Статьи Support
🚨 CVE-2026-62979
jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, `middleware/handle-error.ts` serializes raw `FetchError` objects into HTTP responses. `lib/servers/base.ts` attaches outbound request headers on upstream non-success responses...
🚨 CVE-2026-62989
Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Variants Livewire component in `packages/admin/src/Livewire/Components/Products/Form/Variants.php` exposes `DeleteAction` and `DeleteBulkAction` without server-side authorization. An authenticated staff user with...
🚨 CVE-2026-62990
Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.10.1 and in the 3.0.0 prereleases beta.1 and beta.2, authenticated back-office staff with a content-upload permission can store executable media on the administrator's own origin. In the 2.x...
🚨 CVE-2026-62991
Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.1, the customer detail route `/cpanel/customers/{user}/show` in `packages/admin/src/Livewire/Pages/Customers/Show.php` checks `read_customers` but looks up an arbitrary user ID without applying the `customers` role...
🚨 CVE-2026-58649
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
🚨 CVE-2026-64918
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
🚨 CVE-2026-68880
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
🚨 CVE-2026-62804
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
🚨 CVE-2026-69439
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
🚨 CVE-2026-69499
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-69522
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-69556
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-69576
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-69609
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
🚨 CVE-2026-69304
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
🚨 CVE-2026-69610
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-69767
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-69806
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-71328
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
🚨 CVE-2026-73013
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.