Статьи Support
🚨 CVE-2026-101732
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1...
🚨 CVE-2026-62752
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-62871
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
🚨 CVE-2026-62886
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
🚨 CVE-2026-62898
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
🚨 CVE-2026-70354
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
🚨 CVE-2026-58616
Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
🚨 CVE-2026-62904
Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
🚨 CVE-2026-66323
Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-66324
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
🚨 CVE-2026-66798
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-70341
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
🚨 CVE-2026-100208
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-85933
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85934
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-102479
In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalization process interprets well crafted headers as headers of this list, allowing for instance...
🚨 CVE-2026-77468
Lychee is a free, open-source photo-management tool. Prior to 7.7.0, GET /docs/api exposes the Scramble-generated OpenAPI documentation configured by config/scramble.php to unauthenticated callers after installation, with observed response size and latency suggesting that the...
🚨 CVE-2026-55103
Discourse ActivityPub adds ActivityPub support to Discourse. Prior to commit 1c8518b0f2abdf31cbea3e0b242f74d8994a9ba5, inbound ActivityPub processing does not sufficiently verify that the actor authenticated by the signed request matches the Activity actor and owns the...
🚨 CVE-2026-61702
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_banner() in scheduler/ipp.c uses the attacker-controlled IPP attributes-natural-language value as a directory component beneath DataDir/banners when...
🚨 CVE-2026-91239
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.