🟡 Medium ⏱ 10–30 min Last verified: 1 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8037-1 Related CVEs: CVE-2025-30193 CVE-2025-30187 CVE-2025-8671 Upstream summary: It was discovered that HTTP/2, which is used/vendored by DNSdist, did not properly account for resources when handling client-triggered stream resets. An […]
🟠 High ⏱ 15–60 min Last verified: 1 January 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7919-1 Related CVEs: CVE-2025-11495 CVE-2025-11081 CVE-2025-11083 CVE-2025-11412 CVE-2025-11082 CVE-2025-11413 CVE-2025-11414 CVE-2025-11494 +12 more Upstream summary: It was discovered that GNU binutils' dump_dwarf_section function could be manipulated to perform an out-of-bounds […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5053594 • MSRC update-guide entry Related CVEs: CVE-2025-24035 CVE-2025-24045 CVE-2025-24064 CVE-2025-26645 CVE-2024-49116 CVE-2024-9157 CVE-2025-24044 CVE-2025-24987 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: […]
🟡 Medium ⏱ 10–30 min Last verified: 1 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7773-1 Related CVEs: CVE-2025-31178 CVE-2025-31176 CVE-2025-31181 CVE-2025-31179 CVE-2025-31180 CVE-2025-31177 CVE-2025-3359 Upstream summary: ChenYiFan Liu discovered that Gnuplot did not correctly handle certain memory operations. An attacker could possibly use this […]
🟠 High ⏱ 15–60 min Last verified: 1 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:1294-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-3634 CVE-2022-24903 CVE-2011-3200 CVE-2013-4758 CVE-2013-6370 CVE-2013-6371 CVE-2014-3683 CVE-2015-3243 Upstream summary: rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers […]
🟠 High ⏱ 15–60 min Last verified: 1 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-29510 CVE-2024-3772 Upstream summary: Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either `'infinity'`, `'inf'` or `float('inf')` […]
🟠 High ⏱ 15–60 min Last verified: 1 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2020-17446 Upstream summary: asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because […]
🟠 High ⏱ 15–60 min Last verified: 1 January 2026 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-15661 Related CVEs: CVE-2025-38332 CVE-2025-38352 CVE-2025-38449 CVE-2025-22097 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5065468 • MSRC update-guide entry Related CVEs: CVE-2025-54918 CVE-2025-55226 CVE-2025-53799 CVE-2025-53797 CVE-2025-53798 CVE-2025-54095 CVE-2025-54096 CVE-2025-54097 +12 more Affected components: Windows Server 2022 Microsoft summary: Improper authentication in Windows NTLM allows an authorized […]
🟠 High ⏱ 15–60 min Last verified: 1 January 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2025-21038 Related CVEs: CVE-2025-11232 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
