Live · 98 sources · updated just now
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Advisories

Vendor PSIRT bulletins, CERT notes, CISA and partner-agency alerts, and distribution security notices.

333 matching records, 4 with confirmed exploitation.

  1. CISA alert CISA

    CISA Adds Four Known Exploited Vulnerabilities to Catalog

    CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-102895 GPUStack Improper Authentication Vulnerability CVE-2026-116779 SignalWire…

  2. CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability This…

    Exploited CVE-2026-19868 SonicWall Edge / VPN / firewall
  3. CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-119977 WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability…

    Exploited CVE-2026-119977 Web platform
  4. Ubuntu notice Ubuntu

    OpenJDK 8 vulnerabilities

    It was discovered that the Security component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE component…

  5. Ubuntu notice Ubuntu

    OpenJDK 11 vulnerabilities

    It was discovered that the Security component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE…

  6. Ubuntu notice Ubuntu

    pyasn1 vulnerabilities

    It was discovered that pyasn1 did not properly bound the size of long-form tag identifiers when parsing BER, CER, or DER encoded data. An attacker could possibly use this issue to cause applications decoding untrusted ASN.1 data…

    Fix available CVE-2026-59884CVE-2026-59885CVE-2026-59886+4 more Canonical Operating system
  7. CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2024-27834 Apple Multiple Products Improper Authentication Vulnerability This type of…

    Exploited CVE-2024-27834 Apple
  8. Red Hat advisory Red Hat

    Important: dnsmasq security, bug fix, and enhancement update

    An update for dnsmasq is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as…

    Red Hat SAP Operating system
  9. Red Hat advisory Red Hat

    Important: dnsmasq security, bug fix, and enhancement update

    An update for dnsmasq is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  10. Ubuntu notice Ubuntu

    Fetchmail vulnerabilities

    Christian Herdtweck discovered that Fetchmail incorrectly handled certain long log messages. A remote attacker could possibly use this issue to cause Fetchmail to crash, resulting in a denial of service. This issue only affected…

  11. Red Hat advisory Red Hat

    Critical: OpenShift Container Platform 4.14.78 bug fix and security update

    Red Hat OpenShift Container Platform release 4.14.78 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container…

    Fix available Red Hat Developer platform
  12. Red Hat advisory Red Hat

    Critical: OpenShift Container Platform 5.0.1 bug fix and security update

    Red Hat OpenShift Container Platform release 5.0.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform…

    Fix available Red Hat Developer platform
  13. Red Hat advisory Red Hat

    Moderate: patch security update

    An update for patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Fix available Red Hat Operating system
  14. Red Hat advisory Red Hat

    Important: OpenShift Container Platform 4.18.60 packages and security update

    Red Hat OpenShift Container Platform release 4.18.60 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container…

    Fix available Red Hat Developer platform
  15. Red Hat advisory Red Hat

    Critical: OpenShift Container Platform 4.19.55 bug fix and security update

    Red Hat OpenShift Container Platform release 4.19.55 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container…

    Fix available Red Hat Developer platform
  16. Red Hat advisory Red Hat

    Critical: OpenShift Container Platform 4.20.46 bug fix and security update

    Red Hat OpenShift Container Platform release 4.20.46 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container…

    Fix available Red Hat Developer platform
  17. Red Hat advisory Red Hat

    Critical: OpenShift Container Platform 4.21.42 bug fix and security update

    Red Hat OpenShift Container Platform release 4.21.42 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container…

    Fix available Red Hat Developer platform
  18. Red Hat advisory Red Hat

    Important: OpenShift Container Platform 4.16.75 bug fix and security update

    Red Hat OpenShift Container Platform release 4.16.75 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container…

    Fix available Red Hat Developer platform
  19. Red Hat advisory Red Hat

    Important: OpenShift Container Platform 4.16.75 packages and security update

    Red Hat OpenShift Container Platform release 4.16.75 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container…

    Fix available Red Hat Developer platform
  20. Apple security release Apple

    Security update: watchOS 26.6.1

    Apple published security content for watchOS 26.6.1 (Apple Watch Series 6, Apple Watch SE (1st generation and 2nd generation), Apple Watch Series 8, and Apple Watch Ultra). The advisory lists the CVE entries fixed in this release.

    Fix available Apple Operating system
  21. Apple security release Apple

    Security update: watchOS 27.2.1

    Apple published security content for watchOS 27.2.1 (Apple Watch Series 9 and later). The advisory lists the CVE entries fixed in this release.

    Fix available Apple Operating system
  22. Apple security release Apple

    Security update: macOS Golden Gate 27.2.1

    Apple published security content for macOS Golden Gate 27.2.1 (macOS Golden Gate). The advisory lists the CVE entries fixed in this release.

    Fix available Apple Operating system
  23. Apple security release Apple

    Security update: macOS Tahoe 26.7.3

    Apple published security content for macOS Tahoe 26.7.3 (macOS Tahoe). The advisory lists the CVE entries fixed in this release.

    Fix available Apple Operating system
  24. Apple security release Apple

    Security update: macOS Sequoia 15.8.3

    Apple published security content for macOS Sequoia 15.8.3 (macOS Sequoia). The advisory lists the CVE entries fixed in this release.

    Fix available Apple Operating system
  25. Apple security release Apple

    Security update: iOS 26.7.3 and iPadOS 26.7.3

    Apple published security content for iOS 26.7.3 and iPadOS 26.7.3 (iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th…

    Fix available Apple Mobile OS
  26. Apple security release Apple

    Security update: iOS 18.7.12 and iPadOS 18.7.12

    Apple published security content for iOS 18.7.12 and iPadOS 18.7.12 (iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation). The advisory lists the CVE entries fixed in this release.

    Fix available Apple Mobile OS
  27. Apple security release Apple

    Security update: iOS 27.2.1 and iPadOS 27.2.1

    Apple published security content for iOS 27.2.1 and iPadOS 27.2.1 (iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th…

    Fix available Apple Mobile OS
  28. Apple security release Apple

    Security update: visionOS 27.2.1

    Apple published security content for visionOS 27.2.1 (Apple Vision Pro (all models)). The advisory lists the CVE entries fixed in this release.

    Fix available Apple Operating system
  29. Cisco advisory Cisco PSIRT

    Cisco Identity Services Engine Authorization Bypass Vulnerability

    A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.…

    Fix available CVE-2026-20241 Cisco Identity
  30. Advisory MSRC

    Chromium CVE-2026-76028: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76028 Microsoft Google Browser
  31. Advisory MSRC

    Chromium CVE-2026-76029: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76029 Microsoft Google Browser
  32. Advisory MSRC

    Chromium CVE-2026-76024: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76024 Microsoft Google Browser
  33. Advisory MSRC

    Chromium CVE-2026-76025: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76025 Microsoft Google Browser
  34. Advisory MSRC

    Chromium CVE-2026-76031: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76031 Microsoft Google Browser
  35. Advisory MSRC

    Chromium CVE-2026-76026: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76026 Microsoft Google Browser
  36. Advisory MSRC

    Chromium CVE-2026-76030: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76030 Microsoft Google Browser
  37. Advisory MSRC

    Chromium CVE-2026-76027: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76027 Microsoft Google Browser
  38. Advisory MSRC

    Chromium CVE-2026-118321: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118321 Microsoft Google Browser
  39. Advisory MSRC

    Chromium CVE-2026-119268: Integer overflow

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119268 Microsoft Google Browser
  40. Advisory MSRC

    Chromium CVE-2026-119269: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119269 Microsoft Google Browser
  41. Advisory MSRC

    Chromium CVE-2026-119264: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119264 Microsoft Google Browser
  42. Advisory MSRC

    Chromium CVE-2026-119265: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119265 Microsoft Google Browser
  43. Advisory MSRC

    Chromium CVE-2026-119266: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119266 Microsoft Google Browser
  44. Advisory MSRC

    Chromium CVE-2026-119267: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119267 Microsoft Google Browser
  45. Advisory MSRC

    Chromium CVE-2026-119260: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119260 Microsoft Google Browser
  46. Advisory MSRC

    Chromium CVE-2026-119261: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119261 Microsoft Google Browser
  47. Advisory MSRC

    Chromium CVE-2026-119262: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119262 Microsoft Google Browser
  48. Advisory MSRC

    Chromium CVE-2026-119263: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119263 Microsoft Google Browser
  49. Advisory MSRC

    Chromium CVE-2026-119272: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119272 Microsoft Google Browser
  50. Advisory MSRC

    Chromium CVE-2026-119271: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119271 Microsoft Google Browser
  51. Advisory MSRC

    Chromium CVE-2026-119270: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119270 Microsoft Google Browser
  52. CERT/CC note CERT/CC

    PrestaShop Performance Debug Configuration Contains a PHP Code Injection Vulnerability

    Overview PrestaShop's back-office Performance > Debug mode functionality contains a PHP code injection vulnerability. An authenticated attacker with permission to modify debug-mode configuration can submit crafted cookie…

  53. AWS bulletin AWS

    CVE-2026-124033 - Relative path traversal in the log export commands in AWS ParallelCluster CLI

    Bulletin ID: 2026-174-AWS Publication Date: 11/09/2026 13:00 PM PST Description: AWS ParallelCluster CLI is an open source command line tool, distributed on PyPI as aws-parallelcluster. We identified CVE-2026-124033, an issue…

  54. Red Hat advisory Red Hat

    Important: Red Hat JBoss Web Server 6.2.6 release and security update

    Red Hat JBoss Web Server 6.2.6 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important.…

    Red Hat Operating system
  55. Red Hat advisory Red Hat

    Important: cockpit security update

    An update for cockpit is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  56. Red Hat advisory Red Hat

    Moderate: ruby security, bug fix, and enhancement update

    An update for ruby is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  57. Red Hat advisory Red Hat

    Important: nodejs:24 security update

    An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score…

    Red Hat Node.js Operating system
  58. Red Hat advisory Red Hat

    Important: nodejs:22 security, bug fix, and enhancement update

    An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score…

    Red Hat Node.js Operating system
  59. Red Hat advisory Red Hat

    Important: nodejs-nodemon security update

    An update for nodejs-nodemon is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score…

    Red Hat Operating system
  60. Red Hat advisory Red Hat

    Critical: edk2 security update

    An update for edk2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  61. Red Hat advisory Red Hat

    Important: openssl security update

    An update for openssl is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  62. Ubuntu notice Ubuntu

    ca-certificates update

    USN-9001-1 fixed a vulnerability in ca-certificates, ca-certificates-java. This update provides the corresponding fix for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that the…

    Canonical Operating system
  63. Red Hat advisory Red Hat

    Important: tesseract security update

    An update for tesseract is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as…

    Red Hat SAP Operating system
  64. Red Hat advisory Red Hat

    Important: tesseract security update

    An update for tesseract is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  65. Red Hat advisory Red Hat

    Moderate: ruby4.0 security, bug fix, and enhancement update

    An update for ruby4.0 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  66. Red Hat advisory Red Hat

    Important: openssl security update

    An update for openssl is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat OpenSSL Operating system
  67. Red Hat advisory Red Hat

    Important: util-linux security update

    An update for util-linux is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  68. Red Hat advisory Red Hat

    Important: gd security update

    An update for gd is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat Operating system
  69. Red Hat advisory Red Hat

    Critical: OpenShift Container Platform 4.12.103 bug fix update

    Red Hat OpenShift Container Platform release 4.12.103 is now available with updates to packages and images that fix several bugs.

    Red Hat Developer platform
  70. Red Hat advisory Red Hat

    Moderate: ruby:4.0 security, bug fix, and enhancement update

    An update for the ruby:4.0 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score…

    Red Hat Operating system
  71. Red Hat advisory Red Hat

    Moderate: glibc security update

    An update for glibc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  72. Red Hat advisory Red Hat

    Moderate: ruby:3.3 security, bug fix, and enhancement update

    An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score…

    Red Hat Operating system
  73. Red Hat advisory Red Hat

    Important: curl security update

    An update for curl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  74. Red Hat advisory Red Hat

    Important: nodejs22 security update

    An update for nodejs22 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  75. Red Hat advisory Red Hat

    Important: squid:4 security update

    An update for the squid:4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score…

    Red Hat Operating system
  76. Red Hat advisory Red Hat

    Important: webkit2gtk3 security update

    An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  77. Red Hat advisory Red Hat

    Important: qt5-qtdeclarative security update

    An update for qt5-qtdeclarative is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score…

    Red Hat Operating system
  78. Red Hat advisory Red Hat

    Important: dpdk security update

    An update for dpdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  79. Red Hat advisory Red Hat

    Important: nodejs24 security, bug fix, and enhancement update

    An update for nodejs24 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  80. Red Hat advisory Red Hat

    Important: gdb security update

    An update for gdb is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  81. Red Hat advisory Red Hat

    Important: qt5-qtbase security update

    An update for qt5-qtbase is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as…

    Red Hat SAP Operating system
  82. Red Hat advisory Red Hat

    Important: gdb security update

    An update for gdb is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat SAP Operating system
  83. Red Hat advisory Red Hat

    Important: qt5-qtbase security update

    An update for qt5-qtbase is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated…

    Red Hat Operating system
  84. Red Hat advisory Red Hat

    Important: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_135_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update

    An update for multiple packages is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat Operating system
  85. Red Hat advisory Red Hat

    Important: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_146_1, and kpatch-patch-5_14_0-427_84_1 security update

    An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability…

    Red Hat SAP Operating system
  86. Red Hat advisory Red Hat

    Important: ruby security update

    An update for ruby is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  87. Red Hat advisory Red Hat

    Important: rsyslog security update

    An update for rsyslog is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Operating system
  88. Red Hat advisory Red Hat

    Important: gdb security update

    An update for gdb is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  89. Red Hat advisory Red Hat

    Important: gdb security update

    An update for gdb is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat SAP Operating system
  90. Red Hat advisory Red Hat

    Important: kpatch-patch-5_14_0-687_10_1 and kpatch-patch-5_14_0-687_42_1 security update

    An update for multiple packages is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score…

    Red Hat Operating system
  91. Red Hat advisory Red Hat

    Moderate: ruby security update

    An update for ruby is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  92. Red Hat advisory Red Hat

    Important: python-jwt security update

    An update for python-jwt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Operating system
  93. Red Hat advisory Red Hat

    Important: resteasy security update

    An update for resteasy is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  94. Red Hat advisory Red Hat

    Important: osbuild-composer security update

    An update for osbuild-composer is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has…

    Red Hat Operating system
  95. Ubuntu notice Ubuntu

    HAProxy regression

    USN-8972-1 fixed vulnerabilities in HAProxy. On Ubuntu 22.04 LTS, the update caused a regression when processing certain chunked requests. This update fixes the problem. We apologize for the inconvenience. Original advisory…

  96. Ubuntu notice Ubuntu

    HAProxy vulnerabilities

    It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of service.…

  97. Ubuntu notice Ubuntu

    Linux kernel (NVIDIA) vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an…

  98. Ubuntu notice Ubuntu

    nginx vulnerabilities

    USN-8955-1 fixed vulnerabilities in nginx in Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, and…

  99. Chrome release Chrome Releases

    Stable Channel Update for Desktop

    The Chrome team is delighted to announce the promotion of Chrome 157 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 157.0.8103.38 (Linux) 157.0.8103.38/.39 Windows/Mac…

  100. Ubuntu notice Ubuntu

    Bind vulnerabilities

    It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory…

Reuse this view

Same filters as JSON: /api/items?category=advisory&window=7d&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help