2,451 results · Clear filters · Feed
-
High max 7.5USN-8712-1 3 CVEs
pyasn1 vulnerabilities
It was discovered that pyasn1 did not properly bound the size of long-form tag identifiers when parsing BER, CER, or DER encoded data. An attacker could possibly use this issue to cause applications decoding untrusted ASN.1 data to consume excessive CPU resou…
first Sep 1, 2026 -
High max 7.3USN-8705-2 1 CVE
zfs-linux vulnerability
USN-8705-1 fixed vulnerabilities in OpenZFS. This update provides the corresponding fix for OpenZFS on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that OpenZFS incorrectly handled authorization checks for certain ioctl …
first Aug 31, 2026 -
High max 7.8USN-8701-1 1 CVE
udisks2 vulnerability
It was discovered that UDisks did not correctly validate the caller identity when handling the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. A local attacker with an active console session could possibly use this issue to moun…
-
High max 7.5USN-8695-1 9 CVEs
openjdk-25-crac vulnerabilities
It was discovered that the JSSE component of CRaC JDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of CRaC JDK 25 did not …
-
High max 7.5USN-8693-1 9 CVEs
openjdk-17-crac vulnerabilities
It was discovered that the JSSE component of CRaC JDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of CRaC JDK 17 did not …
-
High max 7.1USN-8691-1 1 CVE
attr vulnerability
It was discovered that attr incorrectly handled symbolic links while traversing directory paths. A local attacker who controlled a pathname component could possibly use this issue to redirect privileged attr operations to arbitrary files and gain elevated pri…
-
High max 7.5USN-8694-1 9 CVEs
openjdk-21-crac vulnerabilities
It was discovered that the JSSE component of CRaC JDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of CRaC JDK 21 did not …
-
High max 7.3USN-8705-1 1 CVE
zfs-linux vulnerability
It was discovered that OpenZFS incorrectly handled authorization checks for certain ioctl operations on Linux. A local attacker could possibly use this issue to perform pool-administrative operations or access privileged information, resulting in an authoriza…
-
High max 8.8USN-8703-1 47 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
-
High max 8.4USN-8700-1 29 CVEs
mysql-8.0, mysql-8.4 vulnerabilities
Multiple security issues were discovered in MySQL. MySQL has been updated to 8.4.11 in Ubuntu 26.04 LTS. Ubuntu 22.04 LTS and Ubuntu 24.04 LTS packages have been updated with backported patches. In addition to security fixes, the updated packages contain bug …
-
High max 7.5USN-8696-1 1 CVE
bind9 vulnerability
It was discovered that Bind incorrectly handled DNSSEC validation when a domain was covered by both NSEC and NSEC3 records with only one type having an RRSIG. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of ser…
-
High max 7.5USN-8689-1 9 CVEs
openjdk-26 vulnerabilities
It was discovered that the JSSE component of OpenJDK 26 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of OpenJDK 26 did not co…
-
High max 8.2USN-8202-1 6 CVEs
jq vulnerabilities
It was discovered that jq did not correctly handle certain string concatenations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue was addressed in Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LT…
first Apr 23, 2026 -
High max 7.5USN-5882-1 10 CVEs
dcmtk vulnerabilities
Gjoko Krstic discovered that DCMTK incorrectly handled buffers. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only af…
first Feb 22, 2023 -
High max 7.5USN-8682-1 3 CVEs
bind9 vulnerabilities
Vitaly Simonovich discovered that Bind could exhaust memory during GSS-API TKEY negotiation. A remote attacker could possibly use this issue to cause Bind to use excessive resources, leading to a denial of service. (CVE-2026-3039) Shuhan Zhang discovered that…
first Aug 26, 2026 -
High max 8.2USN-8654-1 2 CVEs
netty vulnerabilities
It was discovered that Netty did not properly handle malformed HTTP/2 control frames. An attacker could use this to cause a denial of service via resource exhaustion. This issue only affects Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.…
first Aug 20, 2026 -
High max 7.5USN-8681-1 9 CVEs
openjdk-25 vulnerabilities
It was discovered that the JSSE component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of OpenJDK 25 did not co…
-
High max 7.5USN-8677-1 9 CVEs
openjdk-21 vulnerabilities
It was discovered that the JSSE component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of OpenJDK 21 did not co…
first Aug 25, 2026 -
High max 7.5USN-8674-1 11 CVEs
openjdk-lts vulnerabilities
It was discovered that the JSSE component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of OpenJDK 11 did not co…
first Aug 25, 2026 -
High max 7.5USN-8676-1 9 CVEs
openjdk-17 vulnerabilities
It was discovered that the JSSE component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of OpenJDK 17 did not co…
first Aug 25, 2026 -
High max 7.5USN-8673-1 10 CVEs
openjdk-8 vulnerabilities
It was discovered that the JSSE component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the ImageIO component of OpenJDK 8 did not c…
first Aug 25, 2026 -
High max 7.8USN-8680-1 2 CVEs
ffmpeg vulnerabilities
Adrian Junge discovered that FFmpeg incorrectly handled certain subtitle data. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-70628) Adrian Junge discovered that FFmpeg incorrectly handled certain v…
first Aug 25, 2026 -
High max 7.8USN-8659-4 1 CVE
linux-oracle vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;
-
High max 7.5USN-8670-2 1 CVE
curl vulnerability
USN-8670-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. Original advisory details: Joshua Rogers discovered that curl incorrectly handled reusing connections when cl…
first Aug 25, 2026 -
High max 7.8USN-8659-3 1 CVE
linux-azure, linux-azure-fde vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;
first Aug 25, 2026 -
High max 7.5USN-8670-1 1 CVE
curl vulnerability
Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate settings changed. This could result in the wrong client certificates being used, contrary to expectations.
first Aug 24, 2026 -
High max 8.8USN-8671-1 3 CVEs
ffmpeg vulnerabilities
Adrian Junge was discovered that FFmpeg incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-66036, CVE-2026-66039) Adrian Junge discovered that FFmpeg incorrectly…
first Aug 24, 2026 -
High max 7.8USN-8659-2 1 CVE
linux-hwe-7.0 vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;
first Aug 21, 2026 -
High max 7.8USN-8659-1 1 CVE
linux, linux-aws, linux-aws-7.0, linux-ibm, linux-oem-7.0, linux-raspi, linux-realtime vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;
first Aug 20, 2026 -
High max 8.8USN-8653-1 30 CVEs
postgresql-14, postgresql-16, postgresql-18 vulnerabilities
It was discovered that PostgreSQL incorrectly handled COPY FROM STDIN when an early failure occurred. An authenticated user could possibly use this issue to execute arbitrary SQL commands. (CVE-2026-6464) It was discovered that PostgreSQL incorrectly reset ex…
-
High max 7.8USN-8652-1 8 CVEs
libvirt vulnerabilities
It was discovered that libvirt incorrectly handled guest reboots in the libxl driver. An attacker in a guest could possibly use this issue to cause the libvirt daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-…
first Aug 19, 2026 -
High max 8.6USN-8648-1 8 CVEs
bind9 vulnerabilities
It was discovered that Bind incorrectly accepted NSEC3 records whose signer name did not match the owning zone. A remote attacker could possibly use this issue to perform NSEC3 impersonation attacks, bypassing DNSSEC validation. (CVE-2026-10723) It was discov…
-
High max 7.8USN-8641-1 4 CVEs
dotnet8, dotnet10 vulnerabilities
Miha Zupan discovered that .NET did not properly interpret certain HTTP requests. An attacker could possibly use this issue to perform request smuggling and bypass a security feature. (CVE-2026-62899) Ivan Demchuk discovered that .NET did not properly handle …
first Aug 18, 2026 -
High max 8.2USN-8640-1 1 CVE
engrampa vulnerability
It was discovered that Engrampa incorrectly handled symbolic links when extracting certain archives. An attacker could possibly use this issue to write arbitrary files and execute arbitrary code.
-
High max 8.8USN-7500-2 2 CVEs
linux-azure-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Bluetooth drivers; - Microsoft Azure Network Adapter (MANA) driver; (CVE-2024…
first May 7, 2025 -
High max 8.8USN-7500-1 2 CVEs
linux-azure vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Bluetooth drivers; - Microsoft Azure Network Adapter (MANA) driver; (CVE-2025…
first May 7, 2025 -
High max 7.8USN-7911-1 2 CVEs
linux vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - JFS file system; (CVE-2023-52975, CVE-2024-56596)
first Dec 4, 2025 -
High max 7.8USN-7221-1 2 CVEs
linux-oem-6.11 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystem: - Bluetooth drivers; (CVE-2024-53238, CVE-2024-56757)
first Jan 21, 2025 -
High max 7.8USN-6864-3 2 CVEs
linux-gke vulnerabilities
It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-20…
first Jul 11, 2024 -
High max 7.8USN-6864-1 2 CVEs
linux-gcp, linux-intel vulnerabilities
It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-20…
first Jul 4, 2024