8,410 results · Feed
-
High max 7.8USN-8060-2 2 CVEs
linux-intel-iot-realtime, linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - MMC subsystem; (CVE-2022-49267, CVE-2025-21780)
first Feb 24, 2026 -
High max 7.8USN-8060-7 2 CVEs
linux-nvidia vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - MMC subsystem; (CVE-2022-49267, CVE-2025-21780)
first Mar 10, 2026 -
High max 7.8USN-8060-1 2 CVEs
linux, linux-gcp, linux-gke, linux-gkeop, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia-tegra, linux-oracle, linux-xilinx-zynqmp vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - MMC subsystem; (CVE-2022-49267, CVE-2025-21780)
first Feb 24, 2026 -
High max 7.8USN-8060-6 2 CVEs
linux-aws-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - MMC subsystem; (CVE-2022-49267, CVE-2025-21780)
first Mar 4, 2026 -
High max 7.8USN-8060-4 2 CVEs
linux-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - MMC subsystem; (CVE-2022-49267, CVE-2025-21780)
first Feb 25, 2026 -
High max 7.8USN-7329-1 4 CVEs
linux-gcp, linux-gcp-5.15, linux-gke vulnerabilities
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or pos…
first Mar 5, 2025 -
High max 7.8USN-7322-1 2 CVEs
linux, linux-oem-6.11 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - Networking core; (CVE-2024-56672, CVE-2024-56658)
first Mar 5, 2025 -
High max 7.8USN-7328-2 2 CVEs
linux-nvidia vulnerabilities
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or pos…
first Mar 13, 2025 -
High max 7.8USN-7327-1 1 CVE
linux, linux-lowlatency, linux-lowlatency-hwe-5.15 vulnerability
A security issues was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; (CVE-2024-56672)
first Mar 5, 2025 -
High max 7.8USN-7328-3 2 CVEs
linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15 vulnerabilities
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or pos…
first Mar 14, 2025 -
High max 7.8USN-7328-1 2 CVEs
linux-aws, linux-gkeop, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or pos…
first Mar 5, 2025 -
High max 8.8USN-3024-1 8 CVEs
tomcat6, tomcat7 vulnerabilities
It was discovered that Tomcat incorrectly handled pathnames used by web applications in a getResource, getResourceAsStream, or getResourcePaths call. A remote attacker could use this issue to possibly list a parent directory . This issue only affected Ubuntu …
first Jul 5, 2016 -
High max 7.1USN-8679-2 1 CVE
vim vulnerability
USN-8679-1 fixed a vulnerability in Vim. This update provides the corresponding update for Ubuntu 26.04 LTS. Original advisory details: It was discovered that Vim incorrectly handled certain tags files. An attacker could possibly use this issue to execute arb…
first Sep 8, 2026 -
Critical max 9.1USN-8925-1 2 CVEs
libyaml-perl vulnerabilities
Dominique Dumont discovered that YAML-LibYAML did not correctly handle certain reflection operations. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to delete files. This issue only affected U…
-
High max 8.8USN-8923-1 2 CVEs
linux, linux-aws, linux-fips, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - Bluetooth subsystem; (CVE-2022-49111, CVE-2022-49114)
-
Critical max 9.8USN-8922-1 11 CVEs
linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsys…
-
Critical max 9.4USN-8924-1 10 CVEs
linux vulnerabilities
It was discovered that the timer stats implementation in the Linux kernel allowed the discovery of a real PID value while inside a PID namespace. A local attacker could use this to expose sensitive information. (CVE-2017-5967) Wen Xu discovered that the XFS f…
-
Critical max 9.8USN-8920-1 12 CVEs
linux-aws-5.4, linux-aws-fips, linux-azure-fips, linux-ibm, linux-ibm-5.4 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Network fil…
-
Critical max 9.8USN-8919-1 9 CVEs
linux, linux-aws, linux-azure, linux-azure-5.4, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Tracing inf…
-
Critical max 9.8USN-8921-1 8 CVEs
linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-hwe, linux-kvm vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsys…
-
High max 8.8USN-8915-1 8 CVEs
ffmpeg vulnerabilities
Momoko Shiraishi discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS an…
first Oct 12, 2026 -
High max 7.5USN-8913-1 4 CVEs
libx11 vulnerabilities
Adam Bedard discovered that libx11 incorrectly handled certain XKB keyboard map replies. If a user were tricked into connecting to a malicious X server, a remote attacker could possibly use this issue to cause libx11 to crash, resulting in a denial of service…
-
Critical max 9.6USN-8914-1 1 CVE
google-guest-agent, google-osconfig-agent vulnerability
It was discovered that the Go x/net/idna package, vendored in Google Guest Agent and Google OS Config Agent, incorrectly accepted Punycode-encoded labels that decoded to ASCII-only labels when processing internationalized domain names. A remote attacker could…
-
Critical max 9.8USN-8912-1 2 CVEs
libdbi-perl vulnerabilities
Harsh Raj Singhania discovered that the Perl DBI module did not correctly validate certain attributes. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-78030) Harsh Raj Singhania discovered that the Perl DBI module did not correc…
-
Critical max 10.0USN-4813-1 39 CVEs
jackson-databind vulnerabilities
It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could possibly use this issue to obtain sensitive information. (CVE-2018-11307, CVE-2019-12086, CVE-2019-12814) It was discovered that Jackson Databind incorrectly handle…
first Mar 15, 2021 -
High max 7.5
bind9 vulnerabilities
Jonathan Foote discovered that Bind incorrectly handled certain TKEY queries. A remote attacker could use this issue with a specially crafted packet to cause Bind to crash, resulting in a denial of service. (CVE-2015-5477) Pories Ediansyah discovered that Bin…
first Jul 28, 2015 -
Medium max 5.3USN-5239-1 1 CVE
httpcomponents-client vulnerability
It was discovered that HttpClient mishandled certain input. An attacker could use this vulnerability to cause a crash or possibly execute arbitrary code.
first Aug 8, 2022 -
High max 7.5USN-8909-1 1 CVE
libde265 vulnerability
It was discovered that libde265 did not properly validate certain crafted H.265 bitstreams, leading to a NULL pointer dereference. An attacker could possibly use this issue to cause libde265 to crash, resulting in a denial of service.
first Oct 8, 2026 -
High max 7.6USN-8908-1 4 CVEs
bluez vulnerabilities
Michael Bommarito discovered that BlueZ incorrectly handled codec capability storage in the A2DP profile. An attacker could possibly use this issue to cause a stack buffer overflow, resulting in a denial of service or arbitrary code execution. This issue only…
first Oct 8, 2026 -
Medium max 6.9USN-8910-1 6 CVEs
libxml2 vulnerabilities
Yirou Yang discovered that libxml2 incorrectly handled certain XML catalogs. If a user or automated system was tricked into processing a specially crafted XML catalog, an attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial …
first Oct 8, 2026 -
Medium max 6.5USN-8907-1 1 CVE
libgit2 vulnerability
It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a CA-trusted certificate could possibly use this issue to perform a machine-in-the-middle attack, leading to the ex…
first Oct 8, 2026 -
Low max 2.9USN-8902-1 1 CVE
libarchive vulnerability
It was discovered that libarchive had a signed integer overflow in its ZIP writer when handling encrypted entries with sizes near the maximum value. An attacker could possibly use this issue to cause libarchive to crash or execute arbitrary code.
first Oct 8, 2026 -
UnscoredUSN-8899-1 0 CVEs
libpng1.6 vulnerability
Ze Sheng discovered that libpng incorrectly handled certain compressed data chunks in PNG files. An attacker could possibly use this issue to cause a denial of service.
first Oct 7, 2026 -
Critical max 9.8USN-8898-1 3 CVEs
apache2 vulnerabilities
It was discovered that Apache HTTP Server's mod_rewrite module incorrectly handled memory when performing certain variable lookups. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-56154) Lucian…
first Oct 7, 2026 -
High max 8.2USN-8897-1 2 CVEs
lxml vulnerabilities
Guillem Lefait discovered that lxml incorrectly handled certain URL attributes. A remote attacker could possibly use this issue to bypass URL sanitization, leading to a cross-site scripting attack. (CVE-2026-49825) Qiu Sihao discovered that lxml incorrectly h…
first Oct 7, 2026 -
High max 8.8USN-8896-1 7 CVEs
gst-plugins-ugly1.0 vulnerabilities
Michael Randrianantenaina discovered that GStreamer's Ugly Plugins incorrectly handled certain malformed RealMedia files. If a user were tricked into opening a crafted media file, an attacker could possibly use this issue to execute arbitrary code. This issue…
first Oct 7, 2026 -
Critical max 9.3USN-8901-1 30 CVEs
erlang vulnerabilities
Wander Nauta discovered that Erlang incorrectly handled absolute paths when extracting zip archives. An attacker could possibly use this issue to write arbitrary files outside of the intended directory. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 …
-
Low max 3.9USN-5224-1 2 CVEs
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to cause Ghostscript to crash, resulting in a…
first Jan 12, 2022 -
High max 8.8USN-6158-1 1 CVE
node-fetch vulnerability
It was discovered that Node Fetch incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information.
first Jun 13, 2023 -
Critical max 9.8USN-5888-1 6 CVEs
python3.9 vulnerabilities
It was discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2015-20107) Hamza Avva…
first Feb 27, 2023