🟡 Medium ⏱ 10–30 min Last verified: 26 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-21503 CVE-2026-31900 CVE-2026-32274 Upstream summary: Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py […]
🟢 Low ⏱ 5–15 min Last verified: 26 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7989-1 Related CVEs: CVE-2025-58438 Upstream summary: Pengo Wray discovered that The Internet Archive Python Library incorrectly handled certain file paths when downloading files. An attacker could possibly use this issue […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5082426 • MSRC update-guide entry Related CVEs: CVE-2026-23666 CVE-2026-33116 CVE-2026-32226 Affected components: Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: Improper input validation […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5082400 • MSRC update-guide entry Related CVEs: CVE-2026-23666 CVE-2026-33116 CVE-2026-32226 Affected components: Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: Improper input validation […]
🟢 Low ⏱ 5–15 min Last verified: 26 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8234-1 Related CVEs: CVE-2026-41205 CVE-2022-40023 Upstream summary: It was discovered that Mako incorrectly handled URIs with double-slash prefixes in TemplateLookup. A remote attacker could possibly use this issue to obtain […]
🟢 Low ⏱ 5–15 min Last verified: 26 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8226-2 Related CVEs: CVE-2026-31431 Upstream summary: USN-8226-1 added a mitigation to kmod to disable loading the algif_aead module. This update adds the same mitigation to Ubuntu 14.04 LTS, Ubuntu 16.04 […]
🟢 Low ⏱ 5–15 min Last verified: 26 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8193-1 Related CVEs: CVE-2026-4878 CVE-2025-1390 Upstream summary: Ali Raza discovered that libcap incorrectly handled file capability updates. A local attacker could possibly use this issue to inject or strip capabilities […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5075904 • MSRC update-guide entry Related CVEs: CVE-2026-21519 CVE-2026-21248 CVE-2026-21247 CVE-2026-21235 CVE-2026-21234 CVE-2026-21236 CVE-2026-21533 CVE-2026-21513 +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Access of resource using incompatible […]
🟠 High ⏱ 15–60 min Last verified: 26 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7826-2 Related CVEs: CVE-2025-9640 CVE-2025-10230 https://launchpad.net/bugs/2115450 CVE-2022-3437 CVE-2022-42898 CVE-2022-45141 CVE-2023-34966 CVE-2021-44142 +12 more Upstream summary: USN-7826-1 fixed vulnerabilities in Samba. This update provides the corresponding update for Ubuntu 14.04 LTS, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2025:13935 (see also SUSE bugzilla) Related CVEs: CVE-2025-4674 CVE-2025-47906 CVE-2025-0913 CVE-2025-4673 CVE-2025-22871 Upstream summary: The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous […]
