All patch & vulnerability trackers

Which Patch Tuesday updates you can't afford to skip, from 967 Microsoft security updates tracked

Today's must-patch
The current #1 is on the live hot list: the hottest Microsoft patches and exploited CVEs, ranked by real-world attack signal.

No other page ranks every Microsoft update by what attackers are actually doing. The Senserva CVE Ranking blends CISA KEV, EPSS, and ransomware use, so the update you cannot skip is row one, not row 400. Every KB carries its CVEs, its Update Catalog download, and its own Senserva page with the AI read, Microsoft's known issues, and a copy-paste PowerShell check for whether it is installed. Refreshed twice a day, exports to CSV or JSON, and a ready-made prompt for your AI. The hottest right now.

Senserva is a Microsoft Intelligent Security Association member · JSON and RSS feeds included, no login required: feeds and API.

Patch data refreshed from MSRC + CISA KEV. Last updated .

Loading the latest numbers...
Twelve months of updates, drawn by Senserva Vivid
Updates shipped per month and how many fix actively exploited (CISA KEV) CVEs, rendered from this site's public patch feed.
Microsoft security updates per month over the last twelve months: total updates shipped and the subset fixing actively exploited CISA KEV CVEs
Ninety days of heat, drawn by Senserva Vivid
The daily risk heat (CISA KEV calibrated, 0 to 100) over the Calm, Elevated, High, and Extreme bands. The chart's mood follows the day's risk: a calm week draws quiet, a hot one draws bright.
Ninety days of the tracker risk heat over the Calm, Elevated, High, and Extreme bands

The hottest Microsoft updates right now

Ranked by confirmed exploitation (CISA KEV), ransomware use, EPSS, severity, and recency. See the hottest CVEs and KBs together on the What's Hot page.

Every Microsoft security update, exploit-ranked

The full catalog: every KB links to its Senserva page (the AI read, Microsoft's known issues, and a copy-paste PowerShell installed-check) and carries Severity, CVSS, EPSS, CISA KEV, and ransomware flags. Filters live in the column headers; the CSV and JSON exports respect them. The table loads from api/microsoft-patches.json, the same free endpoint documented on the feeds page.

Keep going: Exploited this week Non-Microsoft exploited CVEs Patch Tuesday breakdown End of life dates The full CVE lookup
Senserva
Three Free Unlimited Audits
1 scan to find, 2 to review your fixes.
Setup and running in minutes. Your data stays local, in a results database only you hold. Someone from Senserva will work with you.
Everything Siemserva by Senserva does: every missing patch ranked by real attacks, all 650+ security checks, and full reports.
All users · All settings · All patches · All tenants · Rich Claude MCP support
Includes our extensive Claude MCP: everything you need to run full audits.
SoftwareOne's team of experts will work with you to assure success.
Start my Audit Watch a guided first scan

Free registration is all it takes, no card. Want it always on? Summer Special: unlimited use, up to 50 tenants, $600/mo or $6,500/yr.

Reference: the Microsoft patching guide, how Intune, Windows Autopatch, Defender, and Azure Update Manager fit together, and where third-party patch vendors fit in.

Data notice: the trackers, feeds, and API are provided as is, for informational purposes only, without warranty of any kind. Senserva, LLC does not guarantee the accuracy, completeness, or timeliness of third-party data and accepts no liability for actions taken based on it; verify against the primary source before acting. All use of this data is subject to the Senserva EULA.