HIGH7.8CVE-2026-23558EPSS 0.01%The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a gr…
MEDIUM6.5CVE-2026-23557EPSS 0.01%Any guest can cause xenstored to crash by issuing a XS_RESET_WATCHES command within a transaction due to an assert() triggering.
HIGH7.5CVE-2026-42009EPSS 0.49%A flaw was found in gnutls.
HIGH7.0CVE-2026-46483EPSS 0.02%Vim is an open source, command line text editor.
—CVE-2025-54518EPSS 0.01%Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructio…
HIGH8.8CVE-2026-6638EPSS 0.02%PostgreSQL REFRESH PUBLICATION allows SQL injection via table name
HIGH8.8CVE-2026-6637EPSS 0.04%PostgreSQL refint allows stack buffer overflow and SQL injection
MEDIUM4.3CVE-2026-6575EPSS 0.03%PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array
HIGH7.5CVE-2026-6479EPSS 0.02%PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion
MEDIUM6.5CVE-2026-6478EPSS 0.08%PostgreSQL discloses MD5-hashed passwords via covert timing channel
HIGH8.8CVE-2026-6477EPSS 0.05%PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
HIGH7.2CVE-2026-6476EPSS 0.03%PostgreSQL pg_createsubscriber allows SQL injection via subscription name
HIGH8.8CVE-2026-6475EPSS 0.05%PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice
MEDIUM4.3CVE-2026-6474EPSS 0.03%PostgreSQL timeofday() can disclose portions of server memory
HIGH8.8CVE-2026-6473EPSS 0.07%PostgreSQL server undersizes allocations, via integer wraparound
MEDIUM5.4CVE-2026-6472EPSS 0.03%PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege
MEDIUM6.5CVE-2026-42946EPSS 0.07%NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
—CVE-2025-35979EPSS 0.02%Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R)…
HIGH7.3CVE-2026-5172EPSS 0.02%A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting…
MEDIUM5.3CVE-2026-4893EPSS 0.03%An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 c…
HIGH8.4CVE-2026-4892EPSS 0.01%A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code wit…