Information disclosure vulnerabilities
Information disclosure exposes data the attacker should not see: memory contents, configuration files, credentials, or other users’ records. Disclosure bugs are classic chain-starters — leaked keys and session tokens turn an "information only" finding into full account or system takeover.
Classification is assigned by the CSIRTS enrichment pipeline from the advisory text. The list below shows the latest advisories tagged information disclosure, newest first, across national CERTs, vendor PSIRTs and vulnerability databases — exploited marks CVEs in the CISA KEV catalog.
Latest information disclosure advisories
USN-8630-5: Linux kernel (Raspberry Pi) vulnerabilities
USN-8675-1: Perl vulnerabilities
NCSC-2026-0326 [1.00] [M/H] Vulnerabilities patched in Keycloak
Rently Smart Home
PayRange API
Ebyte NE2-D11
[NEW] [high] Contao: Multiple Vulnerabilities
[NEW] [medium] Django: Multiple Vulnerabilities
[NEW] [high] Red Hat Enterprise Linux (Apicurio Registry): Multiple Vulnerabilities
[NEW] [high] PostgreSQL: Multiple vulnerabilities
[NEW] [high] Red Hat Enterprise Linux (mrtg, kbd, urwid): Multiple vulnerabilities
[NEW] [low] Checkmk: Vulnerability Enables Information Disclosure
[NEW] [critical] vm2: Multiple Vulnerabilities
[NEW] [medium] Golang Go: Multiple vulnerabilities allow information disclosure
[NEW] [medium] Zammad: Multiple Vulnerabilities
[UPDATE] [high] NGINX Open Source and NGINX Plus: Multiple vulnerabilities
[UPDATE] [high] NGINX and NGINX Plus: Multiple vulnerabilities
[NEW] [high] NGINX NGINX Plus: Multiple vulnerabilities
[NEW] [high] Mozilla Firefox, Firefox ESR and Thunderbird: Multiple Vulnerabilities
[NEW] [medium] PAM: Vulnerability Enables Information Disclosure
[NEW] [medium] Autodesk 3ds Max: Multiple Vulnerabilities
[UPDATE] [medium] cURL: Multiple vulnerabilities
[NEW] [medium] FasterXML Jackson: Vulnerability allows Information Disclosure
[NEW] [medium] GIMP: Multiple Vulnerabilities
[UPDATE] [high] IBM WebSphere Application Server: Multiple vulnerabilities
[UPDATE] [high] IBM WebSphere Application Server and Application Server Liberty: Multiple vulnerabilities
[UPDATE] [high] Apache HTTP Server: Multiple vulnerabilities
[NEW] [medium] Apache Camel: Multiple Vulnerabilities
[NEW] [high] Snipe-IT: Multiple Vulnerabilities
[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilities
[UPDATE] [high] Fast Datapath for Red Hat Enterprise Linux (ovn): Multiple Vulnerabilities
[UPDATE] [medium] Red Hat Hardened Images RPMs: Multiple vulnerabilities
[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilities
[UPDATE] [medium] Linux Kernel: Multiple Vulnerabilities
[UPDATE] [high] IBM WebSphere Application Server: Multiple vulnerabilities
[NEW] [high] WebKitGTK: Multiple vulnerabilities
[NEW] [high] Apple macOS, iOS and iPadOS: Multiple vulnerabilities
[NEW] [medium] Red Hat Enterprise Linux (yelp, dracut): Multiple vulnerabilities
[NEW] [high] Red Hat Enterprise Linux (nodejs:24): Multiple vulnerabilities
[NEW] [medium] Intel Processor: Multiple Vulnerabilities
[NEW] [medium] Netty: Multiple vulnerabilities
[NEW] [high] Linux Kernel: Multiple vulnerabilities
[NEW] [high] IBM WebSphere Application Server and Application Server Liberty: Multiple vulnerabilities
[NEW] [high] Erlang/OTP: Multiple vulnerabilities
[NEW] [high] libssh2: Multiple vulnerabilities
[NEW] [high] ffmpeg: Multiple vulnerabilities
[NEW] [medium] Linux Kernel: Multiple vulnerabilities
[NEW] [medium] Linux Kernel: Multiple vulnerabilities allow unspecified attack
[NEW] [medium] WebKitGTK: Multiple vulnerabilities
Other vulnerability classes
New information disclosure advisories, in your inbox. The daily briefing covers every advisory in this class the morning after it lands. Subscribe free — one email every morning after 06:00 UTC, one-click unsubscribe. Tracking specific products instead? Watch them from any product page and get alerted only when they ship a new advisory.