🟠 High ⏱ 15–60 min Last verified: 9 June 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8103-1 Related CVEs: CVE-2026-27596 CVE-2026-25884 CVE-2020-18899 CVE-2025-55304 CVE-2025-54080 CVE-2026-27631 CVE-2020-18771 CVE-2021-32815 +12 more Upstream summary: It was discovered that Exiv2 did not correctly handle reading certain buffers. An attacker could […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-68146 CVE-2026-22701 Upstream summary: pkgsrc audit-packages flagged py{27,39,310,311,312,313,314}-filelock<3.20.1 for vulnerability class 'symlink-attack'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-68146 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟡 Medium ⏱ 10–30 min Last verified: 9 June 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7544-1 Related CVEs: CVE-2025-47273 CVE-2024-6345 CVE-2022-40897 Upstream summary: It was discovered that setuptools did not properly sanitize paths. An attacker could possibly use this issue to write files to arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 9 June 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7998-1 Related CVEs: CVE-2026-21932 CVE-2026-21933 CVE-2026-21925 CVE-2026-21945 CVE-2025-53057 CVE-2025-53066 CVE-2025-50106 CVE-2025-30754 +12 more Upstream summary: It was discovered that the RMI component of OpenJDK 17 would establish RMI TCP endpoint […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5052042 • MSRC update-guide entry Related CVEs: CVE-2025-21376 CVE-2025-21352 CVE-2025-21368 CVE-2025-21369 CVE-2025-21375 CVE-2025-21418 CVE-2025-21419 CVE-2025-21420 +12 more Affected components: Windows Server 2022 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 15–60 min Last verified: 9 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:2854-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000518 Upstream summary: aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured […]
🟠 High ⏱ 5–30 min Last verified: 9 June 2026 Affected versions: RHEL 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2025:19927 (see also SUSE bugzilla) Related CVEs: CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 CVE-2023-27561 CVE-2019-19921 CVE-2021-30465 CVE-2023-25809 CVE-2023-28642 +5 more Upstream summary: runc is a CLI tool for spawning and running containers according to the […]
🟡 Medium ⏱ 10–30 min Last verified: 9 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2015:1545-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-6496 Upstream summary: conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote […]
🟡 Medium ⏱ 10–30 min Last verified: 9 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 CVE-2023-4016 Upstream summary: procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs […]
