Home › Patch and vulnerability tracker › What's hot
The hottest Microsoft patches and CVEs right now, and what changed today
Hot Patches is Senserva's live shortlist of the Microsoft patches (KBs) and CVEs that matter most right now, ranked by the Senserva CVE Ranking, not a raw dump. Free, refreshed once a day, early morning US Central, and available as a Hot Patches JSON feed to build on.
See what just changed, and why it matters
CVEs and patches do not stand still: Severity gets rescored, CISA confirms exploitation, fixes get revised. These are the CVEs and Microsoft patches whose Senserva-tracked facts changed most recently. Click any row to see its dated change history.
- CVE-2024-45159 Critical changed 2026-09-07
affected products 3 to 2 - CVE-2024-44974 High changed 2026-09-07
description updated by the source feed - CVE-2024-46853 High changed 2026-09-07
affected products 3 to 2 - CVE-2024-46852 High changed 2026-09-07
affected products 3 to 2 - CVE-2024-44987 High changed 2026-09-07
description updated by the source feed - CVE-2024-46673 High changed 2026-09-07
description updated by the source feed - CVE-2024-46725 High changed 2026-09-07
description updated by the source feed - CVE-2024-46758 High changed 2026-09-07
description updated by the source feed - CVE-2024-46759 High changed 2026-09-07
description updated by the source feed - CVE-2024-46798 High changed 2026-09-07
description updated by the source feed - CVE-2024-46804 High changed 2026-09-07
description updated by the source feed - CVE-2024-46818 High changed 2026-09-07
description updated by the source feed - CVE-2024-44977 High changed 2026-09-07
description updated by the source feed - CVE-2024-44986 High changed 2026-09-07
description updated by the source feed - CVE-2024-44985 High changed 2026-09-07
description updated by the source feed - CVE-2024-44998 High changed 2026-09-07
description updated by the source feed - CVE-2024-45026 High changed 2026-09-07
description updated by the source feed - CVE-2024-46738 High changed 2026-09-07
description updated by the source feed - CVE-2024-46746 High changed 2026-09-07
description updated by the source feed - CVE-2024-46756 High changed 2026-09-07
description updated by the source feed - CVE-2024-46757 High changed 2026-09-07
description updated by the source feed - CVE-2024-46782 High changed 2026-09-07
description updated by the source feed - CVE-2024-46800 High changed 2026-09-07
description updated by the source feed - CVE-2024-46844 High changed 2026-09-07
description updated by the source feed - CVE-2024-46814 High changed 2026-09-07
description updated by the source feed - CVE-2024-46821 High changed 2026-09-07
affected products 3 to 2 - CVE-2024-46811 High changed 2026-09-07
description updated by the source feed - CVE-2024-46836 High changed 2026-09-07
description updated by the source feed - CVE-2024-46854 High changed 2026-09-07
affected products 3 to 2 - CVE-2024-46731 High changed 2026-09-07
description updated by the source feed
Building a tool? The same ranking is a free JSON API: https://senserva.com/api/hot.json, with four ranked lists (all CVEs, Microsoft CVEs, non-Microsoft CVEs, and patches/KBs). No login or key. See the feeds and API page for the schema and rules. Free to use with attribution: "Patch Data Provided by Senserva".
This page updates once a day, please link to it so others benefit from it and to keep current with its changes.
Hottest CVEs right now
The fifteen CVEs at the top of the Senserva CVE Ranking. Click any card for the full write-up and the fix.
Hottest Microsoft patches (KBs) right now
The fifteen Microsoft updates at the top of the Senserva CVE Ranking, the ones to deploy first.
Top 100 hottest CVEs
Sortable and filterable. Every row links to that CVE's page: what it is, who is exposed, and the update that fixes it.
Top 100 Hot Patches (Microsoft KBs)
The Microsoft updates behind the hottest CVEs, ranked to deploy in order.
From "what's hot" to "what's missing on my devices"
This page shows what the whole world is dealing with. Senserva shows which of these hot CVEs and KBs are actually missing on your Microsoft 365, Intune, Defender, and Entra ID tenant, then ranks your gaps the same way: actively exploited first. It reads every layer read-only and names the exact KB to deploy.
Common questions
Each CVE and KB gets a score that blends real-world threat signal and search demand. Threat signal is CISA KEV (confirmed exploited in the wild) first, then known ransomware use, then FIRST.org EPSS exploit probability, then CVSS severity, with a recency boost so newly confirmed exploitation rises. When a credentialed Search Console pull is present, search interest is blended in too. That figure is impressions: how often our page for the item was shown in Google and Bing results over the past month. It is a measure of our own listings, not a count of how many people searched.
In Motion flags an item that is actively moving right now: either it was newly added to the CISA Known Exploited Vulnerabilities catalog in the last two to three weeks, it is tied to active ransomware campaigns, or the search interest defined above is climbing for it. It is the short list to look at first.
The underlying feeds (Microsoft MSRC, CISA KEV, FIRST.org EPSS) refresh once a day, early morning US Central, and this ranking is rebuilt with them, so a newly exploited CVE or a fresh out-of-band KB shows up here within hours.
Yes. The same ranking is a free JSON API at https://senserva.com/api/hot.json: four ranked lists (all CVEs, Microsoft CVEs, non-Microsoft CVEs, and patches/KBs), each item with its rank, score, dates, and a link to the detail page. No login or key. RSS feeds and a Patch Tuesday calendar are on the feeds and API page. Free to use with attribution: "Patch Data Provided by Senserva".
Yes, free with no sign-in. Running Senserva adds the part a public ranking cannot: which of these hot CVEs and KBs are actually missing on your own devices, ranked so you fix the right things first.
