🟠 High ⏱ 15–60 min Last verified: 20 November 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:20656-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-62725 CVE-2022-27664 CVE-2022-2879 CVE-2022-2880 CVE-2022-32149 CVE-2022-41723 CVE-2022-41715 Upstream summary: Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 7 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:0075 Related CVEs: CVE-2025-58098 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 15–60 min Last verified: 20 November 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:6628 (see also SUSE bugzilla) Related CVEs: CVE-2025-15270 CVE-2025-15269 CVE-2025-15275 CVE-2025-15279 CVE-2024-25081 CVE-2024-25082 CVE-2020-5395 CVE-2020-5496 +1 more Upstream summary: FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. […]
🟡 Medium ⏱ 10–30 min Last verified: 19 November 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — potential data loss with zip.vim and specially crafted zip files Related CVEs: CVE-2004-1138 CVE-2005-2368 CVE-2007-2953 CVE-2008-2712 CVE-2008-3076 CVE-2008-3432 CVE-2016-1248 CVE-2025-27423 +1 more Upstream summary: Vim reports: See https://github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmf […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5071544 • MSRC update-guide entry Related CVEs: CVE-2025-62454 CVE-2025-62457 CVE-2025-62466 CVE-2025-62470 CVE-2025-62472 CVE-2025-62473 CVE-2025-62549 CVE-2025-62571 +12 more Affected components: Windows Server 2025 Microsoft summary: Heap-based buffer overflow in Windows Cloud Files Mini […]
🟢 Low ⏱ 5–15 min Last verified: 19 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-50658 CVE-2025-63811 Upstream summary: The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5055518 • MSRC update-guide entry Related CVEs: CVE-2025-26663 CVE-2025-26686 CVE-2025-26670 CVE-2025-27491 CVE-2025-26665 CVE-2025-26666 CVE-2025-26669 CVE-2025-26668 +12 more Affected components: Windows Server 2025 Microsoft summary: Use after free in Windows LDAP – Lightweight […]
🟢 Low ⏱ 5–15 min Last verified: 19 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0484 CVE-2014-1419 Upstream summary: The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the "user's environment." Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 19 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5986 CVE-2012-0270 CVE-2012-2106 CVE-2012-2107 CVE-2012-2108 Upstream summary: Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score generators in […]
🟠 High ⏱ 15–60 min Last verified: 19 November 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0847 CVE-2011-1499 CVE-2011-1843 CVE-2012-3505 CVE-2017-11747 CVE-2022-40468 CVE-2023-49606 CVE-2025-63938 +2 more Upstream summary: tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory […]
