🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 2.4.9-r1 📖 ~4 min read • Source: Alpine secdb entry — cups 2.4.9-r1 Related CVEs: CVE-2024-47175 CVE-2024-35235 CVE-2023-4504 CVE-2023-32324 CVE-2022-26691 CVE-2026-27447 CVE-2026-34978 CVE-2026-34979 +12 more Upstream summary: Alpine main repository for vv3.20 ships cups 2.4.9-r1 which […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0503 CVE-2005-3149 Upstream summary: uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges. Table […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19456 Related CVEs: CVE-2026-4878 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0129 Upstream summary: libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the […]
🟡 Medium ⏱ 10–30 min Last verified: 17 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-47515 CVE-2024-47516 CVE-2024-4981 CVE-2024-4982 CVE-2026-3312 Upstream summary: A vulnerability was found in Pagure. Support of symbolic links during repository archiving of repositories allows the disclosure of local files. […]
🟡 Medium ⏱ 10–30 min Last verified: 17 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7983-1 Related CVEs: CVE-2025-64329 CVE-2024-25621 CVE-2024-40635 Upstream summary: David Leadbeater discovered that containerd incorrectly set certain directory path permissions. An attacker could possibly use this issue to achieve unauthorised access […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5061072 • MSRC update-guide entry Related CVEs: CVE-2025-32712 CVE-2025-32713 CVE-2025-32714 CVE-2025-32716 CVE-2025-32724 CVE-2025-33064 CVE-2025-33066 CVE-2025-33075 +3 more Affected components: Windows Server 2016 Microsoft summary: Use after free in Windows Win32K – GRFX […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5077181 • MSRC update-guide entry Related CVEs: CVE-2026-21519 CVE-2026-21248 CVE-2026-21247 CVE-2026-21236 CVE-2026-21533 CVE-2026-21513 CVE-2026-21510 CVE-2026-21508 +11 more Affected components: Windows Server 2016 Microsoft summary: Access of resource using incompatible type ('type confusion') […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8044-1 Related CVEs: CVE-2026-25068 Upstream summary: It was discovered that alsa-lib incorrectly handled the topology mixer control decoder. A local attacker could use a specially crafted topology file to cause […]
