Статьи Support
🚨 CVE-2026-106438
An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an...
🚨 CVE-2026-107324
An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected...
🚨 CVE-2026-107325
Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON...
🚨 CVE-2026-83839
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83840
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83841
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-48356
Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of...
🚨 CVE-2026-106117
ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group 3 or Modified Huffman compression can pass attacker-expanded runs to BitWriterUtils.WriteBits without first checking the current row width. T4TiffCompression.WritePixelRun can...
🚨 CVE-2026-106433
Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns...
🚨 CVE-2026-106437
The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the...
🚨 CVE-2026-83796
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83797
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-83798
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
🚨 CVE-2026-83826
Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83827
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83828
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83829
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83830
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83832
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-83833
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.