🟢 Low ⏱ 5–15 min Last verified: 17 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0503 CVE-2005-3149 Upstream summary: uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges. Table […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19456 Related CVEs: CVE-2026-4878 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0129 Upstream summary: libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the […]
🟡 Medium ⏱ 10–30 min Last verified: 17 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-47515 CVE-2024-47516 CVE-2024-4981 CVE-2024-4982 CVE-2026-3312 Upstream summary: A vulnerability was found in Pagure. Support of symbolic links during repository archiving of repositories allows the disclosure of local files. […]
🟡 Medium ⏱ 10–30 min Last verified: 17 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7983-1 Related CVEs: CVE-2025-64329 CVE-2024-25621 CVE-2024-40635 Upstream summary: David Leadbeater discovered that containerd incorrectly set certain directory path permissions. An attacker could possibly use this issue to achieve unauthorised access […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5061072 • MSRC update-guide entry Related CVEs: CVE-2025-32712 CVE-2025-32713 CVE-2025-32714 CVE-2025-32716 CVE-2025-32724 CVE-2025-33064 CVE-2025-33066 CVE-2025-33075 +3 more Affected components: Windows Server 2016 Microsoft summary: Use after free in Windows Win32K – GRFX […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5077181 • MSRC update-guide entry Related CVEs: CVE-2026-21519 CVE-2026-21248 CVE-2026-21247 CVE-2026-21236 CVE-2026-21533 CVE-2026-21513 CVE-2026-21510 CVE-2026-21508 +11 more Affected components: Windows Server 2016 Microsoft summary: Access of resource using incompatible type ('type confusion') […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8044-1 Related CVEs: CVE-2026-25068 Upstream summary: It was discovered that alsa-lib incorrectly handled the topology mixer control decoder. A local attacker could use a specially crafted topology file to cause […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8168-1 Related CVEs: CVE-2026-33056 Upstream summary: It was discovered that tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0978-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-25075 CVE-2025-62291 Upstream summary: strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote […]
