🟠 High ⏱ 15–60 min Last verified: 4 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-17545 CVE-2019-17546 CVE-2019-25050 CVE-2021-45943 CVE-2025-29480 CVE-2026-4738 CVE-2026-8084 CVE-2026-8086 +2 more Upstream summary: GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold […]
🟡 Medium ⏱ 10–30 min Last verified: 4 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2310 CVE-2015-2311 CVE-2015-2312 CVE-2015-2313 CVE-2017-7892 CVE-2022-46149 CVE-2023-48230 CVE-2026-32239 +1 more Upstream summary: Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote […]
🟡 Medium ⏱ 10–30 min Last verified: 4 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9841 CVE-2026-24765 CVE-2026-41570 Upstream summary: Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5073457 • MSRC update-guide entry Related CVEs: CVE-2026-20822 CVE-2026-21265 CVE-2026-0386 CVE-2026-20804 CVE-2026-20805 CVE-2026-20809 CVE-2026-20812 CVE-2026-20814 +12 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Microsoft summary: Use after […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-24972 Upstream summary: The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of […]
🟡 Medium ⏱ 10–30 min Last verified: 4 June 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8252-1 Related CVEs: CVE-2026-6192 CVE-2025-54874 CVE-2025-50952 CVE-2024-56826 CVE-2024-56827 CVE-2021-29338 CVE-2021-3575 CVE-2022-1122 +1 more Upstream summary: It was discovered that OpenJPEG did not properly handle memory when encoding image files. An […]
🟠 High ⏱ 15–60 min Last verified: 4 June 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7958-1 Related CVEs: CVE-2024-8372 CVE-2019-14863 CVE-2025-0716 CVE-2023-26117 CVE-2024-8373 CVE-2025-2336 CVE-2024-21490 CVE-2023-26116 +2 more Upstream summary: It was discovered that AngularJS did not properly sanitize certain `xlink:href` attributes. A remote attacker […]
🟠 High ⏱ 15–60 min Last verified: 4 June 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7542-1 Related CVEs: CVE-2025-3576 CVE-2024-26458 CVE-2024-26461 CVE-2024-26462 CVE-2025-24528 CVE-2024-3596 CVE-2024-37370 CVE-2024-37371 +3 more Upstream summary: It was discovered that Kerberos allowed the usage of weak cryptographic standards. An attacker could […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:13537 Related CVEs: CVE-2026-6746 CVE-2026-6747 CVE-2026-6748 CVE-2026-6749 CVE-2026-6750 CVE-2026-6751 CVE-2026-6752 CVE-2026-6753 +12 more Upstream summary: Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Incorrect […]
🟠 High ⏱ 15–60 min Last verified: 4 June 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8022-1 Related CVEs: CVE-2026-25210 CVE-2026-24515 CVE-2025-59375 CVE-2024-8176 CVE-2024-50602 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 +4 more Upstream summary: It was discovered that Expat incorrectly handled memory when parsing certain XML files. An attacker […]
