0 or newer to fix bugs that could leak your data or crash the app",
   "category": "apps",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "zoom"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Zoom rates the bugs High (scores 7.4 to 8.1).",
   "exploited_in_wild": "unknown",
   "exploited_note": "Zoom's bulletins do not say any of these bugs are being attacked.",
   "exploited_source_url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26020",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-13",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-53420",
    "CVE-2026-108184",
    "CVE-2026-108185",
    "CVE-2026-53418"
   ],
   "summary": "Zoom published four security notices on October 13, 2026. Two bugs could let someone on your network (such as on public Wi-Fi) spy on data from Zoom because Zoom did not check certificates the right way. One bug in Zoom Phone could let an attacker get more power on your computer. One bug in the Android app could let another app steal data. Updating Zoom fixes them.",
   "am_i_affected": "You are at risk if your Zoom Workplace is older than version 7.2.0 (7.1.9 for some branches). Open Zoom, click your picture, and check Help > About Zoom Workplace.",
   "action": "Update Zoom Workplace to 7.2.0 (7.1.9 on its branch)",
   "affected": [
    {
     "product": "zoom",
     "product_name": "Zoom Workplace",
     "platform": "windows",
     "affected_versions": "Zoom Workplace before 7.2.0 (before 7.1.9 on the older branch)",
     "fixed_version": "7.2.0 (7.1.9 on its branch)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://www.zoom.com/en/trust/security-bulletin/zsb-26020",
      "https://www.zoom.com/en/trust/security-bulletin/zsb-26021",
      "https://www.zoom.com/en/trust/security-bulletin/zsb-26022"
     ],
     "check": {
      "menu_path": "Open Zoom. Click your picture at the top right > Check for Updates. Or Help > About Zoom Workplace.",
      "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Zoom*' | Select-Object DisplayName,DisplayVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://zoom.us/download"
    },
    {
     "product": "zoom",
     "product_name": "Zoom Workplace",
     "platform": "macos",
     "affected_versions": "Zoom Workplace before 7.2.0 (before 7.1.9 on the older branch)",
     "fixed_version": "7.2.0 (7.1.9 on its branch)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://www.zoom.com/en/trust/security-bulletin/zsb-26020",
      "https://www.zoom.com/en/trust/security-bulletin/zsb-26022"
     ],
     "check": {
      "menu_path": "Open Zoom. Menu bar: zoom.us > Check for Updates.",
      "command": "defaults read \"/Applications/zoom.us.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://zoom.us/download"
    },
    {
     "product": "zoom",
     "product_name": "Zoom Workplace",
     "platform": "linux",
     "affected_versions": "Zoom Workplace before 7.2.0 (before 7.1.9 on the older branch)",
     "fixed_version": "7.2.0 (7.1.9 on its branch)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://www.zoom.com/en/trust/security-bulletin/zsb-26020",
      "https://www.zoom.com/en/trust/security-bulletin/zsb-26022"
     ],
     "check": {
      "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://zoom.us/download"
    }
   ],
   "fix_steps": [
    "Open Zoom.",
    "Click your picture at the top right > Check for Updates.",
    "Click Update if it shows one.",
    "Or install the newest version from Zoom's official download page."
   ],
   "official_patch_links": [
    {
     "label": "Zoom: official download",
     "url": "https://zoom.us/download"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26020",
     "title": "Zoom bulletin ZSB-26020: Zoom Workplace clients, buffer overflow",
     "date": "2026-10-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26021",
     "title": "Zoom bulletin ZSB-26021: Zoom clients for Windows, certificate checks",
     "date": "2026-10-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26022",
     "title": "Zoom bulletin ZSB-26022: Zoom clients, certificate checks in My Notes",
     "date": "2026-10-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26019",
     "title": "Zoom bulletin ZSB-26019: Zoom Workplace for Android",
     "date": "2026-10-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53420",
     "title": "NVD: CVE-2026-53420",
     "date": "2026-10-13",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "claude-code-plugin-hash-pin-bypass",
   "url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass/",
   "path": "/incidents/claude-code-plugin-hash-pin-bypass/",
   "json_url": "https://patchgap.ai/incidents/claude-code-plugin-hash-pin-bypass.json",
   "title": "Claude Code: a bad plugin could sneak in code even when you pinned a safe version. Update to 2.1.179.",
   "category": "ai",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "claude-code"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "GitHub advisory rating: high (NVD score 7.5).",
   "exploited_in_wild": "unknown",
   "exploited_note": "No report that anyone has used this bug.",
   "exploited_source_url": "https://github.com/advisories/GHSA-pq7j-f95f-qfcv",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-13",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-86063"
   ],
   "summary": "Claude Code is an AI helper that works with code. It can add plugins. A plugin author could trick it into installing different code than the safe, locked version you chose. This only works if you install a bad plugin. Anthropic fixed it in version 2.1.179. The normal automatic update has already given the fix to most people.",
   "am_i_affected": "You are at risk if you use Claude Code older than 2.1.179 and install plugins from other people. Run the command below to see your version.",
   "action": "Update Claude Code to 2.1.179",
   "affected": [
    {
     "product": "claude-code",
     "product_name": "Claude Code",
     "platform": "windows",
     "affected_versions": "Claude Code older than 2.1.179",
     "fixed_version": "2.1.179",
     "fixed_min": "2.1.179",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/advisories/GHSA-pq7j-f95f-qfcv",
      "https://nvd.nist.gov/vuln/detail/CVE-2026-86063"
     ],
     "check": {
      "menu_path": "Open a terminal window and type the command below.",
      "command": "claude --version",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://www.anthropic.com/claude-code"
    },
    {
     "product": "claude-code",
     "product_name": "Claude Code",
     "platform": "macos",
     "affected_versions": "Claude Code older than 2.1.179",
     "fixed_version": "2.1.179",
     "fixed_min": "2.1.179",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/advisories/GHSA-pq7j-f95f-qfcv",
      "https://nvd.nist.gov/vuln/detail/CVE-2026-86063"
     ],
     "check": {
      "menu_path": "Open Terminal and type the command below.",
      "command": "claude --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.anthropic.com/claude-code"
    },
    {
     "product": "claude-code",
     "product_name": "Claude Code",
     "platform": "linux",
     "affected_versions": "Claude Code older than 2.1.179",
     "fixed_version": "2.1.179",
     "fixed_min": "2.1.179",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/advisories/GHSA-pq7j-f95f-qfcv",
      "https://nvd.nist.gov/vuln/detail/CVE-2026-86063"
     ],
     "check": {
      "menu_path": "Open Terminal and type the command below.",
      "command": "claude --version",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://www.anthropic.com/claude-code"
    }
   ],
   "fix_steps": [
    "Let Claude Code update itself, or run its own update command.",
    "Check that claude --version shows 2.1.179 or newer.",
    "Only install plugins from people you trust."
   ],
   "official_patch_links": [
    {
     "label": "Anthropic: Claude Code",
     "url": "https://www.anthropic.com/claude-code"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://github.com/advisories/GHSA-pq7j-f95f-qfcv",
     "title": "GitHub advisory GHSA-pq7j-f95f-qfcv: Claude Code plugin hash pin bypass",
     "date": "2026-10-15",
     "kind": "ghsa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86063",
     "title": "NVD: CVE-2026-86063",
     "date": "2026-10-13",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "telegram-desktop-link-account-takeover",
   "url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover/",
   "path": "/incidents/telegram-desktop-link-account-takeover/",
   "json_url": "https://patchgap.ai/incidents/telegram-desktop-link-account-takeover.json",
   "title": "Telegram Desktop: clicking a bad link could let someone take over your account. Update to 7.2.9 or newer.",
   "category": "apps",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "telegram-desktop"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "NVD score 8.6 out of 10 (CVE-2026-107181)",
   "exploited_in_wild": "unknown",
   "exploited_note": "No report that anyone has used this bug against real people.",
   "exploited_source_url": "https://github.com/telegramdesktop/tdesktop/releases/tag/v7.2.9",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-07",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-107181"
   ],
   "summary": "A researcher showed that one click on a crafted link in Telegram Desktop could make the app read files from your computer and send them to an attacker. Those files can include your Telegram login, which lets the attacker take over your account. Telegram fixed it in version 7.2.9 (released Sept 17, 2026).",
   "am_i_affected": "You are at risk if you use Telegram Desktop 7.2.8 or older. The researcher tested it on Windows. Update to 7.2.9 or newer (the newest is 7.3.3 as of Oct 21, 2026).",
   "action": "Update Telegram Desktop to 7.2.9",
   "affected": [
    {
     "product": "telegram-desktop",
     "product_name": "Telegram Desktop",
     "platform": "windows",
     "affected_versions": "Telegram Desktop 7.2.8 and older",
     "fixed_version": "7.2.9",
     "fixed_min": "7.2.9",
     "fix_note": null,
     "fixed_source_urls": [
      "https://nvd.nist.gov/vuln/detail/CVE-2026-107181",
      "https://github.com/telegramdesktop/tdesktop/releases/tag/v7.2.9"
     ],
     "check": {
      "menu_path": "Open Telegram. Open Settings. The version number is shown in Settings (look under Advanced or at the bottom).",
      "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Telegram*' | Select-Object DisplayName,DisplayVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://desktop.telegram.org/"
    },
    {
     "product": "telegram-desktop",
     "product_name": "Telegram Desktop",
     "platform": "macos",
     "affected_versions": "Telegram Desktop 7.2.8 and older (researcher tested on Windows only)",
     "fixed_version": "7.2.9",
     "fixed_min": "7.2.9",
     "fix_note": null,
     "fixed_source_urls": [
      "https://nvd.nist.gov/vuln/detail/CVE-2026-107181",
      "https://github.com/telegramdesktop/tdesktop/releases/tag/v7.2.9"
     ],
     "check": {
      "menu_path": "Open Telegram. Menu bar: Telegram > About Telegram.",
      "command": "defaults read \"/Applications/Telegram.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://desktop.telegram.org/"
    },
    {
     "product": "telegram-desktop",
     "product_name": "Telegram Desktop",
     "platform": "linux",
     "affected_versions": "Telegram Desktop 7.2.8 and older (researcher tested on Windows only)",
     "fixed_version": "7.2.9",
     "fixed_min": "7.2.9",
     "fix_note": null,
     "fixed_source_urls": [
      "https://nvd.nist.gov/vuln/detail/CVE-2026-107181",
      "https://github.com/telegramdesktop/tdesktop/releases/tag/v7.2.9"
     ],
     "check": {
      "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://desktop.telegram.org/"
    }
   ],
   "fix_steps": [
    "Open Telegram Desktop. It usually updates itself.",
    "If not, download the newest version from the official Telegram Desktop website.",
    "Do not click links from people or groups you do not know."
   ],
   "official_patch_links": [
    {
     "label": "Telegram Desktop: official download",
     "url": "https://desktop.telegram.org/"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107181",
     "title": "NVD: CVE-2026-107181",
     "date": "2026-10-07",
     "kind": "nvd",
     "official": true
    },
    {
     "url": "https://github.com/telegramdesktop/tdesktop/releases/tag/v7.2.9",
     "title": "Telegram Desktop release v7.2.9",
     "date": "2026-09-17",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/",
     "title": "beaksec: Telegram Desktop one-click account takeover (researcher write-up)",
     "date": "2026-10",
     "kind": "research",
     "official": false
    }
   ]
  },
  {
   "id": "microsoft-authenticator-android-token-bug",
   "url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug/",
   "path": "/incidents/microsoft-authenticator-android-token-bug/",
   "json_url": "https://patchgap.ai/incidents/microsoft-authenticator-android-token-bug.json",
   "title": "Microsoft Authenticator on Android: update the app. A bug could let another app get work-account sign-ins.",
   "category": "phones",
   "platforms": [
    "android"
   ],
   "products": [
    "microsoft-authenticator"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "NVD score 8.6 out of 10 (CVE-2026-80097)",
   "exploited_in_wild": "unknown",
   "exploited_note": "No report that anyone has used this bug.",
   "exploited_source_url": "https://enclave.ai/blog/authmask-we-made-microsoft-authenticator-hand-over-tokens",
   "confidence": "unconfirmed",
   "confidence_note": "The fixed app version is not listed in the sources we could read. Researchers say Microsoft has patched it.",
   "first_reported": "2026-09-08",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-80097"
   ],
   "summary": "A researcher showed that on Android, another app on the phone could trick the Microsoft Authenticator app into handing over sign-in tokens for a work account (such as email and files). Microsoft has a fix. Update the app from the Play Store.",
   "am_i_affected": "You may be at risk if you use Microsoft Authenticator on an Android phone with a work or school account and have not updated the app recently. iPhone is not mentioned in the sources.",
   "action": "Update Microsoft Authenticator (Android)",
   "affected": [
    {
     "product": "microsoft-authenticator",
     "product_name": "Microsoft Authenticator (Android)",
     "platform": "android",
     "affected_versions": "Microsoft Authenticator for Android with an out-of-date app (exact versions not published in our sources)",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "Microsoft has patched the app. Update from Google Play. The exact fixed version is not confirmed.",
     "fixed_source_urls": [
      "https://nvd.nist.gov/vuln/detail/CVE-2026-80097"
     ],
     "check": {
      "menu_path": "On your Android phone: open Google Play > tap your picture > Manage apps and device > Updates available.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://play.google.com/store/apps/details?id=com.azure.authenticator"
    }
   ],
   "fix_steps": [
    "Open the Google Play Store.",
    "Tap your picture > Manage apps and device > Updates available.",
    "Update Microsoft Authenticator.",
    "Remove apps you do not use or trust."
   ],
   "official_patch_links": [
    {
     "label": "Microsoft Authenticator on Google Play",
     "url": "https://play.google.com/store/apps/details?id=com.azure.authenticator"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80097",
     "title": "NVD: CVE-2026-80097",
     "date": "2026-09-08",
     "kind": "nvd",
     "official": true
    },
    {
     "url": "https://enclave.ai/blog/authmask-we-made-microsoft-authenticator-hand-over-tokens",
     "title": "Enclave AI: AuthMask, Microsoft Authenticator hands over tokens",
     "date": "2026-10-23",
     "kind": "research",
     "official": false
    }
   ]
  },
  {
   "id": "netgear-router-and-extender-fixes-oct-2026",
   "url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026/",
   "path": "/incidents/netgear-router-and-extender-fixes-oct-2026/",
   "json_url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026.json",
   "title": "NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix)",
   "category": "network",
   "platforms": [
    "router"
   ],
   "products": [
    "netgear-routers"
   ],
   "status": "partial",
   "status_label": "Partly patched",
   "severity": "medium",
   "severity_source": "NETGEAR rates these bugs Medium.",
   "exploited_in_wild": "unknown",
   "exploited_note": "NETGEAR's notice does not say any of these bugs are being attacked.",
   "exploited_source_url": "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-13",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-11732",
    "CVE-2026-11731",
    "CVE-2026-11730",
    "CVE-2026-9218"
   ],
   "summary": "NETGEAR fixed several bugs in its home routers and Wi-Fi extenders in October 2026. Most of them need someone already on your Wi-Fi to attack, so they are not huge risks. But a few models are too old to get a fix. For those, NETGEAR says to replace the router.",
   "am_i_affected": "You are affected if you have one of the models listed below. Log in to your router and check its firmware version. Models marked 'end of support' will not get a fix (NETGEAR lists CBR40 as 'Won't Fix').",
   "action": "Update your NETGEAR router's firmware",
   "affected": [
    {
     "product": "netgear-routers",
     "product_name": "NETGEAR home routers and extenders",
     "platform": "router",
     "affected_versions": "CAX30 before V2.3.4.12",
     "fixed_version": "V2.3.4.12",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
     ],
     "check": {
      "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://www.netgear.com/support/download/"
    },
    {
     "product": "netgear-routers",
     "product_name": "NETGEAR home routers and extenders",
     "platform": "router",
     "affected_versions": "RAX30 before V1.0.14.108 (Block Sites bug) and before V1.0.15.110 (login bug)",
     "fixed_version": "V1.0.14.108 and V1.0.15.110",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
     ],
     "check": {
      "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://www.netgear.com/support/download/"
    },
    {
     "product": "netgear-routers",
     "product_name": "NETGEAR home routers and extenders",
     "platform": "router",
     "affected_versions": "RAX28 and RAX29 before v1.0.15.110",
     "fixed_version": "v1.0.15.110",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
     ],
     "check": {
      "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://www.netgear.com/support/download/"
    },
    {
     "product": "netgear-routers",
     "product_name": "NETGEAR home routers and extenders",
     "platform": "router",
     "affected_versions": "RAXE300 before V1.0.10.72",
     "fixed_version": "V1.0.10.72",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
     ],
     "check": {
      "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://www.netgear.com/support/download/"
    },
    {
     "product": "netgear-routers",
     "product_name": "NETGEAR home routers and extenders",
     "platform": "router",
     "affected_versions": "RAX5 (end of support) before V1.0.5.34",
     "fixed_version": "V1.0.5.34",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
     ],
     "check": {
      "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://www.netgear.com/support/download/"
    },
    {
     "product": "netgear-routers",
     "product_name": "NETGEAR home routers and extenders",
     "platform": "router",
     "affected_versions": "EX6120 before V1.0.1.74; EX3700 (end of support) before V1.0.0.102",
     "fixed_version": "V1.0.1.74 (EX6120) / V1.0.0.102 (EX3700)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
     ],
     "check": {
      "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://www.netgear.com/support/download/"
    },
    {
     "product": "netgear-routers",
     "product_name": "NETGEAR home routers and extenders",
     "platform": "router",
     "affected_versions": "R7000 before v1.0.11.130; R7000P before V1.3.3.152; RAX40 before V1.0.3.64 (all end of support)",
     "fixed_version": "v1.0.11.130 (R7000) / V1.3.3.152 (R7000P) / V1.0.3.64 (RAX40)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
     ],
     "check": {
      "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://www.netgear.com/support/download/"
    },
    {
     "product": "netgear-routers",
     "product_name": "NETGEAR home routers and extenders",
     "platform": "router",
     "affected_versions": "CBR40 (end of support)",
     "fixed_version": null,
     "fixed_min": null,
     "fix_note": "NETGEAR lists this model as 'Won't Fix'. Replace it.",
     "fixed_source_urls": [
      "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
     ],
     "check": {
      "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://www.netgear.com/support/download/"
    }
   ],
   "fix_steps": [
    "Find your router's model number on its label.",
    "Open your router's web page (often routerlogin.net) or the NETGEAR app.",
    "Go to Advanced > Administration > Firmware Update and let it check for an update.",
    "Turn on automatic updates if the router offers it.",
    "If your model is end-of-support or 'Won't Fix', plan to replace the router."
   ],
   "official_patch_links": [
    {
     "label": "NETGEAR: October 2026 security advisory",
     "url": "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
    },
    {
     "label": "NETGEAR: firmware downloads",
     "url": "https://www.netgear.com/support/download/"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory",
     "title": "NETGEAR: October 2026 Security Advisory",
     "date": "2026-10",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11732",
     "title": "NVD: CVE-2026-11732",
     "date": "2026-10-13",
     "kind": "nvd",
     "official": true
    }
   ]
  }
 ],
 "products": [
  {
   "slug": "windows",
   "name": "Windows 10 and 11",
   "short_name": "Windows",
   "page_url": "https://patchgap.ai/is-my-windows-up-to-date/",
   "minimum_safe_version": null,
   "minimum_safe_version_source": [
    {
     "url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct",
     "title": "Microsoft: October 2026 Security Updates release notes",
     "date": "2026-10-13",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": null,
    "applies_to": null,
    "source_incident": "windows-shell-zero-day-oct-2026",
    "sources": [
     {
      "url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct",
      "title": "Microsoft: October 2026 Security Updates release notes",
      "date": "2026-10-13",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": false,
    "newest_fix": "Fixed by the October 13, 2026 Windows security update (or any newer update). Microsoft's Update Guide lists the exact update for each Windows version.",
    "caveats": [
     "Only partly fixed so far, so also follow the extra steps on their pages: windows-secure-boot-blackx-bootkit, emudhra-fake-website-certificates.",
     "These are fixed by an update without one version number we can compare, so check their pages: emudhra-fake-website-certificates, microsoft-defender-attacked-bugs-2026, windows-attacked-bugs-apr-2026, windows-attacked-bugs-aug-2026, windows-attacked-bugs-dec-2025, windows-attacked-bugs-feb-2026, windows-attacked-bugs-jan-2026, windows-attacked-bugs-nov-2025, windows-attacked-bugs-oct-2025, windows-attacked-bugs-sep-2026, windows-secure-boot-blackx-bootkit, windows-shell-zero-day-oct-2026."
    ],
    "text": "There is no single version number for Windows. The newest fix listed here is: Fixed by the October 13, 2026 Windows security update (or any newer update). Microsoft's Update Guide lists the exact update for each Windows version. If you have that or anything newer, you're covered against the fixed problems listed here (see the notes below)."
   },
   "update_steps": {
    "windows": [
     "Open Start > Settings > Windows Update.",
     "Click Check for updates and install what it finds.",
     "Restart when asked."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Microsoft",
   "category": "windows",
   "platforms": [
    "windows"
   ],
   "what_it_is": "The operating system on most PCs and laptops.",
   "url": "https://patchgap.ai/is-my-windows-up-to-date/",
   "json_url": "https://patchgap.ai/products/windows.json",
   "official_site": "https://www.microsoft.com/windows",
   "official_download": "https://support.microsoft.com/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a",
   "how_it_updates": "Windows Update installs fixes by itself, but a restart is often needed.",
   "check": {
    "windows": {
     "menu_path": "Start > Settings > Windows Update. Then click Update history to see recent updates.",
     "command": "Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,BuildNumber; Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID,InstalledOn",
     "shell": "PowerShell",
     "read_only": true
    }
   },
   "open_incidents": [
    "windows-shell-zero-day-oct-2026",
    "windows-attacked-bugs-sep-2026",
    "windows-attacked-bugs-aug-2026",
    "windows-attacked-bugs-apr-2026",
    "microsoft-defender-attacked-bugs-2026",
    "windows-attacked-bugs-feb-2026",
    "windows-attacked-bugs-jan-2026",
    "windows-attacked-bugs-dec-2025",
    "windows-attacked-bugs-nov-2025",
    "windows-attacked-bugs-oct-2025",
    "windows-secure-boot-blackx-bootkit",
    "emudhra-fake-website-certificates"
   ]
  },
  {
   "slug": "macos",
   "name": "macOS",
   "short_name": "Mac",
   "page_url": "https://patchgap.ai/is-my-mac-up-to-date/",
   "minimum_safe_version": null,
   "minimum_safe_version_source": [
    {
     "url": "https://support.apple.com/en-us/149521",
     "title": "Apple: About the security content of macOS Golden Gate 27.2",
     "date": "2026-10-26",
     "kind": "vendor"
    },
    {
     "url": "https://support.apple.com/en-us/149522",
     "title": "Apple: About the security content of macOS Tahoe 26.7.2",
     "date": "2026-10-26",
     "kind": "vendor"
    },
    {
     "url": "https://support.apple.com/en-us/149523",
     "title": "Apple: About the security content of macOS Sequoia 15.8.2",
     "date": "2026-10-26",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": null,
    "applies_to": null,
    "source_incident": "macos-27-2-security-updates-oct-26",
    "sources": [
     {
      "url": "https://support.apple.com/en-us/149521",
      "title": "Apple: About the security content of macOS Golden Gate 27.2",
      "date": "2026-10-26",
      "kind": "vendor"
     },
     {
      "url": "https://support.apple.com/en-us/149522",
      "title": "Apple: About the security content of macOS Tahoe 26.7.2",
      "date": "2026-10-26",
      "kind": "vendor"
     },
     {
      "url": "https://support.apple.com/en-us/149523",
      "title": "Apple: About the security content of macOS Sequoia 15.8.2",
      "date": "2026-10-26",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": false,
    "newest_fix": "27.2 (Golden Gate) / 26.7.2 (Tahoe) / 15.8.2 (Sequoia)",
    "caveats": [
     "Only partly fixed so far, so also follow the extra steps on their pages: emudhra-fake-website-certificates.",
     "These are fixed by an update without one version number we can compare, so check their pages: apple-attacked-bug-feb-2026, apple-attacked-bugs-nov-2025, apple-webkit-attacked-bug-dec-2025, apple-webkit-pointer-auth-cve-2024-27834, emudhra-fake-website-certificates, macos-27-2-security-updates-oct-26, macos-coregraphics-zero-day-sept-2026, macos-screen-sharing-attacked-bug-aug-2026."
    ],
    "text": "There is no single version number for Mac. The newest fix listed here is: 27.2 (Golden Gate) / 26.7.2 (Tahoe) / 15.8.2 (Sequoia). If you have that or anything newer, you're covered against the fixed problems listed here (see the notes below)."
   },
   "update_steps": {
    "macos": [
     "Apple menu > System Settings > General > Software Update.",
     "Install the update it offers.",
     "Restart when asked."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Apple",
   "category": "mac",
   "platforms": [
    "macos"
   ],
   "what_it_is": "The operating system on Mac laptops and desktops.",
   "url": "https://patchgap.ai/is-my-mac-up-to-date/",
   "json_url": "https://patchgap.ai/products/macos.json",
   "official_site": "https://www.apple.com/macos",
   "official_download": "https://support.apple.com/en-us/108382",
   "how_it_updates": "Software Update in System Settings. Apple can also install small background fixes by itself.",
   "check": {
    "macos": {
     "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
     "command": "sw_vers -productVersion",
     "shell": "Terminal",
     "read_only": true
    }
   },
   "open_incidents": [
    "macos-coregraphics-zero-day-sept-2026",
    "macos-screen-sharing-attacked-bug-aug-2026",
    "apple-attacked-bug-feb-2026",
    "apple-webkit-attacked-bug-dec-2025",
    "apple-attacked-bugs-nov-2025",
    "apple-webkit-pointer-auth-cve-2024-27834",
    "macos-27-2-security-updates-oct-26",
    "emudhra-fake-website-certificates"
   ]
  },
  {
   "slug": "safari",
   "name": "Safari",
   "short_name": "Safari",
   "page_url": "https://patchgap.ai/is-my-safari-up-to-date/",
   "minimum_safe_version": "26.2",
   "minimum_safe_version_source": [
    {
     "url": "https://support.apple.com/en-us/125892",
     "title": "Apple: About the security content of Safari 26.2",
     "date": "2025-12-12",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "26.2",
    "applies_to": "all platforms listed for this product",
    "source_incident": "apple-webkit-attacked-bug-dec-2025",
    "sources": [
     {
      "url": "https://support.apple.com/en-us/125892",
      "title": "Apple: About the security content of Safari 26.2",
      "date": "2025-12-12",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": false,
    "caveats": [
     "These are fixed by an update without one version number we can compare, so check their pages: macos-27-2-security-updates-oct-26."
    ],
    "text": "You're covered against every problem here that has a version number if you're on Safari 26.2 or newer."
   },
   "update_steps": {
    "macos": [
     "Apple menu > System Settings > General > Software Update.",
     "Install any Safari or macOS update it offers."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Apple",
   "category": "browsers",
   "platforms": [
    "macos"
   ],
   "what_it_is": "The web browser that comes with every Mac.",
   "url": "https://patchgap.ai/is-my-safari-up-to-date/",
   "json_url": "https://patchgap.ai/products/safari.json",
   "official_site": "https://www.apple.com/safari",
   "official_download": "https://support.apple.com/en-us/108382",
   "how_it_updates": "Safari updates come with macOS updates (and sometimes on their own) in System Settings > General > Software Update.",
   "check": {
    "macos": {
     "menu_path": "Open Safari. Menu bar: Safari > About Safari.",
     "command": "mdls -name kMDItemVersion \"/Applications/Safari.app\"",
     "shell": "Terminal",
     "read_only": true
    }
   },
   "open_incidents": [
    "apple-webkit-attacked-bug-dec-2025",
    "apple-webkit-pointer-auth-cve-2024-27834",
    "macos-27-2-security-updates-oct-26"
   ]
  },
  {
   "slug": "chrome",
   "name": "Google Chrome",
   "short_name": "Chrome",
   "page_url": "https://patchgap.ai/is-my-chrome-up-to-date/",
   "minimum_safe_version": "157.0.8103.38",
   "minimum_safe_version_source": [
    {
     "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html",
     "title": "Chrome Releases: Stable Channel Update for Desktop (Nov 3, 2026)",
     "date": "2026-11-03",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "157.0.8103.38",
    "applies_to": "all platforms listed for this product",
    "source_incident": "chrome-157-nov-3-security-fixes",
    "sources": [
     {
      "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html",
      "title": "Chrome Releases: Stable Channel Update for Desktop (Nov 3, 2026)",
      "date": "2026-11-03",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": false,
    "caveats": [
     "Only partly fixed so far, so also follow the extra steps on their pages: emudhra-fake-website-certificates.",
     "These are fixed by an update without one version number we can compare, so check their pages: emudhra-fake-website-certificates."
    ],
    "text": "You're covered against every problem here that has a version number if you're on Chrome 157.0.8103.38 or newer."
   },
   "update_steps": {
    "windows": [
     "Open Chrome's three-dot menu > Help > About Google Chrome.",
     "Wait while it downloads the update.",
     "Click Relaunch."
    ],
    "macos": [
     "Open Chrome's three-dot menu > Help > About Google Chrome.",
     "Wait while it downloads the update.",
     "Click Relaunch."
    ],
    "linux": [
     "Open Chrome's three-dot menu > Help > About Google Chrome.",
     "Wait while it downloads the update.",
     "Click Relaunch."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Google",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "what_it_is": "The most popular web browser.",
   "url": "https://patchgap.ai/is-my-chrome-up-to-date/",
   "json_url": "https://patchgap.ai/products/chrome.json",
   "official_site": "https://www.google.com/chrome/",
   "official_download": "https://support.google.com/chrome/answer/95414",
   "how_it_updates": "Chrome updates itself, but it only switches to the new version after you close and reopen it (Relaunch).",
   "check": {
    "windows": {
     "menu_path": "Click the three dots at the top right > Help > About Google Chrome. Chrome checks for updates there, then click Relaunch.",
     "command": "(Get-ItemProperty 'HKCU:\\Software\\Google\\Chrome\\BLBeacon' -ErrorAction SilentlyContinue).version",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Chrome menu bar: Chrome > About Google Chrome.",
     "command": "defaults read \"/Applications/Google Chrome.app/Contents/Info\" CFBundleShortVersionString",
     "shell": "Terminal",
     "read_only": true
    },
    "linux": {
     "menu_path": "Chrome menu: three dots > Help > About Google Chrome.",
     "command": "google-chrome --version",
     "shell": "Terminal",
     "read_only": true
    }
   },
   "open_incidents": [
    "chrome-attacked-bug-sep-2026-b",
    "chrome-attacked-bug-sep-2026-a",
    "chrome-attacked-bug-jun-2026",
    "chrome-attacked-bug-apr-2026",
    "chrome-attacked-bug-mar-2026",
    "chrome-attacked-bug-feb-2026",
    "chrome-attacked-bug-dec-2025",
    "chrome-attacked-bug-nov-2025",
    "chrome-157-nov-3-security-fixes",
    "chrome-156-oct-29-security-fixes",
    "chrome-156-oct-27-security-fixes",
    "chrome-156-security-fixes",
    "emudhra-fake-website-certificates"
   ]
  },
  {
   "slug": "firefox",
   "name": "Mozilla Firefox",
   "short_name": "Firefox",
   "page_url": "https://patchgap.ai/is-my-firefox-up-to-date/",
   "minimum_safe_version": null,
   "minimum_safe_version_source": [
    {
     "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/",
     "title": "Mozilla: Security fixes in Firefox 159 (MFSA 2026-118)",
     "date": "2026-10-27",
     "kind": "vendor"
    },
    {
     "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-123/",
     "title": "Mozilla: Security fix in Firefox 159.0.1 (MFSA 2026-123)",
     "date": "2026-11-03",
     "kind": "vendor"
    },
    {
     "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/",
     "title": "Mozilla: Security fixes in Firefox ESR 115.44 (MFSA 2026-119)",
     "date": "2026-10-27",
     "kind": "vendor"
    },
    {
     "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/",
     "title": "Mozilla: Security fixes in Firefox ESR 153.6 (MFSA 2026-120)",
     "date": "2026-10-27",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": null,
    "applies_to": null,
    "source_incident": "firefox-159-security-fixes",
    "sources": [
     {
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/",
      "title": "Mozilla: Security fixes in Firefox 159 (MFSA 2026-118)",
      "date": "2026-10-27",
      "kind": "vendor"
     },
     {
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-123/",
      "title": "Mozilla: Security fix in Firefox 159.0.1 (MFSA 2026-123)",
      "date": "2026-11-03",
      "kind": "vendor"
     },
     {
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/",
      "title": "Mozilla: Security fixes in Firefox ESR 115.44 (MFSA 2026-119)",
      "date": "2026-10-27",
      "kind": "vendor"
     },
     {
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/",
      "title": "Mozilla: Security fixes in Firefox ESR 153.6 (MFSA 2026-120)",
      "date": "2026-10-27",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": false,
    "newest_fix": "159.0.1 (ESR: 153.6 or 115.44)",
    "caveats": [
     "Only partly fixed so far, so also follow the extra steps on their pages: emudhra-fake-website-certificates.",
     "These are fixed by an update without one version number we can compare, so check their pages: emudhra-fake-website-certificates, firefox-159-security-fixes."
    ],
    "text": "There is no single version number for Firefox. The newest fix listed here is: 159.0.1 (ESR: 153.6 or 115.44). If you have that or anything newer, you're covered against the fixed problems listed here (see the notes below)."
   },
   "update_steps": {
    "windows": [
     "Open the menu > Help > About Firefox.",
     "Wait while it downloads the update.",
     "Click Restart to update Firefox."
    ],
    "macos": [
     "Open the menu > Help > About Firefox.",
     "Wait while it downloads the update.",
     "Click Restart to update Firefox."
    ],
    "linux": [
     "Open the menu > Help > About Firefox.",
     "Wait while it downloads the update.",
     "Click Restart to update Firefox."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Mozilla",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "what_it_is": "A popular privacy-focused web browser.",
   "url": "https://patchgap.ai/is-my-firefox-up-to-date/",
   "json_url": "https://patchgap.ai/products/firefox.json",
   "official_site": "https://www.mozilla.org/firefox/",
   "official_download": "https://www.mozilla.org/firefox/new/",
   "how_it_updates": "Firefox updates itself. Open Help > About Firefox to start it now, then click Restart.",
   "check": {
    "windows": {
     "menu_path": "Click the three lines at the top right > Help > About Firefox. Firefox checks for updates there.",
     "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Mozilla Firefox*' | Select-Object DisplayName,DisplayVersion",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Firefox menu bar: Firefox > About Firefox.",
     "command": "defaults read \"/Applications/Firefox.app/Contents/Info\" CFBundleShortVersionString",
     "shell": "Terminal",
     "read_only": true
    },
    "linux": {
     "menu_path": "Firefox menu > Help > About Firefox.",
     "command": "firefox --version",
     "shell": "Terminal",
     "read_only": true
    }
   },
   "open_incidents": [
    "firefox-159-security-fixes",
    "emudhra-fake-website-certificates"
   ]
  },
  {
   "slug": "edge",
   "name": "Microsoft Edge",
   "short_name": "Edge",
   "page_url": "https://patchgap.ai/is-my-edge-up-to-date/",
   "minimum_safe_version": "152.0.4191.66",
   "minimum_safe_version_source": [
    {
     "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security",
     "title": "Microsoft: Release notes for Microsoft Edge security updates",
     "date": "2026-09-04",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "152.0.4191.66",
    "applies_to": "all platforms listed for this product",
    "source_incident": "chrome-attacked-bug-sep-2026-b",
    "sources": [
     {
      "url": "https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security",
      "title": "Microsoft: Release notes for Microsoft Edge security updates",
      "date": "2026-09-04",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": false,
    "caveats": [
     "Only partly fixed so far, so also follow the extra steps on their pages: emudhra-fake-website-certificates.",
     "These are fixed by an update without one version number we can compare, so check their pages: chrome-attacked-bug-dec-2025, chrome-attacked-bug-feb-2026, emudhra-fake-website-certificates."
    ],
    "text": "You're covered against every problem here that has a version number if you're on Edge 152.0.4191.66 or newer."
   },
   "update_steps": {
    "windows": [
     "Open Edge's three-dot menu > Help and feedback > About Microsoft Edge.",
     "Wait while it updates.",
     "Click Restart."
    ],
    "macos": [
     "Open Edge's three-dot menu > Help and feedback > About Microsoft Edge.",
     "Wait while it updates.",
     "Click Restart."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Microsoft",
   "category": "browsers",
   "platforms": [
    "windows",
    "macos"
   ],
   "what_it_is": "The web browser that comes with Windows.",
   "url": "https://patchgap.ai/is-my-edge-up-to-date/",
   "json_url": "https://patchgap.ai/products/edge.json",
   "official_site": "https://www.microsoft.com/edge",
   "official_download": "https://www.microsoft.com/edge/download",
   "how_it_updates": "Edge updates itself. Restart it when asked.",
   "check": {
    "windows": {
     "menu_path": "Click the three dots at the top right > Help and feedback > About Microsoft Edge.",
     "command": "(Get-Item \"${env:ProgramFiles(x86)}\\Microsoft\\Edge\\Application\\msedge.exe\" -ErrorAction SilentlyContinue).VersionInfo.ProductVersion",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Edge menu bar: Microsoft Edge > About Microsoft Edge.",
     "command": "defaults read \"/Applications/Microsoft Edge.app/Contents/Info\" CFBundleShortVersionString",
     "shell": "Terminal",
     "read_only": true
    }
   },
   "open_incidents": [
    "chrome-attacked-bug-sep-2026-b",
    "chrome-attacked-bug-sep-2026-a",
    "chrome-attacked-bug-jun-2026",
    "chrome-attacked-bug-apr-2026",
    "chrome-attacked-bug-mar-2026",
    "chrome-attacked-bug-feb-2026",
    "chrome-attacked-bug-dec-2025",
    "chrome-attacked-bug-nov-2025",
    "emudhra-fake-website-certificates"
   ]
  },
  {
   "slug": "microsoft-office",
   "name": "Microsoft Office (Word, Excel, Outlook, PowerPoint)",
   "short_name": "Microsoft Office",
   "page_url": "https://patchgap.ai/is-my-microsoft-office-up-to-date/",
   "minimum_safe_version": null,
   "minimum_safe_version_source": [
    {
     "url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct",
     "title": "Microsoft: October 2026 Security Updates release notes (164 Office fixes)",
     "date": "2026-10-13",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": null,
    "applies_to": null,
    "source_incident": "office-october-2026-updates",
    "sources": [
     {
      "url": "https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct",
      "title": "Microsoft: October 2026 Security Updates release notes (164 Office fixes)",
      "date": "2026-10-13",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": false,
    "newest_fix": "Fixed in the October 2026 Office updates (Microsoft Update Guide lists the version).",
    "caveats": [
     "These are fixed by an update without one version number we can compare, so check their pages: office-attacked-bug-jan-2026, office-october-2026-updates, office-word-attacked-bug-feb-2026."
    ],
    "text": "There is no single version number for Microsoft Office. The newest fix listed here is: Fixed in the October 2026 Office updates (Microsoft Update Guide lists the version). If you have that or anything newer, you're covered against the fixed problems listed here (see the notes below)."
   },
   "update_steps": {
    "windows": [
     "Open any Office app > File > Account.",
     "Click Update Options > Update Now.",
     "Close Office apps when asked."
    ],
    "macos": [
     "Open any Office app > Help > Check for Updates.",
     "Install the updates Microsoft AutoUpdate shows."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Microsoft",
   "category": "apps",
   "platforms": [
    "windows",
    "macos"
   ],
   "what_it_is": "Word, Excel, Outlook, PowerPoint and OneNote on your computer.",
   "url": "https://patchgap.ai/is-my-microsoft-office-up-to-date/",
   "json_url": "https://patchgap.ai/products/microsoft-office.json",
   "official_site": "https://www.microsoft.com/microsoft-365",
   "official_download": "https://support.microsoft.com/office/install-office-updates-2ab296f3-7f03-43a2-8e50-46de917611c5",
   "how_it_updates": "Office updates itself. You can start it from File > Account > Update Options > Update Now (Windows) or Help > Check for Updates (Mac).",
   "check": {
    "windows": {
     "menu_path": "Open Word (or Excel). Click File > Account > Update Options > Update Now. The version is shown under About Word.",
     "command": "(Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Office\\ClickToRun\\Configuration' -ErrorAction SilentlyContinue).VersionToReport",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Open Word. Menu bar: Word > About Word. Or Word > Check for Updates.",
     "command": "defaults read \"/Applications/Microsoft Word.app/Contents/Info\" CFBundleShortVersionString",
     "shell": "Terminal",
     "read_only": true
    }
   },
   "open_incidents": [
    "office-word-attacked-bug-feb-2026",
    "office-attacked-bug-jan-2026",
    "office-october-2026-updates"
   ]
  },
  {
   "slug": "zoom",
   "name": "Zoom Workplace",
   "short_name": "Zoom",
   "page_url": "https://patchgap.ai/is-my-zoom-up-to-date/",
   "minimum_safe_version": null,
   "minimum_safe_version_source": [
    {
     "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26020",
     "title": "Zoom bulletin ZSB-26020: Zoom Workplace clients, buffer overflow",
     "date": "2026-10-13",
     "kind": "vendor"
    },
    {
     "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26021",
     "title": "Zoom bulletin ZSB-26021: Zoom clients for Windows, certificate checks",
     "date": "2026-10-13",
     "kind": "vendor"
    },
    {
     "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26022",
     "title": "Zoom bulletin ZSB-26022: Zoom clients, certificate checks in My Notes",
     "date": "2026-10-13",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": null,
    "applies_to": null,
    "source_incident": "zoom-october-2026-security-bulletins",
    "sources": [
     {
      "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26020",
      "title": "Zoom bulletin ZSB-26020: Zoom Workplace clients, buffer overflow",
      "date": "2026-10-13",
      "kind": "vendor"
     },
     {
      "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26021",
      "title": "Zoom bulletin ZSB-26021: Zoom clients for Windows, certificate checks",
      "date": "2026-10-13",
      "kind": "vendor"
     },
     {
      "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26022",
      "title": "Zoom bulletin ZSB-26022: Zoom clients, certificate checks in My Notes",
      "date": "2026-10-13",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": false,
    "newest_fix": "7.2.0 (7.1.9 on its branch)",
    "caveats": [
     "These are fixed by an update without one version number we can compare, so check their pages: zoom-october-2026-security-bulletins."
    ],
    "text": "There is no single version number for Zoom. The newest fix listed here is: 7.2.0 (7.1.9 on its branch). If you have that or anything newer, you're covered against the fixed problems listed here (see the notes below)."
   },
   "update_steps": {
    "windows": [
     "Open Zoom and click your profile picture.",
     "Click Check for Updates.",
     "Install the update and restart Zoom."
    ],
    "macos": [
     "Open Zoom and click your profile picture.",
     "Click Check for Updates.",
     "Install the update and restart Zoom."
    ],
    "linux": [
     "Open Zoom and click your profile picture.",
     "Click Check for Updates.",
     "Install the update and restart Zoom."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Zoom",
   "category": "apps",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "what_it_is": "The video meeting app.",
   "url": "https://patchgap.ai/is-my-zoom-up-to-date/",
   "json_url": "https://patchgap.ai/products/zoom.json",
   "official_site": "https://zoom.com",
   "official_download": "https://zoom.us/download",
   "how_it_updates": "Zoom shows an update prompt, or use Check for Updates in the app.",
   "check": {
    "windows": {
     "menu_path": "Open Zoom. Click your picture at the top right > Check for Updates. Or Help > About Zoom Workplace.",
     "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Zoom*' | Select-Object DisplayName,DisplayVersion",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Open Zoom. Menu bar: zoom.us > Check for Updates.",
     "command": "defaults read \"/Applications/zoom.us.app/Contents/Info\" CFBundleShortVersionString",
     "shell": "Terminal",
     "read_only": true
    },
    "linux": {
     "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
     "command": null,
     "shell": null,
     "read_only": null
    }
   },
   "open_incidents": [
    "zoom-october-2026-security-bulletins"
   ]
  },
  {
   "slug": "teamviewer",
   "name": "TeamViewer",
   "short_name": "TeamViewer",
   "page_url": "https://patchgap.ai/is-my-teamviewer-up-to-date/",
   "minimum_safe_version": "15.83",
   "minimum_safe_version_source": [
    {
     "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/",
     "title": "TeamViewer bulletin TV-2026-1011: Security update for TeamViewer clients",
     "date": "2026-10-27",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "15.83",
    "applies_to": "all platforms listed for this product",
    "source_incident": "teamviewer-15-83-security-update",
    "sources": [
     {
      "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/",
      "title": "TeamViewer bulletin TV-2026-1011: Security update for TeamViewer clients",
      "date": "2026-10-27",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": true,
    "caveats": [],
    "text": "You're covered against everything listed here if you're on TeamViewer 15.83 or newer."
   },
   "update_steps": {
    "windows": [
     "Open TeamViewer > Help > Check for new version.",
     "Or download the newest version from teamviewer.com."
    ],
    "macos": [
     "Open TeamViewer > Help > Check for new version.",
     "Or download the newest version from teamviewer.com."
    ],
    "linux": [
     "Open TeamViewer > Help > Check for new version.",
     "Or download the newest version from teamviewer.com."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "TeamViewer",
   "category": "apps",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "what_it_is": "An app that lets someone control your computer from far away (or you control theirs).",
   "url": "https://patchgap.ai/is-my-teamviewer-up-to-date/",
   "json_url": "https://patchgap.ai/products/teamviewer.json",
   "official_site": "https://www.teamviewer.com",
   "official_download": "https://www.teamviewer.com/download/",
   "how_it_updates": "TeamViewer can update itself if automatic updates are on. Otherwise download the newest version from the official site.",
   "check": {
    "windows": {
     "menu_path": "Open TeamViewer. Click Help > About TeamViewer (or the gear icon > About).",
     "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*TeamViewer*' | Select-Object DisplayName,DisplayVersion",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Open TeamViewer. Menu bar: TeamViewer > About TeamViewer.",
     "command": "defaults read \"/Applications/TeamViewer.app/Contents/Info\" CFBundleShortVersionString",
     "shell": "Terminal",
     "read_only": true
    },
    "linux": {
     "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
     "command": null,
     "shell": null,
     "read_only": null
    }
   },
   "open_incidents": [
    "teamviewer-15-83-security-update"
   ]
  },
  {
   "slug": "signal-desktop",
   "name": "Signal Desktop",
   "short_name": "Signal",
   "page_url": "https://patchgap.ai/is-my-signal-up-to-date/",
   "minimum_safe_version": "8.31.0",
   "minimum_safe_version_source": [
    {
     "url": "https://github.com/signalapp/Signal-Desktop/blob/v8.31.0/package.json",
     "title": "Signal Desktop v8.31.0 package.json (uses RingRTC 2.72.1)",
     "date": "2026-10-15",
     "kind": "vendor"
    },
    {
     "url": "https://github.com/signalapp/Signal-Desktop/blob/v8.32.0/package.json",
     "title": "Signal Desktop v8.32.0 package.json (uses RingRTC 2.72.1)",
     "date": "2026-10-20",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "8.31.0",
    "applies_to": "all platforms listed for this product",
    "source_incident": "signal-desktop-call-hang-up-bug",
    "sources": [
     {
      "url": "https://github.com/signalapp/Signal-Desktop/blob/v8.31.0/package.json",
      "title": "Signal Desktop v8.31.0 package.json (uses RingRTC 2.72.1)",
      "date": "2026-10-15",
      "kind": "vendor"
     },
     {
      "url": "https://github.com/signalapp/Signal-Desktop/blob/v8.32.0/package.json",
      "title": "Signal Desktop v8.32.0 package.json (uses RingRTC 2.72.1)",
      "date": "2026-10-20",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": true,
    "caveats": [],
    "text": "You're covered against everything listed here if you're on Signal 8.31.0 or newer."
   },
   "update_steps": {
    "windows": [
     "Signal Desktop updates itself. Click Restart when it shows the update banner.",
     "Or download it again from signal.org/download."
    ],
    "macos": [
     "Signal Desktop updates itself. Click Restart when it shows the update banner.",
     "Or download it again from signal.org/download."
    ],
    "linux": [
     "Signal Desktop updates itself. Click Restart when it shows the update banner.",
     "Or download it again from signal.org/download."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Signal",
   "category": "apps",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "what_it_is": "The Signal private messaging app for computers.",
   "url": "https://patchgap.ai/is-my-signal-up-to-date/",
   "json_url": "https://patchgap.ai/products/signal-desktop.json",
   "official_site": "https://signal.org",
   "official_download": "https://signal.org/download/",
   "how_it_updates": "Signal Desktop updates itself. Restart it when it asks.",
   "check": {
    "windows": {
     "menu_path": "Open Signal. Windows and Linux: Help > About Signal Desktop. Mac: Signal > About Signal Desktop.",
     "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Signal*' | Select-Object DisplayName,DisplayVersion",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Open Signal. Menu bar: Signal > About Signal Desktop.",
     "command": "defaults read \"/Applications/Signal.app/Contents/Info\" CFBundleShortVersionString",
     "shell": "Terminal",
     "read_only": true
    },
    "linux": {
     "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
     "command": null,
     "shell": null,
     "read_only": null
    }
   },
   "open_incidents": [
    "signal-desktop-call-hang-up-bug"
   ]
  },
  {
   "slug": "telegram-desktop",
   "name": "Telegram Desktop",
   "short_name": "Telegram",
   "page_url": "https://patchgap.ai/is-my-telegram-up-to-date/",
   "minimum_safe_version": "7.2.9",
   "minimum_safe_version_source": [
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107181",
     "title": "NVD: CVE-2026-107181",
     "date": "2026-10-07",
     "kind": "nvd"
    },
    {
     "url": "https://github.com/telegramdesktop/tdesktop/releases/tag/v7.2.9",
     "title": "Telegram Desktop release v7.2.9",
     "date": "2026-09-17",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "7.2.9",
    "applies_to": "all platforms listed for this product",
    "source_incident": "telegram-desktop-link-account-takeover",
    "sources": [
     {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107181",
      "title": "NVD: CVE-2026-107181",
      "date": "2026-10-07",
      "kind": "nvd"
     },
     {
      "url": "https://github.com/telegramdesktop/tdesktop/releases/tag/v7.2.9",
      "title": "Telegram Desktop release v7.2.9",
      "date": "2026-09-17",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": true,
    "caveats": [],
    "text": "You're covered against everything listed here if you're on Telegram 7.2.9 or newer."
   },
   "update_steps": {
    "windows": [
     "Open Telegram > Settings > Advanced and check the version.",
     "Install the update it offers, or download it from desktop.telegram.org."
    ],
    "macos": [
     "Open Telegram > Settings > Advanced and check the version.",
     "Install the update it offers, or download it from desktop.telegram.org."
    ],
    "linux": [
     "Open Telegram > Settings > Advanced and check the version.",
     "Install the update it offers, or download it from desktop.telegram.org."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Telegram",
   "category": "apps",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "what_it_is": "The Telegram messaging app for computers.",
   "url": "https://patchgap.ai/is-my-telegram-up-to-date/",
   "json_url": "https://patchgap.ai/products/telegram-desktop.json",
   "official_site": "https://desktop.telegram.org",
   "official_download": "https://desktop.telegram.org/",
   "how_it_updates": "Telegram Desktop updates itself. You can also download the newest version from the official site.",
   "check": {
    "windows": {
     "menu_path": "Open Telegram. Open Settings. The version number is shown in Settings (look under Advanced or at the bottom).",
     "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Telegram*' | Select-Object DisplayName,DisplayVersion",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Open Telegram. Menu bar: Telegram > About Telegram.",
     "command": "defaults read \"/Applications/Telegram.app/Contents/Info\" CFBundleShortVersionString",
     "shell": "Terminal",
     "read_only": true
    },
    "linux": {
     "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
     "command": null,
     "shell": null,
     "read_only": null
    }
   },
   "open_incidents": [
    "telegram-desktop-link-account-takeover"
   ]
  },
  {
   "slug": "plex-media-server",
   "name": "Plex Media Server",
   "short_name": "Plex",
   "page_url": "https://patchgap.ai/is-my-plex-up-to-date/",
   "minimum_safe_version": "1.43.3",
   "minimum_safe_version_source": [
    {
     "url": "https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319",
     "title": "Plex forum: Important security update for Plex Media Server 1.43.2 and earlier",
     "date": "2026-09-01",
     "kind": "vendor"
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652",
     "title": "NVD: CVE-2026-96652",
     "date": "2026-09-23",
     "kind": "nvd"
    }
   ],
   "baseline": {
    "version": "1.43.3",
    "applies_to": "all platforms listed for this product",
    "source_incident": "plex-media-server-plex2shell-attacks",
    "sources": [
     {
      "url": "https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319",
      "title": "Plex forum: Important security update for Plex Media Server 1.43.2 and earlier",
      "date": "2026-09-01",
      "kind": "vendor"
     },
     {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96652",
      "title": "NVD: CVE-2026-96652",
      "date": "2026-09-23",
      "kind": "nvd"
     }
    ],
    "covers_everything_listed": true,
    "caveats": [],
    "text": "You're covered against everything listed here if you're on Plex 1.43.3 or newer."
   },
   "update_steps": {
    "windows": [
     "Open Plex Web > Settings > General (under your server).",
     "Install the update it offers, or download it from plex.tv."
    ],
    "macos": [
     "Open Plex Web > Settings > General (under your server).",
     "Install the update it offers, or download it from plex.tv."
    ],
    "linux": [
     "Open Plex Web > Settings > General (under your server).",
     "Install the update it offers, or download it from plex.tv."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Plex",
   "category": "apps",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "what_it_is": "The app that turns a computer into a home movie and music server.",
   "url": "https://patchgap.ai/is-my-plex-up-to-date/",
   "json_url": "https://patchgap.ai/products/plex-media-server.json",
   "official_site": "https://www.plex.tv",
   "official_download": "https://www.plex.tv/media-server-downloads/",
   "how_it_updates": "Turn on automatic updates in Plex Media Server settings, or download the newest version from the official downloads page.",
   "check": {
    "windows": {
     "menu_path": "Open Plex Media Server's app or tray icon and look for its version (About or Settings). You can also open Plex in your web browser and go to Settings.",
     "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Plex Media Server*' | Select-Object DisplayName,DisplayVersion",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Look for the Plex Media Server icon in the menu bar and open its About window.",
     "command": "defaults read \"/Applications/Plex Media Server.app/Contents/Info\" CFBundleShortVersionString",
     "shell": "Terminal",
     "read_only": true
    },
    "linux": {
     "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
     "command": null,
     "shell": null,
     "read_only": null
    }
   },
   "open_incidents": [
    "plex-media-server-plex2shell-attacks"
   ]
  },
  {
   "slug": "tailscale",
   "name": "Tailscale",
   "short_name": "Tailscale",
   "page_url": "https://patchgap.ai/is-my-tailscale-up-to-date/",
   "minimum_safe_version": "1.104.4",
   "minimum_safe_version_source": [
    {
     "url": "https://tailscale.com/security-bulletins",
     "title": "Tailscale security bulletins TS-2026-014 to TS-2026-017 (fixed in 1.104.4)",
     "date": "2026-10-27",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "1.104.4",
    "applies_to": "all platforms listed for this product",
    "source_incident": "tailscale-ssh-flaws-tailworm",
    "sources": [
     {
      "url": "https://tailscale.com/security-bulletins",
      "title": "Tailscale security bulletins TS-2026-014 to TS-2026-017 (fixed in 1.104.4)",
      "date": "2026-10-27",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": false,
    "caveats": [
     "Only partly fixed so far, so also follow the extra steps on their pages: emudhra-fake-website-certificates."
    ],
    "text": "You're covered against every problem here that has a version number if you're on Tailscale 1.104.4 or newer."
   },
   "update_steps": {
    "windows": [
     "Download the newest version from tailscale.com/download, or use the app's update option if auto-update is on."
    ],
    "macos": [
     "Download the newest version from tailscale.com/download, or use the app's update option if auto-update is on."
    ],
    "linux": [
     "Download the newest version from tailscale.com/download, or use the app's update option if auto-update is on."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Tailscale",
   "category": "network",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "what_it_is": "A VPN-style app that links your devices into one private network.",
   "url": "https://patchgap.ai/is-my-tailscale-up-to-date/",
   "json_url": "https://patchgap.ai/products/tailscale.json",
   "official_site": "https://tailscale.com",
   "official_download": "https://tailscale.com/download",
   "how_it_updates": "Tailscale can update itself if auto-update is on. Or download the newest version from the official site.",
   "check": {
    "windows": {
     "menu_path": "Click the Tailscale icon (tray on Windows, menu bar on Mac) and choose About Tailscale.",
     "command": "tailscale version",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Click the Tailscale icon in the menu bar > About Tailscale.",
     "command": "tailscale version",
     "shell": "Terminal",
     "read_only": true
    },
    "linux": {
     "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
     "command": null,
     "shell": null,
     "read_only": null
    }
   },
   "open_incidents": [
    "tailscale-ssh-flaws-tailworm",
    "emudhra-fake-website-certificates"
   ]
  },
  {
   "slug": "electrum",
   "name": "Electrum",
   "short_name": "Electrum",
   "page_url": "https://patchgap.ai/is-my-electrum-up-to-date/",
   "minimum_safe_version": "4.8.3",
   "minimum_safe_version_source": [
    {
     "url": "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
     "title": "Electrum security advisory GHSA-6jp4-8v48-cc5v",
     "date": "2026-10-24",
     "kind": "ghsa"
    },
    {
     "url": "https://raw.githubusercontent.com/spesmilo/electrum/refs/heads/master/RELEASE-NOTES",
     "title": "Electrum release notes for 4.8.3 (Oct 23, 2026)",
     "date": "2026-10-23",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "4.8.3",
    "applies_to": "all platforms listed for this product",
    "source_incident": "electrum-wallet-fake-server-fee-bump-theft",
    "sources": [
     {
      "url": "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
      "title": "Electrum security advisory GHSA-6jp4-8v48-cc5v",
      "date": "2026-10-24",
      "kind": "ghsa"
     },
     {
      "url": "https://raw.githubusercontent.com/spesmilo/electrum/refs/heads/master/RELEASE-NOTES",
      "title": "Electrum release notes for 4.8.3 (Oct 23, 2026)",
      "date": "2026-10-23",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": true,
    "caveats": [],
    "text": "You're covered against everything listed here if you're on Electrum 4.8.3 or newer."
   },
   "update_steps": {
    "windows": [
     "Download the newest version only from electrum.org.",
     "Check the signature as electrum.org explains, then install it."
    ],
    "macos": [
     "Download the newest version only from electrum.org.",
     "Check the signature as electrum.org explains, then install it."
    ],
    "linux": [
     "Download the newest version only from electrum.org.",
     "Check the signature as electrum.org explains, then install it."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Electrum",
   "category": "wallets",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "what_it_is": "A desktop wallet for Bitcoin.",
   "url": "https://patchgap.ai/is-my-electrum-up-to-date/",
   "json_url": "https://patchgap.ai/products/electrum.json",
   "official_site": "https://electrum.org",
   "official_download": "https://electrum.org/#download",
   "how_it_updates": "Electrum does not update itself. Download the new version from electrum.org and check its signature as the site explains.",
   "check": {
    "windows": {
     "menu_path": "Open Electrum. Click Help > About Electrum.",
     "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Electrum*' | Select-Object DisplayName,DisplayVersion",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Open Electrum. Click Help > About Electrum.",
     "command": "defaults read \"/Applications/Electrum.app/Contents/Info\" CFBundleShortVersionString",
     "shell": "Terminal",
     "read_only": true
    },
    "linux": {
     "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
     "command": null,
     "shell": null,
     "read_only": null
    }
   },
   "open_incidents": [
    "electrum-wallet-fake-server-fee-bump-theft"
   ]
  },
  {
   "slug": "fearless-wallet-extension",
   "name": "Fearless Wallet browser extension",
   "short_name": "Fearless Wallet",
   "page_url": "https://patchgap.ai/is-my-fearless-wallet-up-to-date/",
   "minimum_safe_version": null,
   "minimum_safe_version_source": [],
   "baseline": {
    "version": null,
    "applies_to": null,
    "source_incident": null,
    "sources": [],
    "covers_everything_listed": false,
    "caveats": [
     "No version fixes these yet: fearless-wallet-extension-leaks-private-keys. Follow the steps on their pages."
    ],
    "text": "No version of Fearless Wallet is safe from everything listed here yet. Follow the steps on each problem's page."
   },
   "update_steps": {
    "windows": [
     "There is no safe version. Remove the extension and move your funds to a different wallet."
    ],
    "macos": [
     "There is no safe version. Remove the extension and move your funds to a different wallet."
    ],
    "linux": [
     "There is no safe version. Remove the extension and move your funds to a different wallet."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Soramitsu (Fearless Wallet)",
   "category": "wallets",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "what_it_is": "A browser add-on wallet for Polkadot coins. Not an official Polkadot wallet.",
   "url": "https://patchgap.ai/is-my-fearless-wallet-up-to-date/",
   "json_url": "https://patchgap.ai/products/fearless-wallet-extension.json",
   "official_site": null,
   "official_download": null,
   "how_it_updates": "No safe version is available. Do not use it.",
   "check": {
    "windows": {
     "menu_path": "In Chrome, open chrome://extensions and look for Fearless Wallet. Click Details to see the version. In Firefox, open about:addons.",
     "command": null,
     "shell": null,
     "read_only": null
    },
    "macos": {
     "menu_path": "In Chrome, open chrome://extensions and look for Fearless Wallet. Click Details to see the version. In Firefox, open about:addons.",
     "command": null,
     "shell": null,
     "read_only": null
    },
    "linux": {
     "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
     "command": null,
     "shell": null,
     "read_only": null
    }
   },
   "open_incidents": [
    "fearless-wallet-extension-leaks-private-keys"
   ]
  },
  {
   "slug": "claude-code",
   "name": "Claude Code",
   "short_name": "Claude Code",
   "page_url": "https://patchgap.ai/is-my-claude-code-up-to-date/",
   "minimum_safe_version": "2.1.179",
   "minimum_safe_version_source": [
    {
     "url": "https://github.com/advisories/GHSA-pq7j-f95f-qfcv",
     "title": "GitHub advisory GHSA-pq7j-f95f-qfcv: Claude Code plugin hash pin bypass",
     "date": "2026-10-15",
     "kind": "ghsa"
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86063",
     "title": "NVD: CVE-2026-86063",
     "date": "2026-10-13",
     "kind": "nvd"
    }
   ],
   "baseline": {
    "version": "2.1.179",
    "applies_to": "all platforms listed for this product",
    "source_incident": "claude-code-plugin-hash-pin-bypass",
    "sources": [
     {
      "url": "https://github.com/advisories/GHSA-pq7j-f95f-qfcv",
      "title": "GitHub advisory GHSA-pq7j-f95f-qfcv: Claude Code plugin hash pin bypass",
      "date": "2026-10-15",
      "kind": "ghsa"
     },
     {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86063",
      "title": "NVD: CVE-2026-86063",
      "date": "2026-10-13",
      "kind": "nvd"
     }
    ],
    "covers_everything_listed": true,
    "caveats": [],
    "text": "You're covered against everything listed here if you're on Claude Code 2.1.179 or newer."
   },
   "update_steps": {
    "windows": [
     "Claude Code updates itself by default. Restart it to get the newest version.",
     "Or ask before running its own update command (see Anthropic's docs)."
    ],
    "macos": [
     "Claude Code updates itself by default. Restart it to get the newest version.",
     "Or ask before running its own update command (see Anthropic's docs)."
    ],
    "linux": [
     "Claude Code updates itself by default. Restart it to get the newest version.",
     "Or ask before running its own update command (see Anthropic's docs)."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Anthropic",
   "category": "ai",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "what_it_is": "An AI helper that works inside a computer's command line to write and change code.",
   "url": "https://patchgap.ai/is-my-claude-code-up-to-date/",
   "json_url": "https://patchgap.ai/products/claude-code.json",
   "official_site": "https://www.anthropic.com/claude-code",
   "official_download": "https://www.anthropic.com/claude-code",
   "how_it_updates": "Claude Code updates itself by default. You can also run its own update command.",
   "check": {
    "windows": {
     "menu_path": "Open a terminal window and type the command below.",
     "command": "claude --version",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Open Terminal and type the command below.",
     "command": "claude --version",
     "shell": "Terminal",
     "read_only": true
    },
    "linux": {
     "menu_path": "Open Terminal and type the command below.",
     "command": "claude --version",
     "shell": "Terminal",
     "read_only": true
    }
   },
   "open_incidents": [
    "claude-code-plugin-hash-pin-bypass"
   ]
  },
  {
   "slug": "opencode",
   "name": "OpenCode",
   "short_name": "OpenCode",
   "page_url": "https://patchgap.ai/is-my-opencode-up-to-date/",
   "minimum_safe_version": "1.18.33",
   "minimum_safe_version_source": [
    {
     "url": "https://github.com/anomalyco/opencode/releases/tag/v1.18.33",
     "title": "OpenCode release v1.18.33",
     "date": "2026-09-28",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "1.18.33",
    "applies_to": "all platforms listed for this product",
    "source_incident": "opencode-windows-sign-in-code-run",
    "sources": [
     {
      "url": "https://github.com/anomalyco/opencode/releases/tag/v1.18.33",
      "title": "OpenCode release v1.18.33",
      "date": "2026-09-28",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": true,
    "caveats": [],
    "text": "You're covered against everything listed here if you're on OpenCode 1.18.33 or newer."
   },
   "update_steps": {
    "windows": [
     "Use OpenCode's own upgrade command, or download the newest release from its official GitHub page."
    ],
    "macos": [
     "Use OpenCode's own upgrade command, or download the newest release from its official GitHub page."
    ],
    "linux": [
     "Use OpenCode's own upgrade command, or download the newest release from its official GitHub page."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Anomaly",
   "category": "ai",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "what_it_is": "An open-source AI helper that works inside a computer's command line to write and change code.",
   "url": "https://patchgap.ai/is-my-opencode-up-to-date/",
   "json_url": "https://patchgap.ai/products/opencode.json",
   "official_site": "https://opencode.ai",
   "official_download": "https://github.com/anomalyco/opencode/releases",
   "how_it_updates": "Run OpenCode's upgrade command, or download the newest release from the official GitHub page.",
   "check": {
    "windows": {
     "menu_path": "Open PowerShell and type the command below.",
     "command": "opencode --version",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Open Terminal and type the command below.",
     "command": "opencode --version",
     "shell": "Terminal",
     "read_only": true
    },
    "linux": {
     "menu_path": "Open Terminal and type the command below.",
     "command": "opencode --version",
     "shell": "Terminal",
     "read_only": true
    }
   },
   "open_incidents": [
    "opencode-windows-sign-in-code-run"
   ]
  },
  {
   "slug": "time4popcorn",
   "name": "Popcorn Time (Time4Popcorn)",
   "short_name": "Popcorn Time",
   "page_url": "https://patchgap.ai/is-my-popcorn-time-up-to-date/",
   "minimum_safe_version": null,
   "minimum_safe_version_source": [],
   "baseline": {
    "version": null,
    "applies_to": null,
    "source_incident": null,
    "sources": [],
    "covers_everything_listed": false,
    "caveats": [
     "No version fixes these yet: popcorn-time-time4popcorn-dead-updater. Follow the steps on their pages."
    ],
    "text": "No version of Popcorn Time is safe from everything listed here yet. Follow the steps on each problem's page."
   },
   "update_steps": {
    "windows": [
     "There is no safe update. Remove the app."
    ],
    "macos": [
     "There is no safe update. Remove the app."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Time4Popcorn",
   "category": "apps",
   "platforms": [
    "windows",
    "macos"
   ],
   "what_it_is": "A movie-streaming app that downloads from file-sharing networks. It is no longer kept up to date.",
   "url": "https://patchgap.ai/is-my-popcorn-time-up-to-date/",
   "json_url": "https://patchgap.ai/products/time4popcorn.json",
   "official_site": null,
   "official_download": null,
   "how_it_updates": "There is no safe update. The advice is to remove the app.",
   "check": {
    "windows": {
     "menu_path": "Start > Settings > Apps > Installed apps. Search for \"Popcorn\".",
     "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Popcorn*' | Select-Object DisplayName,DisplayVersion; Get-Process | Where-Object ProcessName -like '*popcorn*' | Select-Object ProcessName,Id",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Open Finder > Applications and look for Popcorn Time or Time4Popcorn.",
     "command": "ls /Applications | grep -i popcorn",
     "shell": "Terminal",
     "read_only": true
    }
   },
   "open_incidents": [
    "popcorn-time-time4popcorn-dead-updater"
   ]
  },
  {
   "slug": "netgear-routers",
   "name": "NETGEAR home routers and extenders",
   "short_name": "NETGEAR router",
   "page_url": "https://patchgap.ai/is-my-netgear-router-up-to-date/",
   "minimum_safe_version": null,
   "minimum_safe_version_source": [
    {
     "url": "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory",
     "title": "NETGEAR: October 2026 Security Advisory",
     "date": "2026-10",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": null,
    "applies_to": null,
    "source_incident": "netgear-router-and-extender-fixes-oct-2026",
    "sources": [
     {
      "url": "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory",
      "title": "NETGEAR: October 2026 Security Advisory",
      "date": "2026-10",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": false,
    "newest_fix": "V2.3.4.12",
    "caveats": [
     "Only partly fixed so far, so also follow the extra steps on their pages: netgear-router-and-extender-fixes-oct-2026.",
     "These are fixed by an update without one version number we can compare, so check their pages: netgear-router-and-extender-fixes-oct-2026."
    ],
    "text": "There is no single version number for NETGEAR router. The newest fix listed here is: V2.3.4.12. If you have that or anything newer, you're covered against the fixed problems listed here (see the notes below)."
   },
   "update_steps": {
    "router": [
     "Open the Nighthawk app or your router's admin page.",
     "Look for Firmware Update and install the newest version.",
     "Or find your model at netgear.com/support."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "NETGEAR",
   "category": "network",
   "platforms": [
    "router"
   ],
   "what_it_is": "The Wi-Fi box in many homes (Nighthawk, Orbi and similar).",
   "url": "https://patchgap.ai/is-my-netgear-router-up-to-date/",
   "json_url": "https://patchgap.ai/products/netgear-routers.json",
   "official_site": "https://www.netgear.com",
   "official_download": "https://www.netgear.com/support/download/",
   "how_it_updates": "Most NETGEAR routers can update their own firmware. Turn on automatic updates in the router settings.",
   "check": {
    "router": {
     "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
     "command": null,
     "shell": null,
     "read_only": null
    }
   },
   "open_incidents": [
    "netgear-router-and-extender-fixes-oct-2026"
   ]
  },
  {
   "slug": "microsoft-authenticator",
   "name": "Microsoft Authenticator (Android)",
   "short_name": "Microsoft Authenticator",
   "page_url": "https://patchgap.ai/is-my-microsoft-authenticator-up-to-date/",
   "minimum_safe_version": null,
   "minimum_safe_version_source": [
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80097",
     "title": "NVD: CVE-2026-80097",
     "date": "2026-09-08",
     "kind": "nvd"
    }
   ],
   "baseline": {
    "version": null,
    "applies_to": null,
    "source_incident": "microsoft-authenticator-android-token-bug",
    "sources": [
     {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80097",
      "title": "NVD: CVE-2026-80097",
      "date": "2026-09-08",
      "kind": "nvd"
     }
    ],
    "covers_everything_listed": false,
    "newest_fix": "Microsoft has patched the app. Update from Google Play. The exact fixed version is not confirmed.",
    "caveats": [
     "These are fixed by an update without one version number we can compare, so check their pages: microsoft-authenticator-android-token-bug."
    ],
    "text": "There is no single version number for Microsoft Authenticator. The newest fix listed here is: Microsoft has patched the app. Update from Google Play. The exact fixed version is not confirmed. If you have that or anything newer, you're covered against the fixed problems listed here (see the notes below)."
   },
   "update_steps": {
    "android": [
     "Open the Google Play Store > Manage apps & device.",
     "Update Microsoft Authenticator."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Microsoft",
   "category": "phones",
   "platforms": [
    "android"
   ],
   "what_it_is": "The phone app that gives you sign-in codes for work and Microsoft accounts.",
   "url": "https://patchgap.ai/is-my-microsoft-authenticator-up-to-date/",
   "json_url": "https://patchgap.ai/products/microsoft-authenticator.json",
   "official_site": "https://www.microsoft.com/security/mobile-authenticator-app",
   "official_download": "https://play.google.com/store/apps/details?id=com.azure.authenticator",
   "how_it_updates": "Update from the Google Play Store.",
   "check": {
    "android": {
     "menu_path": "On your Android phone: open Google Play > tap your picture > Manage apps and device > Updates available.",
     "command": null,
     "shell": null,
     "read_only": null
    }
   },
   "open_incidents": [
    "microsoft-authenticator-android-token-bug"
   ]
  },
  {
   "slug": "iphone-ios",
   "name": "iPhone and iPad (iOS)",
   "short_name": "iPhone",
   "page_url": "https://patchgap.ai/is-my-iphone-up-to-date/",
   "minimum_safe_version": "26.3",
   "minimum_safe_version_source": [
    {
     "url": "https://support.apple.com/en-us/126346",
     "title": "Apple: About the security content of iOS 26.3 and iPadOS 26.3",
     "date": "2026-02-11",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "26.3",
    "applies_to": "all platforms listed for this product",
    "source_incident": "apple-attacked-bug-feb-2026",
    "sources": [
     {
      "url": "https://support.apple.com/en-us/126346",
      "title": "Apple: About the security content of iOS 26.3 and iPadOS 26.3",
      "date": "2026-02-11",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": false,
    "caveats": [
     "These are fixed by an update without one version number we can compare, so check their pages: apple-webkit-pointer-auth-cve-2024-27834, iphone-ads-and-hijacked-tags-spyware, iphone-ios-27-2-security-updates-oct-26, macos-coregraphics-zero-day-sept-2026."
    ],
    "text": "You're covered against every problem here that has a version number if you're on iOS 26.3 or newer."
   },
   "update_steps": {
    "ios": [
     "Settings > General > Software Update.",
     "Install the update it offers."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Apple",
   "category": "phones",
   "platforms": [
    "ios"
   ],
   "what_it_is": "The system software on iPhones and iPads.",
   "url": "https://patchgap.ai/is-my-iphone-up-to-date/",
   "json_url": "https://patchgap.ai/products/iphone-ios.json",
   "official_site": "https://www.apple.com/ios",
   "official_download": "https://support.apple.com/en-us/100100",
   "how_it_updates": "Settings > General > Software Update. You can turn on Automatic Updates there.",
   "check": {
    "ios": {
     "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
     "command": null,
     "shell": null,
     "read_only": null
    }
   },
   "open_incidents": [
    "iphone-ads-and-hijacked-tags-spyware",
    "macos-coregraphics-zero-day-sept-2026",
    "apple-attacked-bug-feb-2026",
    "apple-webkit-attacked-bug-dec-2025",
    "apple-attacked-bugs-nov-2025",
    "apple-webkit-pointer-auth-cve-2024-27834",
    "iphone-ios-27-2-security-updates-oct-26"
   ]
  },
  {
   "slug": "adobe-reader",
   "name": "Adobe Acrobat Reader",
   "short_name": "Adobe Reader",
   "page_url": "https://patchgap.ai/is-my-adobe-reader-up-to-date/",
   "minimum_safe_version": "26.001.21411",
   "minimum_safe_version_source": [
    {
     "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html",
     "title": "Adobe: Security update available for Adobe Acrobat Reader (APSB26-43)",
     "date": "2026-04-11",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "26.001.21411",
    "applies_to": "all platforms listed for this product",
    "source_incident": "adobe-reader-attacked-bug-apr-2026",
    "sources": [
     {
      "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html",
      "title": "Adobe: Security update available for Adobe Acrobat Reader (APSB26-43)",
      "date": "2026-04-11",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": true,
    "caveats": [],
    "text": "You're covered against everything listed here if you're on Adobe Reader 26.001.21411 or newer."
   },
   "update_steps": {
    "windows": [
     "Open Acrobat Reader > Help > Check for Updates.",
     "Install the update and restart Reader.",
     "Or download it from get.adobe.com/reader."
    ],
    "macos": [
     "Open Acrobat Reader > Help > Check for Updates.",
     "Install the update and restart Reader.",
     "Or download it from get.adobe.com/reader."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Adobe",
   "category": "apps",
   "platforms": [
    "windows",
    "macos"
   ],
   "what_it_is": "Adobe's free app for opening and signing PDF files.",
   "url": "https://patchgap.ai/is-my-adobe-reader-up-to-date/",
   "json_url": "https://patchgap.ai/products/adobe-reader.json",
   "official_site": "https://www.adobe.com/acrobat/pdf-reader.html",
   "official_download": "https://get.adobe.com/reader/",
   "how_it_updates": "Reader updates itself in the background. You can start it with Help > Check for Updates.",
   "check": {
    "windows": {
     "menu_path": "Open Acrobat Reader > Help (or Menu > Help) > About Adobe Acrobat Reader.",
     "command": "(Get-Item \"$env:ProgramFiles\\Adobe\\Acrobat DC\\Acrobat\\Acrobat.exe\").VersionInfo.ProductVersion",
     "shell": "PowerShell",
     "read_only": true
    },
    "macos": {
     "menu_path": "Open Acrobat Reader > Acrobat Reader menu > About Adobe Acrobat Reader.",
     "command": "mdls -name kMDItemVersion \"/Applications/Adobe Acrobat Reader.app\"",
     "shell": "Terminal",
     "read_only": true
    }
   },
   "open_incidents": [
    "adobe-reader-attacked-bug-apr-2026"
   ]
  },
  {
   "slug": "notepad-plus-plus",
   "name": "Notepad++",
   "short_name": "Notepad++",
   "page_url": "https://patchgap.ai/is-my-notepad-plus-plus-up-to-date/",
   "minimum_safe_version": "8.9.1",
   "minimum_safe_version_source": [
    {
     "url": "https://notepad-plus-plus.org/news/clarification-security-incident/",
     "title": "Notepad++: Important Clarification: Notepad++ Security Incident",
     "date": "2026-02-05",
     "kind": "vendor"
    },
    {
     "url": "https://community.notepad-plus-plus.org/topic/27298/notepad-v8-8-9-vulnerability-fix",
     "title": "Notepad++ Community (official): Notepad++ v8.8.9 release notes",
     "date": "2025-12-09",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "8.9.1",
    "applies_to": "all platforms listed for this product",
    "source_incident": "notepad-plus-plus-updater-hijack-2026",
    "sources": [
     {
      "url": "https://notepad-plus-plus.org/news/clarification-security-incident/",
      "title": "Notepad++: Important Clarification: Notepad++ Security Incident",
      "date": "2026-02-05",
      "kind": "vendor"
     },
     {
      "url": "https://community.notepad-plus-plus.org/topic/27298/notepad-v8-8-9-vulnerability-fix",
      "title": "Notepad++ Community (official): Notepad++ v8.8.9 release notes",
      "date": "2025-12-09",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": true,
    "caveats": [],
    "text": "You're covered against everything listed here if you're on Notepad++ 8.9.1 or newer."
   },
   "update_steps": {
    "windows": [
     "Go to notepad-plus-plus.org/downloads (type the address yourself).",
     "Download the newest installer and run it."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "Notepad++ (Don Ho)",
   "category": "apps",
   "platforms": [
    "windows"
   ],
   "what_it_is": "A free text and code editor for Windows.",
   "url": "https://patchgap.ai/is-my-notepad-plus-plus-up-to-date/",
   "json_url": "https://patchgap.ai/products/notepad-plus-plus.json",
   "official_site": "https://notepad-plus-plus.org/",
   "official_download": "https://notepad-plus-plus.org/downloads/",
   "how_it_updates": "Notepad++ can check for updates (? > Update Notepad++). The safest way is to download the newest installer from notepad-plus-plus.org.",
   "check": {
    "windows": {
     "menu_path": "Open Notepad++ > ? menu > About Notepad++.",
     "command": "(Get-Item \"$env:ProgramFiles\\Notepad++\\notepad++.exe\").VersionInfo.ProductVersion",
     "shell": "PowerShell",
     "read_only": true
    }
   },
   "open_incidents": [
    "notepad-plus-plus-updater-hijack-2026"
   ]
  },
  {
   "slug": "winrar",
   "name": "WinRAR",
   "short_name": "WinRAR",
   "page_url": "https://patchgap.ai/is-my-winrar-up-to-date/",
   "minimum_safe_version": "7.13",
   "minimum_safe_version_source": [
    {
     "url": "https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5",
     "title": "WinRAR News: WinRAR 7.13 Final released (CVE-2025-8088)",
     "date": "2025-07-30",
     "kind": "vendor"
    }
   ],
   "baseline": {
    "version": "7.13",
    "applies_to": "all platforms listed for this product",
    "source_incident": "winrar-attacked-path-bugs-2025",
    "sources": [
     {
      "url": "https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5",
      "title": "WinRAR News: WinRAR 7.13 Final released (CVE-2025-8088)",
      "date": "2025-07-30",
      "kind": "vendor"
     }
    ],
    "covers_everything_listed": true,
    "caveats": [],
    "text": "You're covered against everything listed here if you're on WinRAR 7.13 or newer."
   },
   "update_steps": {
    "windows": [
     "Go to win-rar.com/download.html (type the address yourself).",
     "Download the newest version and install it over the old one."
    ]
   },
   "last_checked": "2026-11-07T16:04:48+00:00",
   "vendor": "RARLAB / win.rar GmbH",
   "category": "apps",
   "platforms": [
    "windows"
   ],
   "what_it_is": "A popular Windows app for opening .rar and .zip files.",
   "url": "https://patchgap.ai/is-my-winrar-up-to-date/",
   "json_url": "https://patchgap.ai/products/winrar.json",
   "official_site": "https://www.win-rar.com/",
   "official_download": "https://www.win-rar.com/download.html",
   "how_it_updates": "WinRAR does not update itself. Download the newest version from win-rar.com and install it over the old one.",
   "check": {
    "windows": {
     "menu_path": "Open WinRAR > Help > About WinRAR.",
     "command": "(Get-Item \"$env:ProgramFiles\\WinRAR\\WinRAR.exe\").VersionInfo.ProductVersion",
     "shell": "PowerShell",
     "read_only": true
    }
   },
   "open_incidents": [
    "winrar-attacked-path-bugs-2025"
   ]
  }
 ]
}