October 25 Catalog Update #20261025 - Easy2Patch
61 updated and 0 new products in the Easy2Patch catalog for the week of 19 October 2026 - 25 October 2026.
Between 19 October 2026 and 25 October 2026, 61 products were updated (124 packages across architectures, languages and installer types) and 0 were added to the Easy2Patch catalog (version 4.0.228), which now covers 833 products from 368 manufacturers.
Actively exploited vulnerabilities
The updates below close vulnerabilities that are being exploited in the wild right now, according to CISA's Known Exploited Vulnerabilities catalog. These outrank every CVSS number elsewhere in this post: deploy them first.
| Product | Exploited CVEs | Ransomware |
|---|---|---|
| Google Chrome2 packages | CVE-2025-10585 CVE-2014-0497 CVE-2024-7971 +74 moreCVE-2024-5274 CVE-2024-4947 CVE-2024-4671 CVE-2023-6345 CVE-2023-2136 CVE-2022-4135 CVE-2022-3075 CVE-2021-37973 CVE-2021-30633 CVE-2020-16017 CVE-2020-16010 CVE-2020-15999 CVE-2026-87491 CVE-2026-85046 CVE-2026-5281 CVE-2026-3910 CVE-2026-3909 CVE-2026-2441 CVE-2026-11645 CVE-2025-6558 CVE-2025-5419 CVE-2025-14174 CVE-2025-13223 CVE-2024-7965 CVE-2024-4761 CVE-2024-0519 CVE-2023-7024 CVE-2023-5217 CVE-2023-4863 CVE-2023-4762 CVE-2023-3079 CVE-2023-2033 CVE-2022-4262 CVE-2022-3723 CVE-2022-3038 CVE-2022-2294 CVE-2022-1364 CVE-2022-1096 CVE-2022-0609 CVE-2021-4102 CVE-2021-38003 CVE-2021-37975 CVE-2021-30632 CVE-2021-30563 CVE-2021-30554 CVE-2021-30551 CVE-2021-21224 CVE-2021-21220 CVE-2021-21206 CVE-2021-21193 CVE-2021-21166 CVE-2021-21148 CVE-2020-6572 CVE-2020-6418 CVE-2020-16013 CVE-2020-16009 CVE-2019-13720 CVE-2018-6065 CVE-2018-17480 CVE-2018-17463 CVE-2017-5070 CVE-2017-5030 CVE-2016-5198 CVE-2016-1646 CVE-2011-0611 CVE-2025-2783 CVE-2025-6554 CVE-2011-0609 CVE-2022-2856 CVE-2021-37976 CVE-2021-30533 CVE-2019-5825 CVE-2019-5786 CVE-2021-38000 |
— |
| Mozilla Firefox28 packages | CVE-2019-11708 CVE-2024-9680 CVE-2010-3765 +12 moreCVE-2022-26486 CVE-2023-5217 CVE-2023-4863 CVE-2022-26485 CVE-2019-17026 CVE-2019-11707 CVE-2015-4495 CVE-2013-1690 CVE-2020-6820 CVE-2020-6819 CVE-2016-9079 CVE-2013-1675 |
— |
| Mozilla Firefox ESR8 packages | CVE-2019-11708 CVE-2024-9680 CVE-2010-3765 +12 moreCVE-2022-26486 CVE-2023-5217 CVE-2023-4863 CVE-2022-26485 CVE-2019-17026 CVE-2019-11707 CVE-2015-4495 CVE-2013-1690 CVE-2020-6820 CVE-2020-6819 CVE-2016-9079 CVE-2013-1675 |
— |
| Mozilla Thunderbird8 packages | CVE-2019-11708 CVE-2024-9680 CVE-2010-3765 +11 moreCVE-2022-26486 CVE-2023-5217 CVE-2023-4863 CVE-2022-26485 CVE-2019-17026 CVE-2019-11707 CVE-2013-1690 CVE-2020-6820 CVE-2020-6819 CVE-2016-9079 CVE-2013-1675 |
— |
| Mozilla Thunderbird ESR4 packages | CVE-2019-11708 CVE-2024-9680 CVE-2010-3765 +11 moreCVE-2022-26486 CVE-2023-5217 CVE-2023-4863 CVE-2022-26485 CVE-2019-17026 CVE-2019-11707 CVE-2013-1690 CVE-2020-6820 CVE-2020-6819 CVE-2016-9079 CVE-2013-1675 |
— |
| Node.js | CVE-2023-44487 | — |
| Node.js LTS2 packages | CVE-2023-44487 | — |
| Microsoft Edge2 packages | CVE-2015-0313 CVE-2015-0311 CVE-2024-7971 +9 moreCVE-2022-4135 CVE-2023-5217 CVE-2021-26411 CVE-2020-16009 CVE-2016-7201 CVE-2016-7200 CVE-2017-0037 CVE-2016-3351 CVE-2020-0878 |
— |
A CVE appears here only when CISA has confirmed exploitation. The absence of this section does not mean nothing is exploited - it means nothing we could match is listed.
Security overview
Each product in this update is counted once, in the band of the most severe known CVE affecting it.
| Severity | Products |
|---|---|
| Critical (9.0+) | 17 |
| High (7.0-8.9) | 9 |
| No CVE source matched | 35 |
26 of the 61 products in this update carry at least one known CVE. Highest CVSS v3 score seen: 10.0. A dash in the tables below means the product did not match a CVE source - not that it has no known vulnerabilities.
CVE data comes from Microsoft Defender Vulnerability Management and the NVD CPE feed, and reflects what was known when this post was generated. Counts are per product, not per version, and a listed CVE is not necessarily unpatched in the version shipped here.
Updated Software
61 products · 124 packages. Products shipped as several packages share one row; open the package list to see each architecture, language and installer.
Filter by vendor or product…
| Vendor | Product | Version | Known CVEs | Scan |
|---|---|---|---|---|
| 2BrightSparks | SyncBackSE2 packagesSyncBackSE 12.1.34.0 (x64) (EXE)SyncBackSE 12.1.34.0 (x86) (EXE) |
12.1.22.0 → 12.1.34.0 | — | per package |
| Active Directory Pro | ADProToolkitx64 · MSI | 3.2.9 → 3.2.10 | — | VT · KL |
| AgileBits Inc | 1Passwordx64 · MSI | 8.12.40 → 8.12.42 | 9 2 7 | VT · KL |
| Allround Automations | PL-SQL Developer2 packagesPL-SQL Developer 17.0.3.2262 (x64) (MSI)PL-SQL Developer 17.0.3.2262 (x86) (MSI) |
17.0.2.2250 → 17.0.3.2262 | 1 1 | per package |
| Amazon | Amazon Command Line Interfacex64 · MSI | 2.38.1.0 → 2.38.5.0 | 2 1 1 | VT · KL |
| Amazon | Amazon Redshift ODBC Driver 2.xx64 · MSI | 2.2.4.0 → 2.3.0.0 | 1 1 | VT · KL |
| Amazon | Amazon WorkSpacesx64 · MSI | 5.35.0.3249 → 5.36.0.3628 | 2 2 | VT · KL |
| Amazon | AWS VPN Clientx64 · MSI | 6.2.0 → 6.2.1 | — | VT · KL |
| Analog Devices | LTspicex64 · MSI | 26.1.1.1 → 26.1.1.2 | — | VT · KL |
| Bitwarden Inc | Bitwarden Desktopx86 · EXE | 2026.10.0 → 2026.10.1 | — | VT · KL |
| Cisco | Cisco Webex Device Connectorx64 · MSI | 1.1.576 → 1.1.582 | — | VT · KL |
| DAX Studio | Dax Studiox86 · EXE | 3.5.2.1205 → 3.6.1.1250 | — | VT · KL |
| DBeaver | DBeaver CEx86.x64 · x64 · EXE | 26.2.2.0 → 26.2.3 | — | VT · KL |
| Draftable | Draftable Desktopx86 · MSI | 26.10.0 → 26.10.1 | — | VT · KL |
| Dropbox | Dropbox2 packagesDropbox 276.4.5266 (x64) (EXE)Dropbox 276.4.5266 (x86) (EXE) |
275.4.3565 → 276.4.5266 | 5 1 2 2 | per package |
| Eclipse Foundation | Temurin JDK With Hotspot 21x64 · MSI | 21.0.7.6 → 21.0.12.101 | — | VT · KL |
| Evernote | Evernotex86 · EXE | 11.38.5 → 11.39.2 | 10 1 6 3 | VT · KL |
| GDevelop | GDevelop 5x64 · EXE | 5.6.284 → 5.6.285 | — | VT · KL |
| Golang | Go Programming Language2 packagesGo Programming Language 1.27.3 (x64) (MSI)Go Programming Language 1.27.3 (x86) (MSI) |
1.27.2 → 1.27.3 | — | per package |
Google Chrome2 packagesGoogle Chrome 156.0.8078.48 (x64) (MSI)Google Chrome 156.0.8078.48 (x86) (MSI) |
155.0.8059.85 → 156.0.8078.48 | 7352 693 3443 3057 159 | per package | |
| Jan Fiala | PSPad Editor2 packagesPSPad Editor 5.5.2.851 (x64) (EXE)PSPad Editor 5.5.2.851 (x86) (EXE) |
5.5.1.825 → 5.5.2.851 | — | per package |
| JGraph Ltd | draw.io2 packagesdraw.io 32.6.1 (x64) (EXE)draw.io 32.6.1.0 (x64) (MSI) |
32.5.5.0 → 32.6.1.032.5.5 → 32.6.1 | 27 3 11 12 1 | per package |
| Lexikos | AutoHotkey_Lx86 · EXE | 2.0.29 → 2.0.30 | — | VT · KL |
| Microsoft | Edge WebView2 Runtime2 packagesEdge WebView2 Runtime 156.0.4314.42 (x64) (EXE)Edge WebView2 Runtime 156.0.4314.42 (x86) (EXE) |
155.0.4283.62 → 156.0.4314.42 | — | per package |
| Microsoft | Microsoft Edge2 packagesMicrosoft Edge 156.0.4314.42 (x64) (MSI)Microsoft Edge 156.0.4314.42 (x86) (MSI) |
155.0.4283.62 → 156.0.4314.42 | 1030 56 552 380 42 | per package |
| Microsoft | Microsoft PowerToysx64 · EXE | 0.102.2883.0 → 0.102.2933.0 | 1 1 | VT · KL |
| Microsoft | PowerShell Core2 packagesPowerShell Core 7.6.8.0 (x64) (MSI)PowerShell Core 7.6.8.0 (x86) (MSI) |
7.6.7.0 → 7.6.8.0 | — | per package |
| Microsoft | Purview Information Protectionx86 · MSI | 3.2.92 → 3.2.173 | — | VT · KL |
| Microsoft | Visual Studio Codex64 · EXE | 1.142.0 → 1.143.1 | 28 2 16 9 1 | VT · KL |
| Mozilla | Mozilla Firefox28 packagesMozilla Firefox 158.0.1 ar-AR (x64) (EXE)Mozilla Firefox 158.0.1 ar-AR (x86) (EXE)Mozilla Firefox 158.0.1 bn-BN (x64) (EXE)Mozilla Firefox 158.0.1 bn-BN (x86) (EXE)Mozilla Firefox 158.0.1 de-DE (x64) (EXE)Mozilla Firefox 158.0.1 de-DE (x86) (EXE)Mozilla Firefox 158.0.1 en-CA (x64) (EXE)Mozilla Firefox 158.0.1 en-CA (x86) (EXE)Mozilla Firefox 158.0.1 en-GB (x64) (EXE)Mozilla Firefox 158.0.1 en-GB (x86) (EXE)Mozilla Firefox 158.0.1 en-US (x64) (EXE)Mozilla Firefox 158.0.1 en-US (x86) (EXE)Mozilla Firefox 158.0.1 es-AR (x64) (EXE)Mozilla Firefox 158.0.1 es-AR (x86) (EXE)Mozilla Firefox 158.0.1 es-CL (x64) (EXE)Mozilla Firefox 158.0.1 es-CL (x86) (EXE)Mozilla Firefox 158.0.1 es-ES (x64) (EXE)Mozilla Firefox 158.0.1 es-ES (x86) (EXE)Mozilla Firefox 158.0.1 es-MX (x64) (EXE)Mozilla Firefox 158.0.1 es-MX (x86) (EXE)Mozilla Firefox 158.0.1 fa (x64) (EXE)Mozilla Firefox 158.0.1 fa (x86) (EXE)Mozilla Firefox 158.0.1 fr (x64) (EXE)Mozilla Firefox 158.0.1 fr (x86) (EXE)Mozilla Firefox 158.0.1 ja (x64) (EXE)Mozilla Firefox 158.0.1 ja (x86) (EXE)Mozilla Firefox 158.0.1 tr-TR (x64) (EXE)Mozilla Firefox 158.0.1 tr-TR (x86) (EXE) |
158.0 → 158.0.1 | 3487 987 1091 1334 75 | per package |
| Mozilla | Mozilla Firefox ESR8 packagesMozilla Firefox ESR 153.5.1 ar-AR (x64) (EXE)Mozilla Firefox ESR 153.5.1 ar-AR (x86) (EXE)Mozilla Firefox ESR 153.5.1 de-DE (x64) (EXE)Mozilla Firefox ESR 153.5.1 de-DE (x86) (EXE)Mozilla Firefox ESR 153.5.1 en-US (x64) (EXE)Mozilla Firefox ESR 153.5.1 en-US (x86) (EXE)Mozilla Firefox ESR 153.5.1 tr-TR (x64) (EXE)Mozilla Firefox ESR 153.5.1 tr-TR (x86) (EXE) |
153.5.0 → 153.5.1 | 3487 987 1091 1334 75 | per package |
| Mozilla | Mozilla Thunderbird8 packagesMozilla Thunderbird 158.0.1 tr-TR (x64) (EXE)Mozilla Thunderbird 158.0.1 tr-TR (x86) (EXE)Mozilla Thunderbird 158.0.1 ar-AR (x64) (EXE)Mozilla Thunderbird 158.0.1 ar-AR (x86) (EXE)Mozilla Thunderbird 158.0.1 de-DE (x64) (EXE)Mozilla Thunderbird 158.0.1 de-DE (x86) (EXE)Mozilla Thunderbird 158.0.1 en-US (x64) (EXE)Mozilla Thunderbird 158.0.1 en-US (x86) (EXE) |
158.0 → 158.0.1 | 2070 709 673 662 26 | per package |
| Mozilla | Mozilla Thunderbird ESR4 packagesMozilla Thunderbird ESR 153.5.1 en-US (x64) (EXE)Mozilla Thunderbird ESR 153.5.1 en-US (x86) (EXE)Mozilla Thunderbird ESR 153.5.1 tr-TR (x64) (EXE)Mozilla Thunderbird ESR 153.5.1 tr-TR (x86) (EXE) |
153.5.0 → 153.5.1 | 2070 709 673 662 26 | per package |
| Nitro Software Inc | Nitro PDF Pro NLSx64 · MSI | 26.2.5.0 → 26.2.5.1 | — | VT · KL |
| NVIDIA Corporation | NVIDIA Appx64 · EXE | 11.0.9.251 → 11.0.9.565 | — | VT · KL |
| OBS Project | OBS Studiox64 · EXE | 32.2.2 → 33.0 | — | VT · KL |
| Obsidian | Obsidianx64 · EXE | 1.13.7 → 1.14.5 | 5 2 3 | VT · KL |
| OpenJS | Node.jsx64 · MSI | 26.10.0 → 26.12.1 | 188 19 105 58 6 | VT · KL |
| OpenJS | Node.js LTS2 packagesNode.js 22.23.4 LTS (x64) (MSI)Node.js 24.22.1 LTS (x64) (MSI) |
24.22.0 → 24.22.122.23.3 → 22.23.4 | 188 19 105 58 6 | per package |
| Oracle | Java SE Development Kit3 packagesJava SE Development Kit 21.0.13.0 (x64) (MSI)Java SE Development Kit 25.0.5.0 (x64) (MSI)Java SE Development Kit 27.0.1.0 (x64) (MSI) |
27.0.0.0 → 27.0.1.025.0.4.1 → 25.0.5.021.0.12.1 → 21.0.13.0 | — | per package |
| Oracle | Oracle Java 82 packagesOracle Java 8 8.0.5110.32 (x64) (EXE)Oracle Java 8 8.0.5110.32 (x86) (EXE) |
8.0.5030.1 → 8.0.5110.32 | — | per package |
| Paessler AG | PRTG Desktopx64 · EXE | 26.3.122.1665 → 26.3.124.1727 | — | VT · KL |
| PDFgear | PDFgearx86 · EXE | 3.0.0 → 3.0.1 | — | VT · KL |
| Python Software Foundation | Python2 packagesPython 3.15.1150.0 (x64) (EXE)Python 3.15.1150.0 (x86) (EXE) |
3.15.0 → 3.15.1150.0 | 68 4 20 36 8 | per package |
| RocketChat | Rocket Chat2 packagesRocket Chat 4.18.5.0 (x64) (MSI)Rocket Chat 4.18.5.0 (x86) (MSI) |
4.18.3.0 → 4.18.5.0 | 62 10 13 38 1 | per package |
| Royal Apps GmbH | RoyalTSx64 · MSI | 7.4.50820.0 → 7.4.50922.0 | — | VT · KL |
| RStudio | RStudiox64 · EXE | 2025.05.1.513 → 2026.10.0.0 | — | VT · KL |
| Salesforce | Salesforce CLI v2x64 · EXE | 2.155.1.0 → 2.156.5.0 | — | VT · KL |
| Sandboxie-Plus | Sandboxie Plusx64 · EXE | 1.18.8 → 1.19.0 | — | VT · KL |
| ShareX Team | ShareXx64 · EXE | 21.0.0 → 22.0.0 | — | VT · KL |
| Siber Systems | GoodSyncx86 · MSI | 12.11.11.1 → 12.11.12.2 | — | VT · KL |
| Skymatic GmbH | Cryptomatorx64 · MSI | 1.19.3 → 1.19.4.6499 | 10 4 6 | VT · KL |
| Slack | Slackx64 · MSI | 4.52.178 → 4.52.182 | — | VT · KL |
| Softdeluxe | Free Download Managerx64 · EXE | 6.35.1.7021 → 6.35.2.7075 | 3 2 1 | VT · KL |
| Tracker Software Products | PDF-XChange Editor2 packagesPDF-XChange Editor 11.1.1.0 (x64) (MSI)PDF-XChange Editor 11.1.1.0 (x86) (MSI) |
11.1.0.0 → 11.1.1.0 | — | per package |
| Tracker Software Products | PDF-XChange PRO2 packagesPDF-XChange PRO 11.1.1.0 (x64) (MSI)PDF-XChange PRO 11.1.1.0 (x86) (MSI) |
11.1.0.0 → 11.1.1.0 | — | per package |
| Universiteit van Amsterdam | JASPx64 · MSI | 0.98.1 → 0.99.0 | — | VT · KL |
| Vivaldi | Vivaldi2 packagesVivaldi 8.2.4133.94 (x64) (EXE)Vivaldi 8.2.4133.94 (x86) (EXE) |
8.2.4133.89 → 8.2.4133.94 | — | per package |
| WireGuard | Tailscalex86 · EXE | 1.104.1 → 1.104.2 | 3 1 2 | VT · KL |
| Zabbix LLC | Zabbix Agentx64 · MSI | 7.4.15 → 7.4.16 | 1 1 | VT · KL |
| Zabbix LLC | Zabbix Agent 2x64 · MSI | 7.4.15 → 7.4.16 | 1 1 | VT · KL |
Easy2Patch Catalog Team — questions about this update, or a product you would like to see in the catalog? Write to support@easy2patch.com.