Software updates
Software updates are how Apple, Google, Microsoft, Mozilla and 7 other makers close security holes in the software people use every day. This page lists the latest version of each, read from the vendors’ own release notes and CISA’s list of flaws being used in attacks.[1]
Since June 2026 there have been 309 security releases across 28 products. Of the flaws they fix, 12 were already being used in attacks when the fix came out.
Latest versions
| Product | Latest | Released | Fixes | Install |
|---|---|---|---|---|
| iOS | 27.2 | 163 | This week | |
| macOS | Golden Gate 27.2 | 263 | This week | |
| Safari | 27.2 | 33 | This week | |
| watchOS | 27.2 | 62 | This week | |
| tvOS | 27.2 | 72 | This week | |
| visionOS | 27.2 | 125 | This week | |
| Chrome | 157.0.8103.38 | 213 | This week | |
| Firefox | 159.0.1 | 1 | Soon | |
| Firefox ESR | 153.6 | 145 | This week | |
| Windows | 28000.3231 | 997 | Today | |
| Android | 2026-11-05 | 216 | This week | |
| Pixel | 2026-10-05 | 6 | This week | |
| 7-Zip | 26.03 | 1 | Soon | |
| Adobe Acrobat Reader | 26.002.21901 | 32 | This week | |
| Brave | 1.99.55 | 213 | This week | |
| Java | 8u511 | 103 | This week | |
| LibreOffice | 26.8.1 | 1 | Soon | |
| Microsoft Edge | 156.0.4314.58 | 21 | This week | |
| Microsoft 365 Apps | 2609 build 20430.20182 | 132 | This week | |
| Office for Mac | 16.114 | 118 | This week | |
| Visual Studio Code | 1.141.1 | 10 | Soon | |
| Thunderbird | 159 | 173 | This week | |
| Thunderbird ESR | 153.6 | 154 | This week | |
| VLC media player | 3.0.24 | 2 | Soon | |
| Zoom for Mac | 7.2.0 | 2 | Soon | |
| Zoom for Windows | 7.2.0 | 3 | Soon | |
| Zoom for iPhone | 7.2.0 | 2 | Soon | |
| Zoom for Android | 7.2.1 | 1 | Soon |
Newest releases
| Release | Date | Fixes | Used in attacks |
|---|---|---|---|
| LibreOffice 26.8.1 | 1 | – | |
| LibreOffice 26.2.6 | 1 | – | |
| Brave 1.99.55 | 213 | – | |
| Firefox 159.0.1 | 1 | – | |
| Chrome 157.0.8103.38 | 213 | – | |
| Android security update November 2026 | 216 | – | |
| Microsoft Edge 156.0.4314.58 | 21 | – | |
| Brave 1.98.63 | 21 | – | |
| Chrome 156.0.8078.79 | 21 | – | |
| Microsoft Edge 156.0.4314.56 | 52 | – | |
| Brave 1.98.62 | 52 | – | |
| Firefox 159 | 167 | – | |
| Thunderbird 159 | 173 | – | |
| Chrome 156.0.8078.73 | 52 | – | |
| Microsoft Edge 156.0.4314.50 | 1 | – | |
| Firefox ESR 153.6 | 145 | – | |
| Thunderbird ESR 153.6 | 154 | – | |
| Firefox ESR 115.44 | 80 | – | |
| iOS 27.2 | 163 | – | |
| macOS Golden Gate 27.2 | 263 | – |
Update a device
Not every device announces its updates. Step-by-step guides: Windows 10 after end of support, how to update AirPods, how to update a Roku, how to update a Samsung TV.
Why updates matter
An update’s release notes tell attackers exactly what was broken. From that moment, every device still on the old version is a known target, so the gap between a release and installing it is when most people get caught. Turning on automatic updates closes that gap without you having to read about each one.
References
- ^ Apple, “Apple security releases”; Google, “Chrome Releases”; Mozilla, “Mozilla Foundation Security Advisories”; Microsoft, “Security Update Guide”; Google, “Android Security Bulletins”; Google, “Pixel Update Bulletins”; Igor Pavlov, “7-Zip history”; Adobe, “Adobe security bulletins for Acrobat and Reader”; Brave, “Brave release notes”; Oracle, “Oracle Critical Patch Updates”; The Document Foundation, “LibreOffice Security Advisories”; Microsoft, “Microsoft Edge security release notes”; Microsoft, “Release notes for Microsoft Office security updates”; Microsoft, “Release notes for Office for Mac”; Microsoft, “Microsoft Security Update Guide”; VideoLAN, “VideoLAN Security Bulletins”; Zoom, “Zoom Security Bulletin”; CISA, “Known Exploited Vulnerabilities Catalog”.