CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-34853

    🚨 CVE-2026-34853 Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability.

  • CVE-2026-6155

    🚨 CVE-2026-6155 A weakness has been identified in Totolink A7100RU 7.4cu.2313. The impacted element is the function setWanCfg of the file...

  • CVE-2026-25208

    🚨 CVE-2026-25208 Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot...

  • CVE-2026-34858

    🚨 CVE-2026-34858 UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

  • CVE-2026-34863

    🚨 CVE-2026-34863 Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.

  • CVE-2026-27672

    🚨 CVE-2026-27672 The Material Master application does not enforce authorization checks for authenticated users when executing reports, resulting...

  • CVE-2026-2404

    🚨 CVE-2026-2404 CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an...

  • CVE-2026-20806

    🚨 CVE-2026-20806 Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose...

  • CVE-2026-26163

    🚨 CVE-2026-26163 Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  • CVE-2026-26165

    🚨 CVE-2026-26165 Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

  • CVE-2026-26174

    🚨 CVE-2026-26174 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service...

  • CVE-2026-26176

    🚨 CVE-2026-26176 Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges...

  • CVE-2026-32086

    🚨 CVE-2026-32086 Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service...

  • CVE-2026-32153

    🚨 CVE-2026-32153 Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

  • CVE-2026-32167

    🚨 CVE-2026-32167 Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker...

  • CVE-2026-32196

    🚨 CVE-2026-32196 Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an...

  • CVE-2026-40728

    🚨 CVE-2026-40728 Missing Authorization vulnerability in BlockArt Magazine Blocks magazine-blocks allows Exploiting Incorrectly Configured Access...

  • CVE-2026-4135

    🚨 CVE-2026-4135 During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation...

Статистика статей

Статьи
53,101
Просмотры
286,495
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху