Статьи Support
🚨 CVE-2026-70566
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-71347
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-81964
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
🚨 CVE-2026-81969
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-81971
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83508
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85357
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85358
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85359
Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85361
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85362
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85364
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85366
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85367
Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of...
🚨 CVE-2026-116098
A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a manipulation results in deserialization. Remote exploitation of the attack is...
🚨 CVE-2026-116111
A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the component Lua Sandbox. Executing a manipulation can lead to type confusion. The attack may be performed from remote. The exploit has been publicly disclosed and may...
🚨 CVE-2026-116230
A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the component Workshop Scenario Loader. Such manipulation leads to deserialization. The attack may be performed from remote. Upgrading to version...
🚨 CVE-2026-116370
A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a manipulation results in type confusion. The attack may be initiated remotely. The exploit has been...
🚨 CVE-2026-63946
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: fix UAF in iso_recv_frame
iso_recv_frame reads conn->sk under iso_conn_lock but releases the lock
before using sk, with no reference held. A concurrent iso_sock_kill()
can free sk in that...
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.