Month: August 2026

Information published. Continue reading CVE-2025-49506 Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack→

Information published. Continue reading CVE-2026-47243 Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs→

Information published. Continue reading CVE-2026-64676 Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory→

Information published. Continue reading CVE-2026-50540 Kata Containers: Config Path Annotation Arbitrary File Loading→

Information published. Continue reading CVE-2026-55995 Double-free in the iSNS attribute decoder in open-iscsi→

Information published. Continue reading CVE-2026-6879 Quadratic Behavior in xml.etree.ElementPath Index Predicates→

Information published. Continue reading CVE-2025-62725 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations→

Information published. Continue reading CVE-2026-68480 x86/bugs: Make Safe-RET robust against interrupt injection→