Статьи Support
🚨 CVE-2026-48379
Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
🚨 CVE-2026-48380
Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must...
🚨 CVE-2026-57185
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the `PJSIP MWI body parser` by...
🚨 CVE-2026-57189
Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` out-of-bounds write during `generation accumulation` using carefully crafted packets, potentially allowing remote code execution...
🚨 CVE-2026-57194
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an out-of-bounds write in `chan_unistim` `DIALPAGE` digit handling can overflow the `phone_number` field...
🚨 CVE-2026-57198
Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The...
🚨 CVE-2026-57201
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a stack buffer overflow in the H.323 `ooTrace()` trace-logging function can occur when unbounded...
🚨 CVE-2026-108301
Tanium addressed an improper access controls vulnerability in Comply.
🚨 CVE-2026-108302
Tanium addressed an improper access controls vulnerability in Comply.
🚨 CVE-2026-108303
Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
🚨 CVE-2026-108304
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
🚨 CVE-2026-108305
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
🚨 CVE-2026-108306
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
🚨 CVE-2026-108307
Tanium addressed a heap-based buffer overflow vulnerability in Index.
🚨 CVE-2026-108308
Tanium addressed a SQL injection vulnerability in Patch.
🚨 CVE-2026-108309
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
🚨 CVE-2026-108310
Tanium addressed a denial of service vulnerability in Tanium Server.
🚨 CVE-2026-108311
Tanium addressed an insufficient logging vulnerability in Tanium Server.
🚨 CVE-2026-108313
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
🚨 CVE-2026-108316
Tanium addressed an information disclosure vulnerability in Tanium Server.
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.