How to read deadlines and understand the scope
Deadlines retain the precision published by the source. Month-only plans are not converted to exact days. At an end-date/month boundary, or more than 30 days after source verification, the form asks you to check again.
Being within a support period does not guarantee that individual vulnerability fixes are installed. This catalog alone cannot establish whether an unlisted product or version is safe or unsupported. Choices, enrollment, contract validity and device/site status are not automatically verified.
Check OS provider fixes and extended support separately from the product's upstream deadline. A document's last-updated date is not treated as end of support.
Compare fixed versions for individual PHP CVEs →Inputs are not sent or stored, and the device is not accessed. Opening an official source link takes you to an external site.