NetBSD

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-24240 CVE-2025-8734 CVE-2020-14150 CVE-2020-24979 CVE-2020-24980 CVE-2025-8733 Upstream summary: pkgsrc audit-packages flagged bison<3.7.1 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-24240 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-26625 CVE-2024-53263 Upstream summary: pkgsrc audit-packages flagged git-lfs<3.7.1 for vulnerability class 'symlink-attack'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-26625 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-14762 Upstream summary: pkgsrc audit-packages flagged ruby{32,33,34}-aws-sdk-s3<1.208.0 for vulnerability class 'weak-cryptography'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-14762 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-37185 CVE-2023-37186 CVE-2023-37187 CVE-2023-37188 CVE-2024-3203 CVE-2024-3204 CVE-2025-29476 Upstream summary: pkgsrc audit-packages flagged blosc2<2.9.3 for vulnerability class 'null-pointer-dereference'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-37185 Table of contents Symptom & Impact Environment & Reproduction Root […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-45748 CVE-2025-6119 CVE-2024-48423 CVE-2025-15538 CVE-2021-45948 CVE-2025-5165 CVE-2025-5166 CVE-2025-5167  +12 more Upstream summary: pkgsrc audit-packages flagged assimp<5.4.0 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-45748 Table of contents Symptom & Impact Environment […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2008-2798 CVE-2008-2803 CVE-2008-2811 CVE-2008-0016 CVE-2010-3765 CVE-2023-25735 CVE-2023-25739 CVE-2025-1931  +12 more Upstream summary: pkgsrc audit-packages flagged thunderbird{,-gtk1}<2.0.0.16 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2798 Table of contents Symptom & Impact Environment […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2024-11235 CVE-2025-1220 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 Upstream summary: pkgsrc audit-packages flagged php83<8.3.19 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-11235 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-3302 CVE-2016-2047 CVE-2025-30722 CVE-2025-13699 CVE-2017-10379 CVE-2020-2574 Upstream summary: pkgsrc audit-packages flagged mariadb-client<=5.5.54 for vulnerability class 'use-after-free'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3302 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-24294 Upstream summary: pkgsrc audit-packages flagged ruby33>=3.3<3.3.0nb1 for vulnerability class 'remote-code-execution'. Reference: https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2024-39331 CVE-2024-30202 CVE-2024-30203 CVE-2024-30204 CVE-2025-1244 Upstream summary: pkgsrc audit-packages flagged emacs29-nox11<29.4 for vulnerability class 'remote-user-access'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-39331 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]