Live · 98 sources · updated 13m ago

· 18:15 UTC

The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Advisories

Vendor PSIRT bulletins, CERT notes, CISA and partner-agency alerts, and distribution security notices.

419 matching records, 3 with confirmed exploitation.

  1. 73
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound…

    Exploited EPSS 0.27 CVE-2026-97229CVE-2026-76418 Cisco GitLab Edge / VPN / firewall
  2. 67
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function…

    Exploited CVE-2026-111357CVE-2026-118527 Ivanti Edge / VPN / firewall
  3. 60
    Advisory Fortinet PSIRT

    Linux kernel RCE CVE-2026-98432

    CVSSv3 Score: 9.8 CVE-2026-98432:ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can…

    CVSS 9.8 Fix available CVE-2026-98432 Fortinet Linux kernel Operating system
  4. 60
    Cisco advisory Cisco PSIRT

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could…

    EPSS 0.89 Fix available CVE-2026-20127 Cisco Edge / VPN / firewall
  5. 60
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux…

    Exploited CVE-2026-41709CVE-2026-46300 VMware (Broadcom) Linux kernel Operating system
  6. 48
    AWS bulletin AWS

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    Bulletin ID: 2026-155-AWS Publication Date: 10/28/2026 15:00 PM PDT Description: AWS is aware of CVE-2026-111497, an issue in the native Brotli decompression library that could allow a third party to run code or read process…

    EPSS 0.83 CVE-2026-111497 Amazon Web Services Cloud platform
  7. 45
    Cisco advisory Cisco PSIRT

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…

    Fix available CVE-2026-76418 Cisco Edge / VPN / firewall
  8. 42
    CCCS advisory CCCS

    [Control systems] Siemens security advisory (AV26-802)

    CVE-2026-58115 Siemens OT / ICS
  9. 41
    Red Hat advisory Red Hat

    Important: bind9.18 security, bug fix, and enhancement update

    An update for bind9.18 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Operating system
  10. 41
    Red Hat advisory Red Hat

    Important: bind9.16 security, bug fix, and enhancement update

    An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  11. 41
    Red Hat advisory Red Hat

    Important: Red Hat OpenStack Platform 13.0 security advisory

    Updated packages that resolve security issues are now available for Red Hat OpenStack Platform 13.0 for Red Hat Enterprise Linux (RHEL) 7. Red Hat Product Security has rated this update as having a security impact of Important. A…

    Red Hat Operating system
  12. 41
    Red Hat advisory Red Hat

    Important: bind9.16 security update

    An update for bind9.16 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  13. 40
    Red Hat advisory Red Hat

    Important: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg

    Security scans report the following CVEs, all of which have IMPORTANT impact: - CVE-2026-64832 - CVE-2026-64833 - CVE-2026-70628 - CVE-2026-75142 - CVE-2026-75144 - CVE-2026-75146

    CVE-2026-64832CVE-2026-64833CVE-2026-70628+3 more Red Hat Operating system
  14. 40
    AWS bulletin AWS

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Bulletin ID: 2026-164-AWS Publication Date: 11/02/2026 13:30 PM PST Description: We identified CVE-2026-116635. Under certain conditions, improper limitation of a pathname to a restricted directory in the deployment status…

    CVE-2026-116635 Amazon Web Services Anthropic AI infrastructure
  15. 39
    Red Hat advisory Red Hat

    Important: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available

    An update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (Red Hat build of Quarkus 3.33.4.SP2). The purpose of this text-only errata is to inform you about the enhancements that improve your…

    Fix available Red Hat Apache Software Foundation Web platform
  16. 39
    Red Hat advisory Red Hat

    Important: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

    An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Fix available Red Hat Developer platform
  17. 39
    Red Hat advisory Red Hat

    Important: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

    An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Fix available Red Hat Developer platform
  18. 39
    CCCS advisory CCCS

    AL26-027 - Critical vulnerability impacting Google Brotli – CVE-2026-111497

    EPSS 0.83 CVE-2026-111497 Google
  19. 38
    Advisory MSRC

    Chromium: CVE-2026-118304 Improper input validation in SVG

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118304 Microsoft Google Browser
  20. 38
    Advisory MSRC

    Chromium: CVE-2026-118305 Memory corruption in Turbolev

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118305 Microsoft Google Browser
  21. 38
    Advisory MSRC

    Chromium: CVE-2026-118306 Memory corruption in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118306 Microsoft Google Browser
  22. 38
    Advisory MSRC

    Chromium: CVE-2026-118307 Use after free in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118307 Microsoft Google Browser
  23. 38
    Advisory MSRC

    Chromium: CVE-2026-118317 Memory corruption in HTML

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118317 Microsoft Google Browser
  24. 38
    Advisory MSRC

    Chromium: CVE-2026-118316 Improper input validation in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118316 Microsoft Google Browser
  25. 38
    Advisory MSRC

    Chromium: CVE-2026-118313 Use after free in Video

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118313 Microsoft Google Browser
  26. 38
    Advisory MSRC

    Chromium: CVE-2026-118328 Improper input validation in WebRTC

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118328 Microsoft Google Browser
  27. 38
    Advisory MSRC

    Chromium: CVE-2026-118311 Memory corruption in Media

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118311 Microsoft Google Browser
  28. 38
    Advisory MSRC

    Chromium: CVE-2026-118329 Improper input validation in ANGLE

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118329 Microsoft Google Browser
  29. 38
    Advisory MSRC

    Chromium: CVE-2026-118310 Improper input validation in Views

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118310 Microsoft Google Browser
  30. 38
    Advisory MSRC

    Chromium: CVE-2026-118322 Memory corruption in ANGLE

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118322 Microsoft Google Browser
  31. 38
    Advisory MSRC

    Chromium: CVE-2026-118320 Memory corruption in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118320 Microsoft Google Browser
  32. 38
    Advisory MSRC

    Chromium: CVE-2026-118318 Improper access control in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118318 Microsoft Google Browser
  33. 38
    Advisory MSRC

    Chromium: CVE-2026-118327 Memory corruption in Media

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118327 Microsoft Google Browser
  34. 38
    Advisory MSRC

    Chromium: CVE-2026-118348 Improper input validation in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118348 Microsoft Google Browser
  35. 38
    Advisory MSRC

    Chromium: CVE-2026-118349 Memory corruption in Payments

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118349 Microsoft Google Browser
  36. 38
    Advisory MSRC

    Chromium: CVE-2026-118359 Memory corruption in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118359 Microsoft Google Browser
  37. 38
    Advisory MSRC

    Chromium: CVE-2026-118358 Memory corruption in WebAudio

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118358 Microsoft Google Browser
  38. 38
    Advisory MSRC

    Chromium: CVE-2026-118340 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118340 Microsoft Google Browser
  39. 38
    Advisory MSRC

    Chromium: CVE-2026-118339 Use after free in Animation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118339 Microsoft Google Browser
  40. 38
    Advisory MSRC

    Chromium: CVE-2026-118342 Out of bounds write in Editing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118342 Microsoft Google Browser
  41. 38
    Advisory MSRC

    Chromium: CVE-2026-118343 Improper input validation in ReadingList

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118343 Microsoft Google Browser
  42. 38
    Advisory MSRC

    Chromium: CVE-2026-118353 Use after free in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118353 Microsoft Google Browser
  43. 38
    Advisory MSRC

    Chromium: CVE-2026-118344 Use after free in Layout

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118344 Microsoft Google Browser
  44. 38
    Advisory MSRC

    Chromium: CVE-2026-118352 Memory corruption in Cache

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118352 Microsoft Google Browser
  45. 38
    Advisory MSRC

    Chromium: CVE-2026-118345 Use after free in PDFium

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118345 Microsoft Google Browser
  46. 38
    Advisory MSRC

    Chromium: CVE-2026-118351 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118351 Microsoft Google Browser
  47. 38
    Advisory MSRC

    Chromium: CVE-2026-118346 Use after free in Compositing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118346 Microsoft Google Browser
  48. 38
    Advisory MSRC

    Chromium: CVE-2026-118350 Use after free in Turbolev

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118350 Microsoft Google Browser
  49. 38
    Advisory MSRC

    Chromium: CVE-2026-118334 Use after free in ImageCapture

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118334 Microsoft Google Browser
  50. 38
    Advisory MSRC

    Chromium: CVE-2026-118357 Use after free in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118357 Microsoft Google Browser
  51. 38
    Advisory MSRC

    Chromium: CVE-2026-118337 Improper access control in Forms

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118337 Microsoft Google Browser
  52. 38
    Advisory MSRC

    Chromium: CVE-2026-118336 Improper input validation in Headless

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118336 Microsoft Google Browser
  53. 38
    Advisory MSRC

    Chromium: CVE-2026-118355 Improper input validation in Command

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118355 Microsoft Google Browser
  54. 38
    Advisory MSRC

    Chromium: CVE-2026-118331 Improper input validation in FileAPI

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118331 Microsoft Google Browser
  55. 38
    Advisory MSRC

    Chromium: CVE-2026-118354 Improper input validation in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118354 Microsoft Google Browser
  56. 38
    Advisory MSRC

    Chromium: CVE-2026-118333 Missing authorization in Video

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118333 Microsoft Google Browser
  57. 38
    Advisory MSRC

    Chromium: CVE-2026-118332 Improper input validation in Compositing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118332 Microsoft Google Browser
  58. 38
    Cisco advisory Cisco PSIRT

    Vulnerabilities in Node.js Affecting Cisco Products: October 2026

    On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli…

    Fix available CVE-2026-111497CVE-2026-105482CVE-2026-105483+1 more Cisco Node.js Developer platform
  59. 35
    CERT/CC note CERT/CC

    BaseChat – Audio Dating App, Android version 9.8.1, contains multiple vulnerabilities

    Overview Multiple vulnerabilities have been identified in the Android application, BaseChat – Audio Dating App, version 9.8.1, which ultimately compromise the privacy of users’ personal data and activity. Description BaseChat is…

    Google Mobile OS
  60. 35
    CCCS advisory CCCS

    GitLab security advisory (AV26-1028)

    EPSS 0.27 CVE-2026-97229 GitLab Developer platform
  61. 34
    Red Hat advisory Red Hat

    Critical: kernel security update

    An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  62. 34
    Red Hat advisory Red Hat

    Important: kernel security update

    An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  63. 34
    Red Hat advisory Red Hat

    Important: raptor2 security update

    An update for raptor2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  64. 34
    Red Hat advisory Red Hat

    Important: freerdp security update

    An update for freerdp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  65. 34
    Red Hat advisory Red Hat

    Critical: fence-agents security update

    An update for fence-agents is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability…

    Red Hat SAP Operating system
  66. 34
    Red Hat advisory Red Hat

    Important: Red Hat JBoss Web Server 7.0.3 release and security update

    Red Hat JBoss Web Server 7.0.3 zip release is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, and Windows Server. Red Hat Product Security has rated this update as having a…

    Red Hat Microsoft Operating system
  67. 34
    Red Hat advisory Red Hat

    Critical: fence-agents security update

    An update for fence-agents is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System…

    Red Hat Operating system
  68. 34
    Red Hat advisory Red Hat

    Critical: kernel security, bug fix, and enhancement update

    An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  69. 34
    Red Hat advisory Red Hat

    Critical: kernel security, bug fix, and enhancement update

    An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  70. 34
    Red Hat advisory Red Hat

    Critical: fence-agents security update

    An update for fence-agents is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System…

    Red Hat Operating system
  71. 34
    Red Hat advisory Red Hat

    Moderate: pipewire security update

    An update for pipewire is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  72. 34
    Red Hat advisory Red Hat

    Critical: kernel security, bug fix, and enhancement update

    An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  73. 34
    Red Hat advisory Red Hat

    Important: libXtst security update

    An update for libXtst is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  74. 34
    Red Hat advisory Red Hat

    Important: python3 security update

    An update for python3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this…

    Red Hat Operating system
  75. 34
    Red Hat advisory Red Hat

    Moderate: pipewire security update

    An update for pipewire is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System…

    Red Hat Operating system
  76. 34
    Red Hat advisory Red Hat

    Moderate: gnutls security update

    An update for gnutls is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring…

    Red Hat Operating system
  77. 34
    Red Hat advisory Red Hat

    Moderate: pipewire security update

    An update for pipewire is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  78. 34
    Red Hat advisory Red Hat

    Critical: kernel security update

    An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having…

    Red Hat SAP Operating system
  79. 34
    Red Hat advisory Red Hat

    Important: bind security, bug fix, and enhancement update

    An update for bind is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS)…

    Red Hat Operating system
  80. 34
    Red Hat advisory Red Hat

    Critical: kernel security, bug fix, and enhancement update

    An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring…

    Red Hat SAP Operating system
  81. 34
    Red Hat advisory Red Hat

    Important: Satellite 6 Client Update

    Updated Satellite Client packages that fix several bugs are now available for Red Hat Satellite. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System…

    Red Hat Network management
  82. 34
    Red Hat advisory Red Hat

    Important: bind security, bug fix, and enhancement update

    An update for bind is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  83. 34
    Red Hat advisory Red Hat

    Important: ghostscript security update

    An update for ghostscript is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  84. 34
    MS-ISAC advisory MS-ISAC

    A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service

    A vulnerability has been discovered in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software that could allow for denial of service (DoS). Cisco Secure Firewall…

    Fix available Cisco Edge / VPN / firewall
  85. 33
    AWS bulletin AWS

    CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue

    Bulletin ID: 2026-160-AWS Publication Date: 10/30/2026 22:15 PM PDT Description: AWS is aware of CVE-2026-98432, a memory issue in the Linux kernel IPv4 TCP handshake path affecting kernel versions 4.4 and later that could result…

    CVE-2026-98432 Amazon Web Services Linux kernel Operating system
  86. 33
    GitLab release GitLab

    GitLab Patch Release and Security Update: 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14

    We have released versions 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14 for GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab.com is already running the patched version. GitLab Dedicated tenants…

    CVE-2026-111943 GitLab Developer platform
  87. 32
    Red Hat advisory Red Hat

    Important: thunderbird security, bug fix, and enhancement update

    An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Mozilla Operating system
  88. 32
    Advisory MSRC

    Chromium CVE-2026-91732: Missing authorization

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-91732 Microsoft Google Browser
  89. 32
    Advisory MSRC

    Chromium: CVE-2026-118315 Improper input validation in SVG

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118315 Microsoft Google Browser
  90. 32
    Advisory MSRC

    Chromium: CVE-2026-118312 Memory corruption in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118312 Microsoft Google Browser
  91. 32
    Advisory MSRC

    Chromium: CVE-2026-118308 Use after free in SVG

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118308 Microsoft Google Browser
  92. 32
    Advisory MSRC

    Chromium: CVE-2026-118319 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118319 Microsoft Google Browser
  93. 32
    Advisory MSRC

    Chromium: CVE-2026-118341 Use after free in Modularization

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118341 Microsoft Google Browser
  94. 32
    Advisory MSRC

    Chromium: CVE-2026-118338 Use after free in Animation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118338 Microsoft Google Browser
  95. 32
    Advisory MSRC

    Chromium: CVE-2026-118335 Improper input validation in Metrics

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118335 Microsoft Google Browser
  96. 32
    Advisory MSRC

    Chromium: CVE-2026-118347 Use after free in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118347 Microsoft Google Browser
  97. 32
    Advisory MSRC

    Chromium: CVE-2026-118356 Use after free in WTF

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118356 Microsoft Google Browser
  98. 32
    Advisory MSRC

    Chromium: CVE-2026-118330 Use after free in Browser

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118330 Microsoft Google Browser
  99. 31
    AWS bulletin AWS

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Bulletin ID: 2026-161-AWS Publication Date: 11/02/2026 08:30 AM PST Description: We are aware of CVE-2026-119301 in the Apache Iceberg write component, where improper neutralization of quoting syntax in SQL identifier…

    CVE-2026-119301 Amazon Web Services Apache Software Foundation Web platform
  100. 31
    Debian advisory Debian

    vim - security update

    Multiple vulnerabilities were found and fixed in Vim, an enhanced version of the standard UNIX editor Vi (Vi IMproved). A remote attacker could trigger arbitrary code execution, command injection, or a crash (potential…

    Fix available CVE-2025-53905CVE-2025-53906CVE-2026-25749+37 more Debian

Reuse this view

Same filters as JSON: /api/items?category=advisory&window=7d&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help