🟢 Low ⏱ 5–15 min Last verified: 6 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-3008 Upstream summary: The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This function […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5063709 • MSRC update-guide entry Related CVEs: CVE-2025-50177 CVE-2025-53766 CVE-2025-53778 CVE-2025-49751 CVE-2025-49743 CVE-2025-49761 CVE-2025-49762 CVE-2025-50153 +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Use after free in Windows […]
🟢 Low ⏱ 5–15 min Last verified: 6 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-28370 Upstream summary: In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger code execution […]
🟢 Low ⏱ 5–15 min Last verified: 6 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-11149 Upstream summary: This affects all versions of the package node-static; all versions of the package @nubosoftware/node-static. The package fails to catch an exception when user input includes […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5087055 • MSRC update-guide entry Related CVEs: CVE-2026-32177 CVE-2026-35433 Affected components: Microsoft .NET Framework 4.8 on Windows Server 2016 Microsoft summary: Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate […]
🟠 High ⏱ 15–60 min Last verified: 6 April 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8042-1 Related CVEs: CVE-2026-24675 CVE-2026-24682 CVE-2026-24679 CVE-2026-24681 CVE-2026-24683 CVE-2026-24684 CVE-2026-24680 CVE-2026-24491 +12 more Upstream summary: It was discovered that FreeRDP incorrectly handled memory under certain circumstances, which could lead to […]
🟡 Medium ⏱ 10–30 min Last verified: 6 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15095 CVE-2017-7525 CVE-2019-10172 Upstream summary: A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code […]
🟢 Low ⏱ 5–15 min Last verified: 6 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7962-1 Related CVEs: CVE-2025-66570 Upstream summary: It was discovered that cpp-httplib did not correctly handle HTTP headers. A remote attacker could possibly use this issue to bypass authorization and impersonate […]
🟠 High ⏱ 15–60 min Last verified: 6 April 2026 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2025-10026 Related CVEs: CVE-2024-12718 CVE-2025-4330 CVE-2025-4138 CVE-2025-4517 CVE-2025-4435 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5073722 • MSRC update-guide entry Related CVEs: CVE-2026-20822 CVE-2026-21265 CVE-2026-0386 CVE-2026-20804 CVE-2026-20805 CVE-2026-20809 CVE-2026-20812 CVE-2026-20814 +12 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Microsoft summary: Use after […]
