CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120263

    🚨 CVE-2026-120263 When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the default) and registration is enabled, the link-account sign-up...

  • CVE-2026-28621

    🚨 CVE-2026-28621 In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check. This...

  • CVE-2026-58882

    🚨 CVE-2026-58882 In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow. This could lead to a...

  • CVE-2026-58938

    🚨 CVE-2026-58938 In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation. This could lead to...

  • CVE-2026-58945

    🚨 CVE-2026-58945 In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired...

  • CVE-2026-58951

    🚨 CVE-2026-58951 In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local...

  • CVE-2026-58953

    🚨 CVE-2026-58953 In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote...

  • CVE-2026-58963

    🚨 CVE-2026-58963 In multiple locations, there is a possible denial of service due to improper input validation. This could lead to remote denial...

  • CVE-2026-58924

    🚨 CVE-2026-58924 The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a...

  • CVE-2026-58925

    🚨 CVE-2026-58925 The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service...

  • CVE-2026-58927

    🚨 CVE-2026-58927 The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr`...

  • CVE-2026-58930

    🚨 CVE-2026-58930 An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving...

  • CVE-2026-121116

    🚨 CVE-2026-121116 Missing authorization in WebView in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had...

  • CVE-2026-121170

    🚨 CVE-2026-121170 Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin...

  • CVE-2026-121171

    🚨 CVE-2026-121171 Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to...

  • CVE-2026-19688

    🚨 CVE-2026-19688 A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The Admin API fails to verify the...

  • CVE-2026-97367

    🚨 CVE-2026-97367 A flaw was found in the Keycloak Account REST API where it incorrectly handles session identification. A malicious client owner...

  • CVE-2026-119499

    🚨 CVE-2026-119499 Insertion of Sensitive Information Into Sent Data vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion...

Статистика статей

Статьи
53,084
Просмотры
237,111
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху