November 1 Catalog Update #20261101 - Easy2Patch
74 updated and 7 new products in the Easy2Patch catalog for the week of 26 October 2026 - 1 November 2026.
Between 26 October 2026 and 1 November 2026, 74 products were updated (136 packages across architectures, languages and installer types) and 7 were added to the Easy2Patch catalog (version 4.0.239), which now covers 832 products from 368 manufacturers.
Actively exploited vulnerabilities
The updates below close vulnerabilities that are being exploited in the wild right now, according to CISA's Known Exploited Vulnerabilities catalog. These outrank every CVSS number elsewhere in this post: deploy them first.
| Product | Exploited CVEs | Ransomware |
|---|---|---|
| Google Chrome2 packages | CVE-2025-10585 CVE-2014-0497 CVE-2024-7971 +74 moreCVE-2024-5274 CVE-2024-4947 CVE-2024-4671 CVE-2023-6345 CVE-2023-2136 CVE-2022-4135 CVE-2022-3075 CVE-2021-37973 CVE-2021-30633 CVE-2020-16017 CVE-2020-16010 CVE-2020-15999 CVE-2026-87491 CVE-2026-85046 CVE-2026-5281 CVE-2026-3910 CVE-2026-3909 CVE-2026-2441 CVE-2026-11645 CVE-2025-6558 CVE-2025-5419 CVE-2025-14174 CVE-2025-13223 CVE-2024-7965 CVE-2024-4761 CVE-2024-0519 CVE-2023-7024 CVE-2023-5217 CVE-2023-4863 CVE-2023-4762 CVE-2023-3079 CVE-2023-2033 CVE-2022-4262 CVE-2022-3723 CVE-2022-3038 CVE-2022-2294 CVE-2022-1364 CVE-2022-1096 CVE-2022-0609 CVE-2021-4102 CVE-2021-38003 CVE-2021-37975 CVE-2021-30632 CVE-2021-30563 CVE-2021-30554 CVE-2021-30551 CVE-2021-21224 CVE-2021-21220 CVE-2021-21206 CVE-2021-21193 CVE-2021-21166 CVE-2021-21148 CVE-2020-6572 CVE-2020-6418 CVE-2020-16013 CVE-2020-16009 CVE-2019-13720 CVE-2018-6065 CVE-2018-17480 CVE-2018-17463 CVE-2017-5070 CVE-2017-5030 CVE-2016-5198 CVE-2016-1646 CVE-2011-0611 CVE-2025-2783 CVE-2025-6554 CVE-2011-0609 CVE-2022-2856 CVE-2021-37976 CVE-2021-30533 CVE-2019-5825 CVE-2019-5786 CVE-2021-38000 |
— |
| Microsoft OpenJDK | CVE-2013-0431 | — |
| Mozilla Firefox28 packages | CVE-2019-11708 CVE-2024-9680 CVE-2010-3765 +12 moreCVE-2022-26486 CVE-2023-5217 CVE-2023-4863 CVE-2022-26485 CVE-2019-17026 CVE-2019-11707 CVE-2015-4495 CVE-2013-1690 CVE-2020-6820 CVE-2020-6819 CVE-2016-9079 CVE-2013-1675 |
— |
| Mozilla Firefox ESR8 packages | CVE-2019-11708 CVE-2024-9680 CVE-2010-3765 +12 moreCVE-2022-26486 CVE-2023-5217 CVE-2023-4863 CVE-2022-26485 CVE-2019-17026 CVE-2019-11707 CVE-2015-4495 CVE-2013-1690 CVE-2020-6820 CVE-2020-6819 CVE-2016-9079 CVE-2013-1675 |
— |
| Mozilla Thunderbird8 packages | CVE-2019-11708 CVE-2024-9680 CVE-2010-3765 +11 moreCVE-2022-26486 CVE-2023-5217 CVE-2023-4863 CVE-2022-26485 CVE-2019-17026 CVE-2019-11707 CVE-2013-1690 CVE-2020-6820 CVE-2020-6819 CVE-2016-9079 CVE-2013-1675 |
— |
| Mozilla Thunderbird ESR4 packages | CVE-2019-11708 CVE-2024-9680 CVE-2010-3765 +11 moreCVE-2022-26486 CVE-2023-5217 CVE-2023-4863 CVE-2022-26485 CVE-2019-17026 CVE-2019-11707 CVE-2013-1690 CVE-2020-6820 CVE-2020-6819 CVE-2016-9079 CVE-2013-1675 |
— |
| Node.js | CVE-2026-111497 CVE-2023-44487 | — |
| Node.js LTS | CVE-2026-111497 CVE-2023-44487 | — |
| TeamViewer2 packages | CVE-2019-18988 | — |
A CVE appears here only when CISA has confirmed exploitation. The absence of this section does not mean nothing is exploited - it means nothing we could match is listed.
Security overview
Each product in this update is counted once, in the band of the most severe known CVE affecting it.
| Severity | Products |
|---|---|
| Critical (9.0+) | 17 |
| High (7.0-8.9) | 12 |
| Medium (4.0-6.9) | 3 |
| No CVE source matched | 49 |
32 of the 81 products in this update carry at least one known CVE. Highest CVSS v3 score seen: 10.0. A dash in the tables below means the product did not match a CVE source - not that it has no known vulnerabilities.
CVE data comes from Microsoft Defender Vulnerability Management and the NVD CPE feed, and reflects what was known when this post was generated. Counts are per product, not per version, and a listed CVE is not necessarily unpatched in the version shipped here.
Updated Software
74 products · 136 packages. Products shipped as several packages share one row; open the package list to see each architecture, language and installer.
Filter by vendor or product…
| Vendor | Product | Version | Known CVEs | Scan |
|---|---|---|---|---|
| Abacus Research | Abaclientx86 · MSI | 4.3.1194 → 4.4.1221 | — | VT · KL |
| Active Directory Pro | 365ProToolkitx64 · EXE | 2.3.2 → 2.3.4 | — | VT · KL |
| Adobe | Adobe Connectx64 · MSI | 26.8.51 → 26.9.61 | — | VT · KL |
| Alexander Koblov | Double Commander2 packagesDouble Commander 1.2.10 (x64) (MSI)Double Commander 1.2.10 (x86) (MSI) |
1.2.9 → 1.2.10 | — | per package |
| Alfaview | Alfaviewx64 · MSI | 9.30.2.0 → 9.30.5.0 | — | VT · KL |
| Amazon | Amazon Command Line Interfacex64 · MSI | 2.38.5.0 → 2.39.3.0 | — | VT · KL |
| Amazon | Amazon SSM Agent2 packagesAmazon SSM Agent 3.3.5700.0 (x64) (EXE)Amazon SSM Agent 3.3.5700.0 (x86) (EXE) |
3.3.5390.0 → 3.3.5700.0 | 1 1 | per package |
| Andrea Vacondio | PDF Split And Mergex64 · MSI | 6.0.6.0 → 6.0.9.0 | — | VT · KL |
| Atlassian | Atlassian Companionx86 · MSI | 3.2.0 → 3.3.0.0 | 3 1 2 | VT · KL |
| Bitwarden Inc | Bitwarden Desktopx86 · EXE | 2026.10.1 → 2026.10.2 | — | VT · KL |
| Business-Logics GmbH | BL Banking2 packagesBL Banking 1.19.60 (x64) (EXE)BL Banking 1.19.60 (x86) (EXE) |
1.19.57 → 1.19.60 | — | per package |
| Calibrite LLC. | Calibrite PROFILERx64 · EXE | 3.0.2 → 3.1.3 | — | VT · KL |
| Cato Networks | Cato Client VPNx86 · MSI | 6.12.6.9050 → 6.16.2.9131 | — | VT · KL |
| Digital Scholarship | Zoterox64 · EXE | 10.0.6 → 10.0.7 | — | VT · KL |
| Docker Inc | Docker Desktopx64 · EXE | 4.76.0 → 4.97.0 | — | VT · KL |
| Draftable | Draftable Desktopx86 · MSI | 26.10.1 → 26.10.2 | — | VT · KL |
| Dropbox | Dropbox2 packagesDropbox 277.4.4974 (x64) (EXE)Dropbox 277.4.4974 (x86) (EXE) |
276.4.5266 → 277.4.4974 | 5 1 2 2 | per package |
| Evernote | Evernotex86 · EXE | 11.39.2 → 11.40.3 | 10 1 6 3 | VT · KL |
| Genesys | Genesys Cloudx86 · MSI | 2.55.931 → 2.56.933 | — | VT · KL |
| Giorgio Tani | PeaZip2 packagesPeaZip 11.4.0 (x64) (EXE)PeaZip 11.4.0 (x86) (EXE) |
11.2.0 → 11.4.0 | 2 2 | per package |
| GlavSoft LLC | TightVNC Viewer2 packagesTightVNC Viewer 4.0.2 (x64) (MSI)TightVNC Viewer 4.0.2 (x86) (MSI) |
2.8.90.0 → 4.0.2 | — | per package |
| Chrome Remote Desktop Hostx86 · MSI | 154.0.8037.40 → 157.0.8103.7 | — | VT · KL | |
Google Chrome2 packagesGoogle Chrome 156.0.8078.80 (x64) (MSI)Google Chrome 156.0.8078.80 (x86) (MSI) |
156.0.8078.48 → 156.0.8078.80 | 7436 710 3500 3067 159 | per package | |
| Google Drivex86 · EXE | 132.0.0.0 → 133.0.2.0 | — | VT · KL | |
| Governikus | AusweisAppx64 · MSI | 2.6.1 → 2.6.2 | — | VT · KL |
| Greenshot | Greenshotx64 · EXE | 1.3.323 → 1.3.328 | 4 3 1 | VT · KL |
| Hulubulu | Advanced Renamerx64 · EXE | 4.19.0 → 4.28 | — | VT · KL |
| IDM Computer Solutions | UltraEditx64 · MSI | 33.0.21 → 33.1.27 | — | VT · KL |
| Keeper Security Inc | Keeper Password Managerx86 · MSI | 18.6.5.0 → 18.6.6.0 | — | VT · KL |
| Kitware | CMake2 packagesCMake 4.4.5 (x64) (MSI)CMake 4.4.5 (x86) (MSI) |
4.4.4 → 4.4.5 | — | per package |
| LibreOffice | LibreOffice2 packagesLibreOffice 26.8.2 (x64) (MSI)LibreOffice 26.8.2 (x86) (MSI) |
26.8.1.1 → 26.8.2 | — | per package |
| Meltytech LLC | Shotcutx64 · EXE | 26.9.27 → 26.10.30 | 2 1 1 | VT · KL |
| Microsoft | Edge WebView2 Runtime2 packagesEdge WebView2 Runtime 156.0.4314.58 (x64) (EXE)Edge WebView2 Runtime 156.0.4314.58 (x86) (EXE) |
156.0.4314.42 → 156.0.4314.58 | — | per package |
| Microsoft | Microsoft .Net 10 SDKx64 · EXE | 10.3.126.27133 → 10.4.326.52412 | 1 1 | VT · KL |
| Microsoft | Microsoft .Net 10 WS Hostingx86 · EXE | 10.0.9.26270 → 10.0.14.26522 | — | VT · KL |
| Microsoft | Microsoft .NET 8 WS Hostingx86 · EXE | 8.0.32 → 8.0.33 | 1 1 | VT · KL |
| Microsoft | Microsoft .NET 9 SDKx64 · EXE | 9.3.1626.32312 → 9.3.2026.52328 | 1 1 | VT · KL |
| Microsoft | Microsoft .NET 9 WS Hostingx86 · EXE | 9.0.21 → 9.0.22 | — | VT · KL |
| Microsoft | Microsoft Edge2 packagesMicrosoft Edge 156.0.4314.58 (x64) (MSI)Microsoft Edge 156.0.4314.58 (x86) (MSI) |
156.0.4314.42 → 156.0.4314.58 | 266 27 56 159 24 | per package |
| Microsoft | Microsoft OpenJDKx64 · MSI | 11.0.32.9 → 11.0.32.101 | 98 4 15 50 29 | VT · KL |
| Microsoft | Microsoft PowerToysx64 · EXE | 0.102.2933.0 → 0.102.3001.0 | 1 1 | VT · KL |
| Microsoft | PowerShell Core2 packagesPowerShell Core 7.6.9.0 (x64) (MSI)PowerShell Core 7.6.9.0 (x86) (MSI) |
7.6.8.0 → 7.6.9.0 | 18 13 5 | per package |
| Microsoft | Purview Information Protectionx86 · MSI | 3.2.173 → 3.2.176.0 | — | VT · KL |
| Microsoft | Visual Studio Codex64 · EXE | 1.143.1 → 1.144.0 | 28 2 16 9 1 | VT · KL |
| Mozilla | Mozilla Firefox28 packagesMozilla Firefox 159.0 ar-AR (x64) (EXE)Mozilla Firefox 159.0 ar-AR (x86) (EXE)Mozilla Firefox 159.0 bn-BN (x64) (EXE)Mozilla Firefox 159.0 bn-BN (x86) (EXE)Mozilla Firefox 159.0 de-DE (x64) (EXE)Mozilla Firefox 159.0 de-DE (x86) (EXE)Mozilla Firefox 159.0 en-CA (x64) (EXE)Mozilla Firefox 159.0 en-CA (x86) (EXE)Mozilla Firefox 159.0 en-GB (x64) (EXE)Mozilla Firefox 159.0 en-GB (x86) (EXE)Mozilla Firefox 159.0 en-US (x64) (EXE)Mozilla Firefox 159.0 en-US (x86) (EXE)Mozilla Firefox 159.0 es-AR (x64) (EXE)Mozilla Firefox 159.0 es-AR (x86) (EXE)Mozilla Firefox 159.0 es-CL (x64) (EXE)Mozilla Firefox 159.0 es-CL (x86) (EXE)Mozilla Firefox 159.0 es-ES (x64) (EXE)Mozilla Firefox 159.0 es-ES (x86) (EXE)Mozilla Firefox 159.0 es-MX (x64) (EXE)Mozilla Firefox 159.0 es-MX (x86) (EXE)Mozilla Firefox 159.0 fa (x64) (EXE)Mozilla Firefox 159.0 fa (x86) (EXE)Mozilla Firefox 159.0 fr (x64) (EXE)Mozilla Firefox 159.0 fr (x86) (EXE)Mozilla Firefox 159.0 ja (x64) (EXE)Mozilla Firefox 159.0 ja (x86) (EXE)Mozilla Firefox 159.0 tr-TR (x64) (EXE)Mozilla Firefox 159.0 tr-TR (x86) (EXE) |
158.0.1 → 159.0 | 3487 987 1091 1334 75 | per package |
| Mozilla | Mozilla Firefox ESR8 packagesMozilla Firefox ESR 153.6.0 ar-AR (x64) (EXE)Mozilla Firefox ESR 153.6.0 ar-AR (x86) (EXE)Mozilla Firefox ESR 153.6.0 de-DE (x64) (EXE)Mozilla Firefox ESR 153.6.0 de-DE (x86) (EXE)Mozilla Firefox ESR 153.6.0 en-US (x64) (EXE)Mozilla Firefox ESR 153.6.0 en-US (x86) (EXE)Mozilla Firefox ESR 153.6.0 tr-TR (x64) (EXE)Mozilla Firefox ESR 153.6.0 tr-TR (x86) (EXE) |
153.5.1 → 153.6.0 | 3487 987 1091 1334 75 | per package |
| Mozilla | Mozilla Thunderbird8 packagesMozilla Thunderbird 159.0 tr-TR (x64) (EXE)Mozilla Thunderbird 159.0 tr-TR (x86) (EXE)Mozilla Thunderbird 159.0 ar-AR (x64) (EXE)Mozilla Thunderbird 159.0 ar-AR (x86) (EXE)Mozilla Thunderbird 159.0 de-DE (x64) (EXE)Mozilla Thunderbird 159.0 de-DE (x86) (EXE)Mozilla Thunderbird 159.0 en-US (x64) (EXE)Mozilla Thunderbird 159.0 en-US (x86) (EXE) |
158.0.1 → 159.0 | 2070 709 673 662 26 | per package |
| Mozilla | Mozilla Thunderbird ESR4 packagesMozilla Thunderbird ESR 153.6.0 en-US (x64) (EXE)Mozilla Thunderbird ESR 153.6.0 en-US (x86) (EXE)Mozilla Thunderbird ESR 153.6.0 tr-TR (x64) (EXE)Mozilla Thunderbird ESR 153.6.0 tr-TR (x86) (EXE) |
153.5.1 → 153.6.0 | 2070 709 673 662 26 | per package |
| Netsdk Software | S3 Browserx64 · EXE | 13.6.3 → 13.6.5 | 2 2 | VT · KL |
| Nitro Software Inc | Nitro PDF Pro NLSx64 · MSI | 26.2.5.1 → 26.2.6.0 | — | VT · KL |
| Nord Security | NordLayerx86 · MSI | 4.0.0.0 → 4.1.0.0 | — | VT · KL |
| NSClient++ | NSClient++2 packagesNSClient++ 0.26.0.0 (x64) (MSI)NSClient++ 0.26.0.0 (x86) (MSI) |
0.25.0.0 → 0.26.0.0 | 3 3 | per package |
| OBS Project | OBS Studiox64 · EXE | 33.0 → 33.0.1 | — | VT · KL |
| OnCue Technology LLC | OnCuex64 · EXE | 4.5.1410 → 4.6.1536 | — | VT · KL |
| OpenJS | Node.jsx64 · MSI | 26.12.1 → 26.13.0 | 189 20 105 58 6 | VT · KL |
| OpenJS | Node.js LTSx64 · MSI | 24.22.1 → 24.22.2 | 189 20 105 58 6 | VT · KL |
| OpenShot Studios LLC | OpenShot Video Editor2 packagesOpenShot Video Editor 4.1.0 (x64) (EXE)OpenShot Video Editor 4.1.0 (x86) (EXE) |
4.0.1 → 4.1.0 | — | per package |
| Purslane | Rustdeskx64 · EXE | 1.5.0 → 1.5.1 | — | VT · KL |
| R-Project | R for Windowsx64 · EXE | 4.6.1 → 4.6.2 | — | VT · KL |
| RocketChat | Rocket Chat2 packagesRocket Chat 4.19.0.0 (x64) (MSI)Rocket Chat 4.19.0.0 (x86) (MSI) |
4.18.5.0 → 4.19.0.0 | 62 10 13 38 1 | per package |
| Salesforce | Salesforce CLI v2x64 · EXE | 2.156.5.0 → 2.158.1.0 | — | VT · KL |
| Scooter Software | Beyond Comparex86 · EXE | 5.2.6.32774 → 5.2.7.32913 | 2 1 1 | VT · KL |
| Skymatic GmbH | Cryptomatorx64 · MSI | 1.19.4.6499 → 1.19.6 | 10 4 6 | VT · KL |
| Slack | Slackx64 · MSI | 4.52.182 → 4.53.276 | — | VT · KL |
| SoftLand | doPDFx86 · EXE | 11.9.530 → 11.9.532 | — | VT · KL |
| TeamViewer | TeamViewer2 packagesTeamViewer 15.83.5.0 (x64) (EXE)TeamViewer 15.83.5.0 (x86) (EXE) |
15.82.6.0 → 15.83.5.0 | 15 2 8 4 1 | per package |
| The pgAdmin Development Team | pgAdmin 4x64 · EXE | 9.18 → 9.19 | — | VT · KL |
| TU Wien | Nomacsx64 · MSI | 3.22.4 → 3.23.4 | 1 1 | VT · KL |
| uvnc bvba | UltraVNC2 packagesUltraVNC 1.8.3.1 (x64) (EXE)UltraVNC 1.8.3.1 (x86) (EXE) |
1.8.3.0 → 1.8.3.1 | — | per package |
| Vivaldi | Vivaldi2 packagesVivaldi 8.2.4133.96 (x64) (EXE)Vivaldi 8.2.4133.96 (x86) (EXE) |
8.2.4133.94 → 8.2.4133.96 | — | per package |
| WinMerge | WinMergex64 · EXE | 2.16.59.0 → 2.16.60.0 | — | VT · KL |
| WireGuard | Tailscalex86 · EXE | 1.104.2 → 1.104.4 | 3 1 2 | VT · KL |
| XK72 Ltd | Charles Proxyx64 · MSI | 5.2.1.2 → 5.2.2.1 | — | VT · KL |
| Yeastar | Linkus Desktop Clientx86 · MSI | 1.25.4 → 1.27.2.0 | — | VT · KL |
New Software
| Vendor | Product | Version | Known CVEs | Scan |
|---|---|---|---|---|
| ArkSigner | ArkSignerx86 · MSI | 2.2.16.18 | — | VT · KL |
| Eclipse Foundation | Temurin JDK with Hotspot 25x64 · MSI | 25.0.5.8 | — | VT · KL |
| GlavSoft LLC | TightVNC Server2 packagesTightVNC Server 4.0.2 (x64) (MSI)TightVNC Server 4.0.2 (x86) (MSI) |
4.0.2 | 11 6 2 2 1 | per package |
| LLVM | LLVM - Retiredx64 · EXE | 22.1.8 | 8 8 | VT · KL |
| Microsoft | Microsoft .Net 11 SDK RC.3x64 · EXE | 11.1.26.52348 | — | VT · KL |
| Microsoft | Microsoft .Net 11 WS Hosting RC.3x64 · EXE | 11.0.0.26522 | — | VT · KL |
| RealVNC | RealVNC Connect Viewerx86 · MSI | 8.5.3.38 | — | VT · KL |
Retired Software
The products below are no longer distributed in the catalog. Existing deployments are unaffected; no new packages will be published for them.
| Vendor | Product | Version |
|---|---|---|
| ArkSigner | ArkSigner 2.2.16.18 (x86) (MSI) | 2.2.16 |
| GlavSoft LLC | TightVNC 2.8.90.0 (x64) (MSI) | 2.8.90.0 |
| GlavSoft LLC | TightVNC 2.8.90.0 (x86) (MSI) | 2.8.90.0 |
| LLVM | LLVM 22.1.8 (x64) (EXE) | 22.1.8 |
| Microsoft | Microsoft .Net 11 SDK Pre5 11.0.100 (x64) (EXE) | 11.1.26.30315 |
| Microsoft | Microsoft .Net 11 WS Hosting Pre5 11.0.0 (EXE) | 11.0.0.26302 |
| Microsoft | Microsoft OLE DB Driver 19 for SQL Server 19.4.2 (x64) (MSI) | 19.4.2.0 |
| Microsoft | Microsoft OLE DB Driver 19 for SQL Server 19.4.2 (x86) (MSI) | 19.4.2.0 |
| RealVNC | VNC Viewer 7.15.1 (x86) (EXE) | 7.15.1.18 |
Easy2Patch Catalog Team — questions about this update, or a product you would like to see in the catalog? Write to support@easy2patch.com.