8,464 results · Feed
-
UnscoredUSN-8105-2 0 CVEs
freerdp3 regression
USN-8105-1 fixed vulnerabilities in FreeRDP. The update introduced a regression which could cause FreeRDP to crash. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that FreeRDP incorrectly handle…
first Mar 19, 2026 -
UnscoredUSN-8091-1 0 CVEs
util-linux vulnerability
It was discovered that the util-linux su utility did not drop capabilities when being used with the --pty option. While not a security issue by itself, a local attacker could possibly use the su tool to exploit vulnerabilities in other applications.
first Mar 12, 2026 -
Medium max 5.3USN-8086-1 1 CVE
freetype vulnerability
It was discovered that FreeType did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to leak sensitive information.
first Mar 12, 2026 -
High max 7.5USN-8050-1 1 CVE
trafficserver vulnerability
Masakazu Kitajo discovered that Apache Traffic Server did not properly handle the Valid Host header field. An attacker could possibly use this issue to cause a denial of service (DoS).
first Feb 18, 2026 -
Medium max 5.5USN-7961-1 1 CVE
erlang vulnerability
It was discovered that Erlang incorrectly validated peer certificates when incorrect extended key usage was presented. A remote attacker could possibly use this issue to bypass SSL key usage restrictions.
first Jan 14, 2026 -
Medium max 5.5USN-7993-1 2 CVEs
libpng1.6 vulnerabilities
It was discovered that libpng incorrectly handled memory when processing certain malformed PNG files. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in…
first Feb 2, 2026 -
High max 8.2USN-7953-1 3 CVEs
php7.2, php7.4, php8.1, php8.3, php8.4 vulnerabilities
It was discovered that PHP incorrectly handled memory while reading images in multi-chunk mode. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 24.04 LTS, Ubuntu 25.04 and Ubuntu 25.10. (CVE-2025-1417…
first Jan 12, 2026 -
High max 8.8
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Jan 13, 2026 -
High max 8.8USN-7941-1 4 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Jan 5, 2026 -
UnscoredUSN-7968-2 0 CVEs
apache2 regression
USN-7968-1 fixed vulnerabilities in Apache HTTP Server. The update introduced a regression in mod_md where the MDStapleOthers setting was ignored which resulted in OCSP being broken for some domains. This update fixes the problem. We apologize for the inconve…
first Mar 9, 2026 -
Medium max 6.9USN-7916-2 1 CVE
python-apt regression
USN-7916-1 fixed a vulnerability in python-apt. The update had a PEP 440 incompatible version. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Julian Andres Klode discovered that python-apt incorrectly handled deb…
first Jan 15, 2026 -
High max 8.8USN-7914-1 10 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Dec 8, 2025 -
Critical max 9.1USN-7954-1 2 CVEs
libtasn1-6 vulnerabilities
It was discovered that Libtasn1 incorrectly handled decoding ASN.1 content. An attacker could possibly use this issue to cause Libtasn1 to crash, resulting in a denial of service. (CVE-2025-13151) It was discovered that Libtasn1 incorrectly handled encoding A…
first Jan 12, 2026 -
Medium max 5.1USN-7912-1 1 CVE
cups vulnerability
Johannes Meixner and Paul Zirnik discovered that CUPS incorrectly handled clients that send messages slowly. A remote attacker could possibly use this issue to cause CUPS to stop responding, resulting in a denial of service. (CVE-2025-58436) In addition, this…
first Dec 4, 2025 -
Critical max 9.8USN-7895-1 1 CVE
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Nov 27, 2025 -
High max 7.7USN-7942-1 5 CVEs
glib2.0 vulnerabilities
It was discovered that GLib incorrectly handled escaping URI strings. An attacker could use this issue to cause GLib to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-13601) It was discovered that GLib incorrectly parse…
first Jan 6, 2026 -
Medium max 5.9USN-7925-1 1 CVE
c-ares vulnerability
It was discovered that c-ares incorrectly handled terminating certain queries after a maximum number of attempts. An attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service.
first Dec 11, 2025 -
High max 8.1USN-7837-1 1 CVE
gst-plugins-good1.0 vulnerability
Shaun Mirani discovered that GStreamer Good Plugins incorrectly handled certain malformed media files. An attacker could possibly use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service, or disclose sensitive information.
first Oct 22, 2025 -
Medium max 6.1USN-7858-1 1 CVE
poppler vulnerability
It was discovered that poppler incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a crash.
first Nov 5, 2025 -
Medium max 4.0USN-7877-1 2 CVEs
libcupsfilters vulnerabilities
It was discovered that libcupsfilters incorrectly handled certain malformed TIFF image files. A remote attacker could use this issue to cause libcupsfilters to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-57812) It wa…
first Nov 20, 2025 -
High max 7.8
open-vm-tools vulnerability
It was discovered that Open VM Tools incorrectly handled permissions with version checking. An attacker could possibly use this issue to escalate privileges inside a virtual machine. This update disables the SDMP get-versions.sh script, so version information…
first Sep 29, 2025 -
UnscoredUSN-7788-1 12 CVEs
libmspack vulnerabilities
Jakub Wilk discovered that libmspack did not correctly handle certain integer operations and bounds checking. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2015-4467, CVE-2015-4468, CVE-2015-4469, CVE-2015-4472) It was dis…
first Oct 1, 2025 -
Critical max 10.0USN-7826-1 2 CVEs
samba vulnerabilities
Andrew Walker discovered that Samba incorrectly initialized memory in the vfs_streams_xattr module. An authenticated attacker could possibly use this issue to obtain sensitive information. (CVE-2025-9640) Igor Morgenstern discovered that Samba incorrectly han…
first Oct 16, 2025 -
Medium max 6.9USN-7751-1 1 CVE
sqlite3 vulnerability
It was discovered that the FTS5 SQLite extension incorrectly calculated certain array lengths. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Sep 15, 2025 -
UnscoredUSN-7758-1 0 CVEs
linux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-hwe-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerability
It was discovered that the AF_UNIX socket garbage collection implementation in Ubuntu Noble's 6.8 kernel did not properly handle out-of-band (OOB) messages, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service (sy…
first Sep 19, 2025 -
High max 7.4USN-7761-1 1 CVE
pam vulnerability
It was discovered that the PAM pam_access module incorrectly parsed certain rules as hostnames. An attacker could possibly use this issue to spoof hostnames and bypass access restrictions.
first Sep 22, 2025 -
Critical max 9.8USN-7817-1 4 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Oct 9, 2025 -
Medium max 5.6USN-7716-1 3 CVEs
gst-plugins-base1.0 vulnerabilities
Shaun Mirani discovered that GStreamer Base Plugins incorrectly handled certain malformed media files. An attacker could use these issues to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Aug 26, 2025 -
High max 8.1USN-7717-1 2 CVEs
gst-plugins-good1.0 vulnerabilities
Shaun Mirani discovered that GStreamer Good Plugins incorrectly handled certain malformed media files. An attacker could use these issues to cause GStreamer Good Plugins to crash, resulting in a denial of service, or possibly disclose sensitive information.
first Aug 26, 2025 -
UnscoredUSN-7713-1 3 CVEs
openldap vulnerabilities
It was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service. (CVE-2020-36229, CVE-2020-36230) Pasi Saarinen discovered that OpenLDAP incorre…
first Aug 24, 2025 -
High max 7.5USN-7752-1 2 CVEs
libyang2 vulnerabilities
It was discovered that libyang incorrectly handled certain memory operations when parsing YANG strings. An attacker could possibly use this issue to cause libyang to crash, resulting in a denial of service.
first Sep 16, 2025 -
UnscoredUSN-7730-1 2 CVEs
kf5-messagelib vulnerabilities
Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that PIM Messagelib could be made to leak the plaintext of S/MIME encrypted emails when retrieving external co…
first Sep 2, 2025 -
High max 7.4USN-7714-1 2 CVEs
open-vm-tools vulnerabilities
Matthias Gerstner discovered that Open VM Tools incorrectly handled file descriptors when dropping privileges. A local attacker could possibly use this issue to hijack /dev/uinput and simulate user inputs. (CVE-2023-34059) Dolev Farhi discovered that Open VM …
first Aug 24, 2025 -
High max 8.1USN-7739-1 3 CVEs
bind9 vulnerabilities
Greg Kuechle discovered that Bind incorrectly handled certain incremental zone updates. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2021-25214) Siva Kakarla discovered that Bind incorrectly ha…
first Sep 8, 2025 -
UnscoredUSN-7698-1 8 CVEs
openldap vulnerabilities
It was discovered that OpenLDAP incorrectly handled Certificate Exact Assertion processing. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service. (CVE-2020-36221) It was discovered that OpenLDAP incorrec…
first Aug 17, 2025 -
Medium max 6.9USN-7637-1 4 CVEs
jpeg-xl vulnerabilities
It was discovered that libjxl did not perform proper bounds checking when parsing Exif tags. An attacker could possibly use this issue to cause libjxl to crash, resulting in a denial of service. (CVE-2023-0645) It was discovered that libjxl did not perform pr…
first Jul 14, 2025 -
High max 8.7USN-7629-1 2 CVEs
protobuf vulnerabilities
It was discovered that Protocol Buffers incorrectly handled memory when receiving malicious input using the Python bindings. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-4565) It was discovered that Protocol Buffers incorr…
first Jul 9, 2025 -
Medium max 5.6USN-7634-1 2 CVEs
glibc vulnerabilities
It was discovered that the GNU C Library incorrectly handled the strcmp implementation optimized for Power10 processors. This could cause applications to crash, compute wrong results, or leak confidential information. (CVE-2025-5702) It was discovered that th…
first Jul 14, 2025 -
Medium max 6.5USN-7624-1 1 CVE
freerdp3 vulnerability
It was discovered that FreeRDP incorrectly handled certain RDP packets. A remote attacker could possibly use this issue to cause FreeRDP to crash, resulting in a denial of service.
first Jul 8, 2025 -
Medium max 5.5USN-7675-1 1 CVE
poppler vulnerability
Kevin Backhouse discovered that poppler incorrectly handled documents with a large number of annotations. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could use this issue to cause poppler to consume …
first Jul 28, 2025