CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-56162

    🚨 CVE-2026-56162 Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-59115

    🚨 CVE-2026-59115 '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-59118

    🚨 CVE-2026-59118 Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-62830

    🚨 CVE-2026-62830 Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-62836

    🚨 CVE-2026-62836 Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker...

  • CVE-2026-62873

    🚨 CVE-2026-62873 Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate...

  • CVE-2026-62896

    🚨 CVE-2026-62896 Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-62918

    🚨 CVE-2026-62918 Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a...

  • CVE-2026-63508

    🚨 CVE-2026-63508 Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate...

  • CVE-2026-65667

    🚨 CVE-2026-65667 Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-65668

    🚨 CVE-2026-65668 Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-68823

    🚨 CVE-2026-68823 Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

  • CVE-2026-70332

    🚨 CVE-2026-70332 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an...

  • CVE-2026-49746

    🚨 CVE-2026-49746 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access...

  • CVE-2026-49005

    🚨 CVE-2026-49005 The root password hash of the device can be obtained through unencrypted information in the firmware.

  • CVE-2026-49007

    🚨 CVE-2026-49007 By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the...

  • CVE-2026-49008

    🚨 CVE-2026-49008 By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity...

  • CVE-2026-66491

    🚨 CVE-2026-66491 Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource...

Статистика статей

Статьи
53,088
Просмотры
263,731
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху