Статьи Support
🚨 CVE-2026-26153
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-26156
Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.
🚨 CVE-2026-26160
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-26161
Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-26162
Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-26166
Double free in Windows Shell allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-26167
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-26168
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-26170
Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-26172
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-26178
Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally.
🚨 CVE-2026-26181
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-26182
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-26183
Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-27243
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's...
🚨 CVE-2026-27245
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's...
🚨 CVE-2026-27288
Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser...
🚨 CVE-2026-27303
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must visit a...
🚨 CVE-2026-27906
Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally.
🚨 CVE-2026-27908
Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.