CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-5266

    🚨 CVE-2026-5266 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo. This vulnerability is...

  • CVE-2026-28971

    🚨 CVE-2026-28971 The issue was addressed with improved UI handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe...

  • CVE-2026-43668

    🚨 CVE-2026-43668 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS...

  • CVE-2026-43897

    🚨 CVE-2026-43897 Link Preview JS extracts web links information. Prior to 4.0.1, the library did not check for IPv6 loopback attacks. There was...

  • CVE-2026-7431

    🚨 CVE-2026-7432 A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM

  • CVE-2026-8051

    🚨 CVE-2026-8051 OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin...

  • CVE-2026-43512

    🚨 CVE-2026-43512 DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache...

  • CVE-2026-8407

    🚨 CVE-2026-8407 Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no additional...

  • CVE-2026-34350

    🚨 CVE-2026-34350 Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network.

  • CVE-2026-34640

    🚨 CVE-2026-34640 Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could...

  • CVE-2026-40359

    🚨 CVE-2026-40359 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  • CVE-2026-40360

    🚨 CVE-2026-40360 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  • CVE-2026-40416

    🚨 CVE-2026-40416 User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker...

  • CVE-2026-40417

    🚨 CVE-2026-40417 Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

  • CVE-2026-41086

    🚨 CVE-2026-41086 Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-42831

    🚨 CVE-2026-42831 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  • CVE-2026-34681

    🚨 CVE-2026-34681 Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in...

  • CVE-2026-34684

    🚨 CVE-2026-34684 Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in...

Статистика статей

Статьи
53,101
Просмотры
286,495
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху