CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-88914

    🚨 CVE-2026-88914 A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing...

  • CVE-2026-89329

    🚨 CVE-2026-89329 A flaw was found in `multipathd`. A local attacker with access to the `multipathd` UNIX control socket can exploit this...

  • CVE-2026-90994

    🚨 CVE-2026-90994 A flaw was found in sssd, specifically within the PAM (Pluggable Authentication Modules) responder's protocol v1 parser...

  • CVE-2026-90995

    🚨 CVE-2026-90995 A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable...

  • CVE-2026-90996

    🚨 CVE-2026-90996 A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network...

  • CVE-2026-91786

    🚨 CVE-2026-91786 A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the...

  • CVE-2026-92091

    🚨 CVE-2026-92091 A flaw was found in jwcrypto. The JWK.import_key() function validates the key_ops JWK member for duplicate values using an...

  • CVE-2026-89058

    🚨 CVE-2026-89058 A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin...

  • CVE-2026-93653

    🚨 CVE-2026-93653 A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32...

  • CVE-2026-91147

    🚨 CVE-2026-91147 A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS)...

  • CVE-2026-91202

    🚨 CVE-2026-91202 A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing...

  • CVE-2026-91203

    🚨 CVE-2026-91203 A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a symlink race...

  • CVE-2026-91205

    🚨 CVE-2026-91205 A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with...

  • CVE-2026-92382

    🚨 CVE-2026-92382 An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of 1 leaves the...

  • CVE-2026-93433

    🚨 CVE-2026-93433 A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially...

  • CVE-2026-90462

    🚨 CVE-2026-90462 A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `lockout`...

  • CVE-2026-92821

    🚨 CVE-2026-92821 A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP...

  • CVE-2026-88252

    🚨 CVE-2026-88252 A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file...

Статистика статей

Статьи
53,084
Просмотры
240,345
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху