Live · 98 sources · updated 28m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Advisories

Vendor PSIRT bulletins, CERT notes, CISA and partner-agency alerts, and distribution security notices.

351 matching records, 3 with confirmed exploitation.

  1. CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability This…

    Exploited CVE-2026-19868 SonicWall Edge / VPN / firewall
  2. Advisory Fortinet PSIRT

    Linux kernel RCE CVE-2026-98432

    CVSSv3 Score: 9.8 CVE-2026-98432:ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can…

    CVSS 9.8 Fix available CVE-2026-98432 Fortinet Linux kernel Operating system
  3. CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-119977 WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability…

    Exploited CVE-2026-119977 Web platform
  4. CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2024-27834 Apple Multiple Products Improper Authentication Vulnerability This type of…

    Exploited CVE-2024-27834 Apple
  5. Red Hat advisory Red Hat

    Important: Red Hat build of Keycloak 26.6.9 Images Security Update

    New images are available for Red Hat build of Keycloak 26.6.9 and Red Hat build of Keycloak 26.6.9 Operator, running on OpenShift Container Platform

    Red Hat Developer platform
  6. Red Hat advisory Red Hat

    Important: Red Hat build of Keycloak 26.6.9 Security Update

    New Red Hat build of Keycloak 26.6.9 packages are available from the Customer Portal

    Red Hat Identity
  7. Cisco advisory Cisco PSIRT

    Cisco Identity Services Engine Authorization Bypass Vulnerability

    A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.…

    Fix available CVE-2026-20241 Cisco Identity
  8. Ubuntu notice Ubuntu

    HAProxy regression

    USN-8972-1 fixed vulnerabilities in HAProxy. On Ubuntu 22.04 LTS, the update caused a regression when processing certain chunked requests. This update fixes the problem. We apologize for the inconvenience. Original advisory…

  9. Advisory MSRC

    Chromium CVE-2026-76028: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76028 Microsoft Google Browser
  10. Advisory MSRC

    Chromium CVE-2026-76029: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76029 Microsoft Google Browser
  11. Advisory MSRC

    Chromium CVE-2026-76024: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76024 Microsoft Google Browser
  12. Advisory MSRC

    Chromium CVE-2026-76025: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76025 Microsoft Google Browser
  13. Advisory MSRC

    Chromium CVE-2026-76031: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76031 Microsoft Google Browser
  14. Advisory MSRC

    Chromium CVE-2026-76026: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76026 Microsoft Google Browser
  15. Advisory MSRC

    Chromium CVE-2026-76030: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76030 Microsoft Google Browser
  16. Advisory MSRC

    Chromium CVE-2026-76027: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76027 Microsoft Google Browser
  17. Advisory MSRC

    Chromium CVE-2026-118321: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118321 Microsoft Google Browser
  18. Advisory MSRC

    Chromium CVE-2026-119268: Integer overflow

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119268 Microsoft Google Browser
  19. Advisory MSRC

    Chromium CVE-2026-119269: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119269 Microsoft Google Browser
  20. Advisory MSRC

    Chromium CVE-2026-119264: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119264 Microsoft Google Browser
  21. Advisory MSRC

    Chromium CVE-2026-119265: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119265 Microsoft Google Browser
  22. Advisory MSRC

    Chromium CVE-2026-119266: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119266 Microsoft Google Browser
  23. Advisory MSRC

    Chromium CVE-2026-119267: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119267 Microsoft Google Browser
  24. Advisory MSRC

    Chromium CVE-2026-119260: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119260 Microsoft Google Browser
  25. Advisory MSRC

    Chromium CVE-2026-119261: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119261 Microsoft Google Browser
  26. Advisory MSRC

    Chromium CVE-2026-119262: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119262 Microsoft Google Browser
  27. Advisory MSRC

    Chromium CVE-2026-119263: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119263 Microsoft Google Browser
  28. Advisory MSRC

    Chromium CVE-2026-119272: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119272 Microsoft Google Browser
  29. Advisory MSRC

    Chromium CVE-2026-119271: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119271 Microsoft Google Browser
  30. Advisory MSRC

    Chromium CVE-2026-119270: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119270 Microsoft Google Browser
  31. Ubuntu notice Ubuntu

    Linux kernel (NVIDIA) vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an…

  32. Ubuntu notice Ubuntu

    nginx vulnerabilities

    USN-8955-1 fixed vulnerabilities in nginx in Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, and…

  33. AWS bulletin AWS

    CVE-2026-109518 - APT package manager that affects Ubuntu and Debian operating systems

    Bulletin ID: 2026-172-AWS Publication Date: 11/05/2026 20:00 PM PST Description: An issue in the APT package manager (CVE-2026-109518) affects Ubuntu and Debian operating systems. Under specific conditions, when APT is configured…

    Fix available CVE-2026-109518 Amazon Web Services Canonical Operating system
  34. Debian advisory Debian

    zlib - security update

    Several vulnerabilities were discovered in the zlib compression library, which could result in denial of service or potentially the execution of arbitrary code if specially crafted input is processed.…

    Debian Operating system
  35. Ubuntu notice Ubuntu

    HAProxy vulnerabilities

    It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service.…

  36. Chrome release Chrome Releases

    Stable Channel Update for Desktop

    The Chrome team is delighted to announce the promotion of Chrome 157 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 157.0.8103.38 (Linux) 157.0.8103.38/.39 Windows/Mac…

  37. Ubuntu notice Ubuntu

    Bind vulnerabilities

    It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory…

  38. Red Hat advisory Red Hat

    Important: RHEL AI 3.4 RPM runtime CVE fix - thrift

    Security scans report the following CVEs, all of which have IMPORTANT impact: - CVE-2026-43871 - CVE-2026-55969

  39. Ubuntu notice Ubuntu

    Linux kernel vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management…

  40. Red Hat advisory Red Hat

    Important: Red Hat build of Keycloak 26.6.8 Images Security Update

    New images are available for Red Hat build of Keycloak 26.6.8 and Red Hat build of Keycloak 26.6.8 Operator, running on OpenShift Container Platform

    Red Hat Developer platform
  41. Red Hat advisory Red Hat

    Important: Red Hat build of Keycloak 26.4.17 Images Security Update

    New images are available for Red Hat build of Keycloak 26.4.17 and Red Hat build of Keycloak 26.4.17 Operator, running on OpenShift Container Platform

    Red Hat Developer platform
  42. Red Hat advisory Red Hat

    Important: Red Hat build of Keycloak 26.6.8 Security Update

    New Red Hat build of Keycloak 26.6.8 packages are available from the Customer Portal

    Red Hat Identity
  43. Red Hat advisory Red Hat

    Important: Red Hat build of Keycloak 26.4.17 Security Update

    New Red Hat build of Keycloak 26.4.17 packages are available from the Customer Portal

    Red Hat Identity
  44. Red Hat advisory Red Hat

    Important: thunderbird security, bug fix, and enhancement update

    An update for thunderbird is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Mozilla Operating system
  45. Red Hat advisory Red Hat

    Important: thunderbird security, bug fix, and enhancement update

    An update for thunderbird is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability…

    Red Hat SAP Operating system
  46. Advisory MSRC

    Chromium CVE-2026-118314: Incorrect reference resolution

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118314 Microsoft Google Browser
  47. Advisory MSRC

    Chromium CVE-2026-118309: Incorrect reference resolution

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118309 Microsoft Google Browser
  48. Cisco advisory Cisco PSIRT

    Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated…

    Fix available CVE-2026-76419 Cisco Collaboration
  49. AWS bulletin AWS

    CVE-2026-119923 and CVE-2026-119924: Issues with Babelfish for Aurora PostgreSQL

    Bulletin ID: 2026-166-AWS Publication Date: 11/06/2026 10:00 AM PST Description: We identified two issues in the Babelfish TDS protocol layer: - CVE-2026-119923: A memory-safety issue in the TDS connection-handshake handling…

  50. AWS bulletin AWS

    CVE-2026-122193 - Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM documents in Trusted Remote Execution (REX)

    Bulletin ID: 2026-173-AWS Publication Date: 11/06/2026 09:00 AM PST Description: We identified CVE-2026-122193, an OS command injection issue in an example provided in the set-up documentation. The example included a script that…

  51. Ubuntu notice Ubuntu

    Tornado regression

    USN-8952-1 fixed vulnerabilities in Tornado. Unfortunately that update was incomplete due to an incomplete fix for CVE-2026-103263, which broke static file serving for applications that subclass Tornado's StaticFileHandler, such…

  52. Ubuntu notice Ubuntu

    Linux kernel (NVIDIA Tegra) vulnerabilities

    It was discovered that the io_uring subsystem in the Linux kernel did not properly handle canceled task work when processing certain wait operations, leading to the operation being performed in the wrong task context. A local…

  53. AWS bulletin AWS

    CVE-2026-119083 - GluonTS arbitrary file write during archive extraction

    Bulletin ID: 2026-171-AWS Publication Date: 11/05/2026 08:30 AM PST Description: GluonTS is an open-source Python library for probabilistic time series modeling. We identified CVE-2026-119083, an issue in the archive extraction…

  54. Red Hat advisory Red Hat

    Critical: OpenShift Container Platform 4.22.22 bug fix and security update

    Red Hat OpenShift Container Platform release 4.22.22 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container…

    Fix available Red Hat Developer platform
  55. Red Hat advisory Red Hat

    Important: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

    A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base…

    Fix available Red Hat Web platform
  56. Red Hat advisory Red Hat

    Critical: Satellite 6.16 EUS security update

    A security update for Red Hat Satellite is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed…

    Fix available Red Hat Network management
  57. Red Hat advisory Red Hat

    Critical: Satellite 6 Client Update

    A security update for Red Hat Satellite Client is now available. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Fix available Red Hat Network management
  58. Red Hat advisory Red Hat

    Critical: Satellite 6.18 security update

    A security update for Red Hat Satellite 6.18 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Fix available Red Hat Network management
  59. Red Hat advisory Red Hat

    Critical: Satellite 6.17 security update

    A security update for Red Hat Satellite 6.17 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Fix available Red Hat Network management
  60. Red Hat advisory Red Hat

    Critical: Satellite 6.19 security update

    A security update for Red Hat Satellite 6.19 is now available. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Fix available Red Hat Network management
  61. Red Hat advisory Red Hat

    Important: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.4.SP3)

    An update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.4.SP3). The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and…

    Fix available Red Hat Apache Software Foundation Web platform
  62. Red Hat advisory Red Hat

    Critical: OpenJDK 11.0.33 ELS Security Update For Portable Linux Builds

    An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is…

    Fix available Red Hat Oracle Developer platform
  63. Red Hat advisory Red Hat

    Critical: OpenJDK 11.0.33 ELS Security Update for Windows Builds

    An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is…

    Fix available Red Hat Oracle Developer platform
  64. Red Hat advisory Red Hat

    Important: dnsmasq security, bug fix, and enhancement update

    An update for dnsmasq is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  65. Red Hat advisory Red Hat

    Important: dnsmasq security, bug fix, and enhancement update

    An update for dnsmasq is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  66. Red Hat advisory Red Hat

    Important: bind9.16 security, bug fix, and enhancement update

    An update for bind9.16 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as…

    Red Hat SAP Operating system
  67. Debian advisory Debian

    xen - security update

    Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in guest-to-host privilege escalation or information disclosure. https://security-tracker.debian.org/tracker/DSA-6610-1

    Debian Operating system
  68. Red Hat advisory Red Hat

    Important: bind9.18 security, bug fix, and enhancement update

    An update for bind9.18 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Operating system
  69. Red Hat advisory Red Hat

    Important: bind9.16 security, bug fix, and enhancement update

    An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  70. Red Hat advisory Red Hat

    Important: Red Hat OpenStack Platform 13.0 security advisory

    Updated packages that resolve security issues are now available for Red Hat OpenStack Platform 13.0 for Red Hat Enterprise Linux (RHEL) 7. Red Hat Product Security has rated this update as having a security impact of Important. A…

    Red Hat Operating system
  71. Red Hat advisory Red Hat

    Important: bind9.16 security update

    An update for bind9.16 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  72. Red Hat advisory Red Hat

    Important: thunderbird security, bug fix, and enhancement update

    An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Mozilla Operating system
  73. AWS bulletin AWS

    CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS

    Bulletin ID: 2026-170-AWS Publication Date: 11/04/2026 13:30 PM PST Description: We identified CVE-2026-122266, an issue in Amazon EKS Network Policy Agent (aws-network-policy-agent). Improper isolation of shared eBPF connection…

  74. AWS bulletin AWS

    CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

    Bulletin ID: 2026-168-AWS Publication Date: 11/03/2026 13:00 PM PST Description: We identified CVE-2026-119084, an issue in Amazon Redshift JDBC Driver versions prior to 2.3.0. Under certain conditions, the driver could load and…

  75. AWS bulletin AWS

    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

    Bulletin ID: 2026-167-AWS Publication Date: 11/03/2026 10:30 AM PST Description: maplibre-gl-js-amplify is an open-source AWS Amplify library that integrates Amazon Location Service with MapLibre GL JS to render maps, markers…

  76. AWS bulletin AWS

    CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

    Bulletin ID: 2026-165-AWS Publication Date: 11/03/2026 10:00 AM PST Description: Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 allows remote authenticated…

  77. Ubuntu notice Ubuntu

    libvips vulnerabilities

    It was discovered that libvips incorrectly handled certain PDF files with a page that defines a width but not a height. An attacker could possibly use this issue to cause libvips to crash, resulting in a denial of service, or…

  78. Ubuntu notice Ubuntu

    Linux kernel vulnerabilities

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service…

  79. Ubuntu notice Ubuntu

    Linux kernel (NVIDIA Tegra) vulnerabilities

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service…

  80. Red Hat advisory Red Hat

    Important: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg

    Security scans report the following CVEs, all of which have IMPORTANT impact: - CVE-2026-64832 - CVE-2026-64833 - CVE-2026-70628 - CVE-2026-75142 - CVE-2026-75144 - CVE-2026-75146

  81. AWS bulletin AWS

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Bulletin ID: 2026-164-AWS Publication Date: 11/02/2026 13:30 PM PST Description: We identified CVE-2026-116635. Under certain conditions, improper limitation of a pathname to a restricted directory in the deployment status…

  82. AWS bulletin AWS

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Bulletin ID: 2026-161-AWS Publication Date: 11/02/2026 08:30 AM PST Description: We are aware of CVE-2026-119301 in the Apache Iceberg write component, where improper neutralization of quoting syntax in SQL identifier…

  83. Debian advisory Debian

    vim - security update

    Multiple vulnerabilities were found and fixed in Vim, an enhanced version of the standard UNIX editor Vi (Vi IMproved). A remote attacker could trigger arbitrary code execution, command injection, or a crash (potential…

  84. MS-ISAC advisory MS-ISAC

    Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

    Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code…

    Google Browser
  85. Red Hat advisory Red Hat

    Important: Red Hat build of Cryostat security update

    An update is now available for the Red Hat build of Cryostat 4 on RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Fix available Red Hat Operating system
  86. Red Hat advisory Red Hat

    Important: OpenShift Container Platform 4.21.41 packages and security update

    Red Hat OpenShift Container Platform release 4.21.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container…

    Fix available Red Hat Developer platform
  87. Red Hat advisory Red Hat

    Important: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available

    An update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (Red Hat build of Quarkus 3.33.4.SP2). The purpose of this text-only errata is to inform you about the enhancements that improve your…

    Fix available Red Hat Apache Software Foundation Web platform
  88. Red Hat advisory Red Hat

    Important: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

    An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Fix available Red Hat Developer platform
  89. Red Hat advisory Red Hat

    Important: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

    An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Fix available Red Hat Developer platform
  90. Red Hat advisory Red Hat

    Important: Red Hat build of Quarkus 3.33.4.SP2 release and security update

    An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed…

    Fix available Red Hat Web platform
  91. Red Hat advisory Red Hat

    Important: Red Hat build of Quarkus 3.27.6.SP2 release and security update

    An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed…

    Fix available Red Hat Web platform
  92. Red Hat advisory Red Hat

    Important: java-17-openjdk security update for RHEL 9

    An update for java-17-openjdk is now available for Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, and Red Hat…

    Fix available Red Hat Operating system
  93. Red Hat advisory Red Hat

    Important: bind security, bug fix, and enhancement update

    An update for bind is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat Operating system
  94. Red Hat advisory Red Hat

    Important: bind security, bug fix, and enhancement update

    An update for bind is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  95. Red Hat advisory Red Hat

    Important: tesseract security update

    An update for tesseract is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  96. Red Hat advisory Red Hat

    Important: goose security update

    An update for goose is now available for Red Hat Enterprise Linux 10.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  97. Red Hat advisory Red Hat

    Important: goose security update

    An update for goose is now available for Red Hat Enterprise Linux 9.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system

Reuse this view

Same filters as JSON: /api/items?category=advisory&window=7d&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help