October 26, 2026—KB5134133 (OS Builds 26300.9725, 26200.9725 and 26100.9725) Out-of-band

October 26, 2026—KB5134133 OS Builds 26300.9725, 26200.9725 and 26100.9725 Out-of-band Applies To Windows 11 version 26H2, all editions Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions This non-security out-of-band OOB update for Windows 11, versions 24H2, 25H2, and 26H...

October 26, 2026—KB5134137 (OS Build 26100.33674) Out-of-band

October 26, 2026—KB5134137 OS Build 26100.33674 Out-of-band Applies To Windows Server 2025, all editions This non-security out-of-band OOB update for Windows Server 2025 KB5134137 is cumulative. It includes updates from previous releases, along with additional non-security improvements. Who shoul...

October 26, 2026—KB5134123 (OS Build 14393.9615) Out-of-band

October 26, 2026—KB5134123 OS Build 14393.9615 Out-of-band Applies To Windows Server 2016, all editions Windows 10 LTSB 2016 ESU Important Support for Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB ended on October 13, 2026. Support for Windows Server 2016 ends soon. To...

October 26, 2026—KB5134124 (OS Build 17763.9378) Out-of-band

October 26, 2026—KB5134124 OS Build 17763.9378 Out-of-band Applies To Windows Server 2019 Win 10 Ent LTSC 2019 Summary This non-security out-of-band OOB update for Windows 10, version 1809 and Windows Server 2019 KB5134124 is cumulative. It includes updates from previous releases, along with...

CVE-2026-13067

When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list. This can result in unintended role assignments following MONGODB-X509 authentication. Affected scenarios require local...

CVE-2026-13067

When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list. This can result in unintended role assignments following MONGODB-X509 authentication. Affected scenarios require local...

CVE-2026-9758

Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificate to be considered trusted...

xiaoheiFS security vulnerabilities

xiaoheiFS is a self-hosted cloud service financial and operational system developed by Danvei’s individual developers. Versions of xiaoheiFS prior to 0.3.15 contain security vulnerabilities. These vulnerabilities stem from the standard plugin system, which allows administrators to upload ZIP file...

CVE-2026-24910

In Bun before 1.3.5, the default trusted dependencies list aka trust allow list can be spoofed by a non-npm package in the case of a matching name for file, link, git, or github...

EUVD-2014-0769

Malware in sbrugna...

EUVD-2008-1742

Malware in sbrugna...

EUVD-2012-2476

Malware in sbrugna...

EUVD-2014-0768

Malware in sbrugna...

CVE-2012-2490

Cisco IP Communicator 8.6 allows man-in-the-middle attackers to modify the Certificate Trust List via unspecified vectors, aka Bug ID CSCtz01471...

ca-certificates bug fix and enhancement update

An update is available for ca-certificates. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ca-certificates package contains a set of Certificate Authority C...

PT-2023-35692 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including fp cmp mag, crtmgr trust list lookup, an...

clamav:clamav_dbload_CRB_fuzzer: Crash in fp_cmp_mag

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=4974254556053504 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCRBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6200000469...

clamav:clamav_dbload_CRB_fuzzer: Crash in fp_cmp_mag

Detailed Report: https://oss-fuzz.com/testcase?key=4624771484876800 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCRBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61d000012848 Crash State: fpcmpmag crtmgrtrustlistlookup...

ca-certificates bug fix and enhancement update

An update is available for ca-certificates. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ca-certificates package contains a set of Certificate Authority C...

PT-2022-37178 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including fp cmp mag, crtmgr trust list lookup, an...