🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:3754-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-61920 CVE-2025-68158 Upstream summary: Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib's JOSE implementation accepts unbounded […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7838-1 Related CVEs: CVE-2025-61962 Upstream summary: It was discovered that the fetchmail SMTP client incorrectly handled certain status code messages. An attacker controlling a malicious server could possibly use this […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8086-1 Related CVEs: CVE-2026-23865 Upstream summary: It was discovered that FreeType did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to leak sensitive information. Table […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5063927 • MSRC update-guide entry Related CVEs: CVE-2025-50177 CVE-2025-53766 CVE-2025-53778 CVE-2025-49743 CVE-2025-49761 CVE-2025-49762 CVE-2025-50153 CVE-2025-50154 +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Use after free in Windows […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8192-1 Related CVEs: CVE-2023-52890 CVE-2026-40706 Upstream summary: Jeffrey Bencteux discovered that NTFS-3G incorrectly handled certain UTF-8 sequences. An attacker could use this issue to cause NTFS-3G to crash, resulting in […]
🟠 High ⏱ 15–60 min Last verified: 5 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8000-1 Related CVEs: CVE-2026-21932 CVE-2026-21925 CVE-2026-21933 CVE-2026-21945 CVE-2025-53057 CVE-2025-53066 CVE-2025-30749 CVE-2025-30761 +12 more Upstream summary: It was discovered that the RMI component of OpenJDK 8 would establish RMI TCP endpoint […]
🟠 High ⏱ 15–60 min Last verified: 5 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8035-1 Related CVEs: CVE-2026-25646 CVE-2026-22801 CVE-2025-66293 CVE-2026-22695 CVE-2025-64720 CVE-2025-64506 CVE-2025-64505 CVE-2025-65018 +2 more Upstream summary: It was discovered that the libpng simplified API incorrectly processed palette PNG images with partial […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5083768 • MSRC update-guide entry Related CVEs: CVE-2026-32157 CVE-2026-33827 CVE-2026-33824 CVE-2026-25250 CVE-2026-23670 CVE-2026-26151 CVE-2026-26155 CVE-2026-26160 +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Use after free in Remote […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-2142 Upstream summary: userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack […]
🟡 Medium ⏱ 10–30 min Last verified: 5 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-18198 CVE-2017-18201 CVE-2017-18199 Upstream summary: print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) […]
