CVE-2026-28351

creationtimestamp| type| source ---|---|--- 2026-02-27 23:22:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuu3dkef724 2026-02-28 07:10:10+00:00| seen| https://gist.github.com/alon710/8c701e4c3b2c6c36535c668dab067b3c 2026-02-28 07:29:32+00:00| seen|...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Thunderbird 140.7.2 CVE-2026-2447: Fixed a heap buffer overflow in libvpx. bsc1258231 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Malicious code in nuget-task-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711e93cd10681dc29d8c8eea7b459d982383f7b78d0c5fdc73e9398aff953a90 The package nuget-task-common was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-1059 Malicious code in nuget-task-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711e93cd10681dc29d8c8eea7b459d982383f7b78d0c5fdc73e9398aff953a90 The package nuget-task-common was found to contain malicious code. Source: ossf-package-analysis...

org.keycloak:keycloak-authz-policy-common (8.0.0), org.keycloak:keycloak-authz-policy-drools (8.0.0) +14 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (8.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 8.0.0 -...

org.keycloak:keycloak-authz-policy-common (3.0.0.final), org.keycloak:keycloak-authz-policy-drools (3.0.0.final) +11 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (3.0.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.0.0.final -...

org.keycloak:keycloak-authz-policy-common (10.0.0), org.keycloak:keycloak-dependencies-server-all (10.0.0) +12 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (10.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 10.0.0 -...

net.micedre.keycloak:keycloak-mail-whitelisting (1.5), org.keycloak:keycloak-authz-policy-common (19.0.0) +26 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (19.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - net.micedre.keycloak:keycloak-mail-whitelisting 1.5 -...

org.keycloak:keycloak-authz-policy-common (3.3.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.3.0.cr1) +13 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (3.3.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.3.0.cr1 -...

org.keycloak:keycloak-authz-policy-common (2.5.1.final), org.keycloak:keycloak-authz-policy-drools (2.5.1.final) +12 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (2.5.1.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.1.final -...

de.adorsys.multibanking:keycloak-custom-secret-provider (>=1.3.0, <=1.20), org.keycloak:keycloak-authz-policy-common (3.1.0.final) +12 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (3.1.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.multibanking:keycloak-custom-secret-provider =1.3.0, =1.20 -...

io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.1.1.final), org.keycloak:keycloak-authz-policy-common (4.1.0.final) +10 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (4.1.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.1.0.final, =4.1.1.final -...

CVE-2026-26207

creationtimestamp| type| source ---|---|--- 2026-02-26 19:38:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfrx3v37zi2v...

Exploit for CVE-2026-2636

CVE-2026-2636: CLFS.sys Unrecoverable State Leading to BSoD !...

CVE-2026-2751

creationtimestamp| type| source ---|---|--- 2026-02-26 14:40:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfrggn5ko524 2026-02-27 14:10:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mftv7w4qea2s 2026-02-28 07:15:26+00:00| seen|...

Report Finds Just 1% of Security Flaws Drive Most Cyberattacks in 2025

New VulnCheck research reveals that while thousands of CVEs are discovered yearly, only 1% drive real-world impact...

CVE-2026-25963

creationtimestamp| type| source ---|---|--- 2026-02-26 05:23:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfqhdcziuw27...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the raplcomputetimewindowcore function in the drivers/powercap/intelraplcommon.c file of the Linux kernel is related to the lack of checking for the returned value. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

CVE-2026-25882 vulnerabilities

Vulnerabilities for packages: gatus-fips, gatus...

@oneuptime/cli (>=10.0.5, <=10.0.6) potentially affected by CVE-2026-27728 via @oneuptime/common (>=10.0.5, <=10.0.6)

@oneuptime/common NPM version =10.0.5, =10.0.5, =10.0.6 Source cves: CVE-2026-27728 Source advisory: GHSA-JMHP-5558-QXH5...