While you're prepping all your patches, don't forget about the vendors like Palo Alto that like to publish theirs on Exploit Wednesday. Theirs is usually predictable though. There will be at least one PAN-OS vuln where they sandbag the CVSS-BT score, and an LPE in Cortex, GlobalProtect, or both. Every month seems to go that way with them.
