🟢 Low ⏱ 5–15 min Last verified: 7 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8225-1 Related CVEs: CVE-2025-68480 CVE-2018-17175 Upstream summary: Jared Deckard discovered that Python marshmallow did not correctly handle hiding certain fields. An attacker could possibly use this issue to leak sensitive […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02816-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-48174 CVE-2025-48175 Upstream summary: In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 7 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2022-47022 Upstream summary: An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 7 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-26916 Upstream summary: libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 7 May 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1042-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-2808 Upstream summary: HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5073697 • MSRC update-guide entry Related CVEs: CVE-2026-0386 CVE-2026-20816 CVE-2026-20820 CVE-2026-20821 CVE-2026-20828 CVE-2026-20831 CVE-2026-20833 CVE-2026-20834 +12 more Affected components: Windows Server 2016 Microsoft summary: Improper access control in Windows Deployment Services allows […]
🟠 High ⏱ 15–60 min Last verified: 7 May 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2026-13642 Related CVEs: CVE-2026-25679 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 7 May 2026 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-9143 Related CVEs: CVE-2025-22871 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3036 Related CVEs: CVE-2025-41244 CVE-2023-34058 CVE-2023-34059 CVE-2023-20900 CVE-2022-31676 CVE-2025-22247 CVE-2023-20867 Upstream summary: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative […]
🟠 High ⏱ 15–60 min Last verified: 7 May 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:3094 Related CVEs: CVE-2026-0994 Upstream summary: The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a […]
