🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2021-1581 Related CVEs: CVE-2020-8201 CVE-2020-8251 CVE-2024-24806 CVE-2021-22918 Upstream summary: Node.js A flaw was found in Node.js 14.x, in versions before 14.11, where it is vulnerable to a denial of service […]
🟡 Medium ⏱ 10–30 min Last verified: 3 July 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenSSL — multiple vulnerabilities Related CVEs: CVE-2025-9230 CVE-2025-9231 CVE-2025-9232 Upstream summary: The OpenSSL project reports reports: Out-of-bounds read & write in RFC 3211 KEK Unwrap Timing side-channel in SM2 algorithm […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5035856 • MSRC update-guide entry Related CVEs: CVE-2024-21407 CVE-2024-21408 CVE-2024-21429 CVE-2024-21430 CVE-2024-21438 CVE-2024-21439 CVE-2024-21441 CVE-2024-21442 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Table of […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5055547 • MSRC update-guide entry Related CVEs: CVE-2025-26663 CVE-2025-26686 CVE-2025-26670 CVE-2025-27491 CVE-2023-40547 CVE-2025-26665 CVE-2025-26669 CVE-2025-26668 +12 more Affected components: Windows Server 2022 Microsoft summary: Use after free in Windows LDAP – Lightweight […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5070879 • MSRC update-guide entry Related CVEs: CVE-2025-59287 Affected components: Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: Deserialization of untrusted data in Windows Server Update Service allows an unauthorized […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5066793 • MSRC update-guide entry Related CVEs: CVE-2025-49708 CVE-2016-9535 CVE-2025-2884 CVE-2025-64679 CVE-2025-64680 CVE-2025-62208 CVE-2025-62209 CVE-2025-48004 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: […]
🟡 Medium ⏱ 10–30 min Last verified: 3 July 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8248-2 Related CVEs: CVE-2021-33450 CVE-2021-33452 https://launchpad.net/bugs/2151861 CVE-2023-31722 Upstream summary: USN-8248-1 fixed vulnerabilities in NASM. Unfortunately the update introduced a regression which could cause NASM to crash. This update fixes the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 3.3.9-r0 📖 ~4 min read • Source: Alpine secdb entry — ruby-rexml 3.3.9-r0 Related CVEs: CVE-2024-39908 CVE-2024-41123 CVE-2024-41946 CVE-2024-43398 CVE-2024-49761 Upstream summary: Alpine main repository for vv3.20 ships ruby-rexml 3.3.9-r0 which addresses CVE-2024-39908. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-30192 CVE-2024-25590 CVE-2024-25583 CVE-2023-22617 CVE-2018-16855 CVE-2023-26437 CVE-2022-37428 CVE-2009-4009 +12 more Upstream summary: An attacker spoofing answers to ECS enabled requests sent out by the Recursor […]
🟡 Medium ⏱ 10–30 min Last verified: 3 July 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2168-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-38394 CVE-2014-7300 Upstream summary: Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying device matching logic […]
