🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1415 Related CVEs: CVE-2025-68146 CVE-2026-22701 Upstream summary: filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attackers to corrupt […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Vulnerability found in Expat Related CVEs: CVE-2016-0718 CVE-2026-45186 Upstream summary: Expat 2.8.1 was released yesterday. The key motivation for cutting a release and doing so now was: Fixing vulnerability CVE-2026-45186 […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-065 Related CVEs: CVE-2025-23244 Upstream summary: NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability […]
🟡 Medium ⏱ 10–30 min Last verified: 10 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cups — security vulnerabilities Related CVEs: CVE-2019-8675 CVE-2019-8696 CVE-2019-8842 CVE-2020-3898 CVE-2024-47076 CVE-2024-47175 CVE-2024-47176 CVE-2025-58060 +1 more Upstream summary: OpenPrinting reports: When the AuthType is set to anything but Basic, if […]
🟠 High ⏱ 15–60 min Last verified: 10 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mail/mailpit — multiple vulnerabilities Related CVEs: CVE-2023-42821 CVE-2026-21859 CVE-2026-22689 CVE-2026-23829 CVE-2026-23845 CVE-2026-27808 CVE-2026-45709 CVE-2026-45711 +2 more Upstream summary: Mailpit author reports: Set a default 50MB per message limit to prevent […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xlockmore — local exploit Related CVEs: CVE-2012-4524 Upstream summary: Ignatios Souvatzis of NetBSD reports: Due to an error in the dclock screensaver in xlockmore, users who explicitly use this screensaver […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5073724 • MSRC update-guide entry Related CVEs: CVE-2026-20822 CVE-2026-20962 CVE-2026-21265 CVE-2026-20804 CVE-2026-20805 CVE-2026-20809 CVE-2026-20812 CVE-2026-20814 +12 more Affected components: Windows Server 2025 Microsoft summary: Use after free in Microsoft Graphics Component allows […]
🟠 High ⏱ 5–30 min Last verified: 10 February 2026 Affected versions: RHEL 10.0 RHEL 10.1 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
🟢 Low ⏱ 5–15 min Last verified: 10 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jdk — jar directory traversal vulnerability Related CVEs: CVE-2004-1029 CVE-2005-1080 Upstream summary: Pluf has discovered a vulnerability in Sun Java JDK/SDK, which potentially can be exploited by malicious people to […]
