CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-26433

    🚨 CVE-2025-26433 In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack...

  • CVE-2026-0053

    🚨 CVE-2026-0053 In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient...

  • CVE-2026-116769

    🚨 CVE-2026-116769 CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior to...

  • CVE-2026-28588

    🚨 CVE-2026-28588 In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to a logic...

  • CVE-2026-28597

    🚨 CVE-2026-28597 In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input...

  • CVE-2026-28621

    🚨 CVE-2026-28621 In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check. This...

  • CVE-2026-28632

    🚨 CVE-2026-28632 In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This could lead...

  • CVE-2026-28643

    🚨 CVE-2026-28643 In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to local denial...

  • CVE-2026-28645

    🚨 CVE-2026-28645 In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a logic error...

  • CVE-2026-28665

    🚨 CVE-2026-28665 In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input...

  • CVE-2026-97718

    🚨 CVE-2026-97718 CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed...

  • CVE-2026-116766

    🚨 CVE-2026-116766 CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to...

  • CVE-2026-116767

    🚨 CVE-2026-116767 CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can...

  • CVE-2026-115215

    🚨 CVE-2026-115215 In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure DTLS server allocates a session from its fixed...

  • CVE-2026-115403

    🚨 CVE-2026-115403 In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket and IPv6 support, the IPv6 raw send...

  • CVE-2026-116635

    🚨 CVE-2026-116635 Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server...

  • CVE-2026-120091

    🚨 CVE-2026-120091 Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Service, and...

  • CVE-2026-120740

    🚨 CVE-2026-120740 A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds...

Статистика статей

Статьи
53,084
Просмотры
231,620
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху