CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-93683

    🚨 CVE-2026-93683 A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length...

  • CVE-2026-89098

    🚨 CVE-2026-89098 A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on...

  • CVE-2026-89085

    🚨 CVE-2026-89085 A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an...

  • CVE-2026-89088

    🚨 CVE-2026-89088 A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16...

  • CVE-2026-89096

    🚨 CVE-2026-89096 A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state...

  • CVE-2026-92822

    🚨 CVE-2026-92822 A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through...

  • CVE-2026-92823

    🚨 CVE-2026-92823 A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom...

  • CVE-2026-92824

    🚨 CVE-2026-92824 A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of...

  • CVE-2026-93006

    🚨 CVE-2026-93006 A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not...

  • CVE-2026-93007

    🚨 CVE-2026-93007 A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does not set a receive timeout on...

  • CVE-2026-93011

    🚨 CVE-2026-93011 A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a few bytes...

  • CVE-2026-91920

    🚨 CVE-2026-91920 A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in...

  • CVE-2026-77299

    🚨 CVE-2026-77299 Regexp2 is a feature-rich RegExp engine for Go. Prior to version 2.3.0, when regexp2 compiles and matches a pattern containing a...

  • CVE-2026-95508

    🚨 CVE-2026-95508 A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a...

  • CVE-2026-95619

    🚨 CVE-2026-95619 A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++...

  • CVE-2026-96276

    🚨 CVE-2026-96276 If a malicious SDK container declares an extension point with a crafted `directory` path, and a developer runs `flatpak...

  • CVE-2026-96545

    🚨 CVE-2026-96545 An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that causes...

  • CVE-2026-95519

    🚨 CVE-2026-95519 A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using `rpm...

Статистика статей

Статьи
53,084
Просмотры
240,345
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху