Skip to content

Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

3,930 record edits refused · 339 advisory changes · newest first · grouped by dayCSVJSONRSS

Since
ChangedSourceRows

These rows are not counted anywhere on this site. Checked and refused means we compared this change and then rejected it: the false positive filter for this kind of change judged it to be a false positive rather than a real change. The row is shown so you can check the filter and disagree with us, and it is counted in no figure on this site. No advisory change is here: the advisory engine counts the 2,291 version pairs its filters refused by class rather than writing them out one by one, so this view holds CVE and KEV changes only.

Rows we checked and refused, counted nowhere, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.KindRecord or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Tue 1 Sep 2026· 44 record changes
2026-09-01Product addedCVE-2026-84119not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84120not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84121not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84122not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84123not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84124not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84125not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84126not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84128not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84129not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84130not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84131not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84132not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84133not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84134not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84136not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84137not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84138not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84139not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84140not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84141not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84142not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84143not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84144not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-84145not named as affected at publication, now names thunderbirdNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposureDays to revision 0
2026-09-01Product addedCVE-2026-75121VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-75122VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-75123VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-75124VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-75125VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-75126VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-77217VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-77218VulnChecknot named as affected at publication, now names planet gs-4210-16p2s v3Not counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected productDays to revision 4
2026-09-01Product addedCVE-2026-15816not named as affected at publication, now names red hat enterprise linux 7 extended lifecycle supportNot counted: Product relabelled. probable relabelling of red hat/red hat enterprise linux 7, not a newly affected productDays to revision 25
2026-09-01Product addedCVE-2026-6893not named as affected at publication, now names red hat enterprise linux 7 extended lifecycle supportNot counted: Product relabelled. probable relabelling of red hat/red hat enterprise linux 7, not a newly affected productDays to revision 83
2026-09-01Product addedCVE-2026-16615not named as affected at publication, now names red hat enterprise linux 10.0 extended update supportNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 10; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 41
2026-09-01Product addedCVE-2026-24368Patchstacknot named as affected at publication, now names the gridNot counted: Product relabelled. probable relabelling of theme-one/the grid, not a newly affected productDays to revision 222
2026-09-01Product addedCVE-2026-24369Patchstacknot named as affected at publication, now names the gridNot counted: Product relabelled. probable relabelling of theme-one/the grid, not a newly affected productDays to revision 160
2026-09-01Product addedCVE-2026-28191Patchstacknot named as affected at publication, now names the gridNot counted: Product relabelled. probable relabelling of theme-one inc./the grid, not a newly affected productDays to revision 14
2026-09-01Product addedCVE-2026-18649not named as affected at publication, now names red hat enterprise linux 9.6 extended update supportNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 9; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 26
2026-09-01Product addedCVE-2026-17523not named as affected at publication, now names red hat enterprise linux 8.8 telecommunications update serviceNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 36
2026-09-01Product addedCVE-2026-17523not named as affected at publication, now names red hat enterprise linux 8.8 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 36
2026-09-01Product addedCVE-2026-54099not named as affected at publication, now names red hat openshift for windows containers 10.21Not counted: Product relabelled. probable relabelling of red hat/red hat openshift for windows containers, not a newly affected productDays to revision 71
2026-09-01Product addedCVE-2026-54100not named as affected at publication, now names red hat openshift for windows containers 10.21Not counted: Product relabelled. probable relabelling of red hat/red hat openshift for windows containers, not a newly affected productDays to revision 71
Mon 31 Aug 2026· 23 record changes
2026-08-31Affected range extendedCVE-2026-10684zephyrstated at publication 4.4.1, now states 4.4.2Release branch starts at 4.4.0.Not counted: Same claim, other operator. `lte` rewritten as `lt` on the same or the next release — the same claim under the other operatorDays to revision 33
2026-08-31Affected range extendedCVE-2026-11812zephyrstated at publication 4.4.1, now states 4.4.2Release branch starts at 2.0.0.Not counted: Same claim, other operator. `lte` rewritten as `lt` on the same or the next release — the same claim under the other operatorDays to revision 21
2026-08-31Affected range extendedCVE-2026-11985zephyrstated at publication 4.4.1, now states 4.4.2Release branch starts at 1.13.0.Not counted: Same claim, other operator. `lte` rewritten as `lt` on the same or the next release — the same claim under the other operatorDays to revision 21
2026-08-31Product addedCVE-2026-10805not named as affected at publication, now names red hat enterprise linux 8.8 telecommunications update serviceNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 89
2026-08-31Product addedCVE-2026-10805not named as affected at publication, now names red hat enterprise linux 8.8 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 89
2026-08-31Product addedCVE-2026-10805not named as affected at publication, now names red hat enterprise linux 9.6 extended update supportNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 9; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 89
2026-08-31Product addedCVE-2026-18649not named as affected at publication, now names red hat enterprise linux 9.4 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 9; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 26
2026-08-31Product addedCVE-2026-5674not named as affected at publication, now names red hat enterprise linux 9.2 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 9; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 46
2026-08-31Product addedCVE-2026-59111ENISAnot named as affected at publication, now names eobčanka-identifikaceNot counted: Product relabelled. probable relabelling of digitální a informační agentura (dia)/eobčanka-identifikace, not a newly affected productDays to revision 0
2026-08-31Product addedCVE-2026-10805not named as affected at publication, now names red hat enterprise linux 8.6 extended update support long-life add-onNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 88
2026-08-31Product addedCVE-2026-10805not named as affected at publication, now names red hat enterprise linux 8.4 extended update support long-life add-onNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 88
2026-08-31Product addedCVE-2026-10805not named as affected at publication, now names red hat enterprise linux 9.4 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 9; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 88
2026-08-31Product addedCVE-2026-10805not named as affected at publication, now names red hat enterprise linux 9.2 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 9; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 88
2026-08-31Product addedCVE-2026-15816not named as affected at publication, now names red hat enterprise linux 8.8 telecommunications update serviceNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 24
2026-08-31Product addedCVE-2026-15816not named as affected at publication, now names red hat enterprise linux 8.8 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 24
2026-08-31Product addedCVE-2026-16445not named as affected at publication, now names red hat enterprise linux 8.8 telecommunications update serviceNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 41
2026-08-31Product addedCVE-2026-16445not named as affected at publication, now names red hat enterprise linux 8.8 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 41
2026-08-31Product addedCVE-2026-6893not named as affected at publication, now names red hat enterprise linux 8.8 telecommunications update serviceNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 81
2026-08-31Product addedCVE-2026-6893not named as affected at publication, now names red hat enterprise linux 8.8 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listingDays to revision 81
2026-08-31Product addedCVE-2024-11734not named as affected at publication, now names red hat build of keycloakNot counted: Already named at publication. already named at publication inside red hat/red hat build of keycloak 26.0 — the record spelled this product out all alongDays to revision 594
2026-08-31Product addedCVE-2024-11736not named as affected at publication, now names red hat build of keycloakNot counted: Already named at publication. already named at publication inside red hat/red hat build of keycloak 26.0 — the record spelled this product out all alongDays to revision 594
2026-08-31Product addedCVE-2024-9666not named as affected at publication, now names red hat build of keycloakNot counted: Already named at publication. already named at publication inside red hat/red hat build of keycloak 24 — the record spelled this product out all alongDays to revision 644
2026-08-31CVSS base score changedCVE-2026-81934
whole record
cisa-cg
stated at publication 9.8, now states 7.5Assessments not comparable · base scoreCriticalHighNot counted: CVSS assessments are not comparable. the displayed maximum pair is not established on the same CVSS v3/v4 version, CNA and assessment context; changed scenarios, competing metrics and v2 bands are not comparableDays to revision 4
Sat 29 Aug 2026· 29 record changes
2026-08-29Fix version movedCVE-2026-14662
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14663
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14664
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14666
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14668
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14669
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14670
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14671
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14672
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14673
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14676
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14677
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14678
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14679
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14680
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-14681
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-15741
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-15742
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-16238
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-16239
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-16241
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-18024
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-18408
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-19385
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-6464
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-6469
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-6470
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Fix version movedCVE-2026-6471
vendor not namedpostgresql
PostgreSQL
stated at publication 18.5, now states 18.6Release branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/Days to revision 16
2026-08-29Product addedCVE-2026-72699VulnChecknot named as affected at publication, now names grav-plugin-loginNot counted: Product relabelled. probable relabelling of getgrav/grav, not a newly affected productDays to revision 4
Thu 27 Aug 2026· 4 record changes
2026-08-27Affected range extendedCVE-2026-21275
adobeindesign desktop
stated at publication 19.5.5, now states 21.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 19.5.5 still holdsnot dated
2026-08-27Affected range extendedCVE-2026-21276
adobeindesign desktop
stated at publication 19.5.5, now states 21.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 19.5.5 still holdsnot dated
2026-08-27Affected range extendedCVE-2026-21277
adobeindesign desktop
stated at publication 19.5.5, now states 21.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 19.5.5 still holdsnot dated
2026-08-27Affected range extendedCVE-2026-21278
adobeindesign desktop
stated at publication 19.5.5, now states 21.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 19.5.5 still holdsnot dated

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →