🟠 High ⏱ 15–60 min Last verified: 26 January 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-17545 CVE-2019-17546 CVE-2019-25050 CVE-2021-45943 CVE-2025-29480 CVE-2026-4738 CVE-2026-8084 CVE-2026-8086 +2 more Upstream summary: GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold […]
🟢 Low ⏱ 5–15 min Last verified: 26 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-36177 Upstream summary: An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API. Table […]
🟢 Low ⏱ 5–15 min Last verified: 26 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-2079 Upstream summary: X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5052032 • MSRC update-guide entry Related CVEs: CVE-2025-21376 CVE-2025-21352 CVE-2025-21368 CVE-2025-21369 CVE-2025-21375 CVE-2025-21418 CVE-2025-21419 CVE-2025-21208 +12 more Affected components: Windows Server 2022 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 26 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1591 CVE-2013-6425 CVE-2014-9766 CVE-2015-5297 CVE-2022-44638 CVE-2023-37769 Upstream summary: Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and […]
🟢 Low ⏱ 5–15 min Last verified: 26 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-6547 Upstream summary: schema.py in FormEncode for Python (python-formencode) 1.0 does not apply the chained_validators feature, which allows attackers to bypass intended access restrictions via unknown vectors. Table […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5082424 • MSRC update-guide entry Related CVEs: CVE-2026-23666 CVE-2026-33116 CVE-2026-32226 Affected components: Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: Improper input validation […]
🟢 Low ⏱ 5–15 min Last verified: 26 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5152 Upstream summary: inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file. Table […]
🟢 Low ⏱ 5–15 min Last verified: 26 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1275 CVE-2009-5067 Upstream summary: Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input." Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 1.9.21-r0 📖 ~4 min read • Source: Alpine secdb entry — haveged 1.9.21-r0 Related CVEs: CVE-2026-41054 Upstream summary: Alpine main repository for vv3.20 ships haveged 1.9.21-r0 which addresses CVE-2026-41054. Table of contents Symptom & Impact Environment […]
