Статьи Support
🚨 CVE-2026-102556
A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API...
🚨 CVE-2026-102557
A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the...
🚨 CVE-2026-102558
A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data.
🚨 CVE-2026-102559
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow.
🚨 CVE-2026-97229
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially...
🚨 CVE-2026-83513
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83514
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83516
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
🚨 CVE-2026-83517
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-83519
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-83571
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
🚨 CVE-2026-83578
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-83580
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83583
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83586
Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83587
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83683
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
🚨 CVE-2026-83685
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
🚨 CVE-2026-83687
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83689
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.