🟢 Low ⏱ 5–15 min Last verified: 19 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-8945 Upstream summary: The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:21139-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-26209 CVE-2024-26134 CVE-2025-68131 Upstream summary: cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format. Versions prior to 5.9.0 are vulnerable […]
🟡 Medium ⏱ 10–30 min Last verified: 19 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-8252 CVE-2021-22918 CVE-2024-24806 Upstream summary: The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which can […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-19919 CVE-2019-20920 CVE-2021-23369 CVE-2021-23383 CVE-2026-33916 CVE-2026-33937 CVE-2026-33938 CVE-2026-33939 +2 more Upstream summary: Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. […]
🟡 Medium ⏱ 10–30 min Last verified: 19 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7558-1 Related CVEs: CVE-2023-50186 CVE-2024-0444 CVE-2025-3887 CVE-2023-37329 CVE-2023-40474 CVE-2023-40475 CVE-2023-40476 CVE-2023-44429 +1 more Upstream summary: It was discovered that the AV1 codec plugin in GStreamer could be made to write […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7679-1 Related CVEs: CVE-2025-6965 CVE-2025-29088 CVE-2022-35737 CVE-2020-35525 CVE-2018-8740 CVE-2019-19603 CVE-2019-19645 CVE-2020-11655 +12 more Upstream summary: It was discovered that SQLite incorrectly handled aggregate terms. An attacker could use this issue […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19019 Related CVEs: CVE-2026-0865 CVE-2026-1502 CVE-2026-2297 CVE-2026-3644 CVE-2026-4224 CVE-2026-4519 CVE-2026-4786 CVE-2026-5713 +1 more Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7846-1 Related CVEs: CVE-2025-62230 CVE-2025-62231 CVE-2025-62229 CVE-2025-49175 CVE-2025-49176 CVE-2025-49177 CVE-2025-49178 CVE-2025-49179 +12 more Upstream summary: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2021:411-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-26720 CVE-2026-24401 CVE-2025-68276 CVE-2025-68468 CVE-2025-68471 CVE-2024-52615 CVE-2024-52616 CVE-2023-38470 +10 more Upstream summary: avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via […]
🟠 High ⏱ 15–60 min Last verified: 19 May 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2026-7992 Related CVEs: CVE-2026-25679 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
