Статьи Support
🚨 CVE-2026-109940
FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt PKCS#11 provider. It hex-encodes a key's CKA_ID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a...
🚨 CVE-2026-109941
FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown...
🚨 CVE-2026-69765
Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-69766
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-69783
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-70008
Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-70010
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-70011
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
🚨 CVE-2026-70112
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
🚨 CVE-2026-70113
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85909
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
🚨 CVE-2026-85910
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.
🚨 CVE-2026-85911
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85912
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2025-66735
youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permission checks, which may allow non-root users to directly access root roles.
🚨 CVE-2025-45493
Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function.
🚨 CVE-2025-50526
Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function.
🚨 CVE-2025-67108
eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.
🚨 CVE-2025-29229
linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus.
🚨 CVE-2025-65713
Home Assistant Core before v2025.8.0 is vulnerable to Directory Traversal. The Downloader integration does not fully validate file paths during concatenation, leaving a path traversal vulnerability.
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.