CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-18747

    🚨 CVE-2026-18747 The MCUmgr SMP-over-console transport decodes a base64 frame, reads a 16-bit packet length from it, verifies a CRC and then...

  • CVE-2026-17053

    🚨 CVE-2026-17053 The SMBus driver API exposed smbus_smbalert_remove_cb() and smbus_host_notify_remove_cb() as Zephyr syscalls. Their verifiers in...

  • CVE-2026-19184

    🚨 CVE-2026-19184 The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) validated the caller-supplied sequence->buffer_size, which is expressed...

  • CVE-2026-19185

    🚨 CVE-2026-19185 The system-call verifier for i3c_do_ccc() in drivers/i3c/i3c_handlers.c validated the outer struct i3c_ccc_payload, the broadcast...

  • CVE-2026-15894

    🚨 CVE-2026-15894 The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received...

  • CVE-2026-19186

    🚨 CVE-2026-19186 ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) -...

  • CVE-2026-95184

    🚨 CVE-2026-95184 GnuTLS v3.8.13 does not properly enforce name constraints, as demonstrated by a permitted subtree violation for "EE O=Evil...

  • CVE-2026-95210

    🚨 CVE-2026-95210 GnuTLS v3.8.13 does not reject a critical keyUsage extension when it cannot be processed, such as when extnValue is an ASN.1 NULL...

  • CVE-2026-67693

    🚨 CVE-2026-67693 GnuTLS v3.8.13 does not reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and...

  • CVE-2026-88648

    🚨 CVE-2026-88648 In GnuTLS v3.8.13, an excluded msUPN/SRV otherName is never checked. NOTE: the Supplier does not consider this an actionable...

  • CVE-2026-19569

    🚨 CVE-2026-19569 dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object...

  • CVE-2026-19570

    🚨 CVE-2026-19570 The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a received Basic Audio...

  • CVE-2026-19571

    🚨 CVE-2026-19571 The ITE IT8xxx2 SHI host-command backend (subsys/mgmt/ec_host_cmd/backends/ec_host_cmd_backend_shi_ite.c) copied the 8-byte...

  • CVE-2026-19574

    🚨 CVE-2026-19574 The ARM64 MMU back-end allocated address space identifiers (ASIDs) for memory domains with a bare round-robin counter in...

  • CVE-2026-19575

    🚨 CVE-2026-19575 The user-mode verification handler for the device_deinit() system call, z_vrfy_device_deinit() in kernel/device.c, validated its...

  • CVE-2026-19576

    🚨 CVE-2026-19576 The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register...

  • CVE-2026-19669

    🚨 CVE-2026-19669 The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in...

  • CVE-2026-19735

    🚨 CVE-2026-19735 The RFC 6528 initial-sequence-number implementation in subsys/net/ip/tcp.c derived every TCP ISN from SHA-256(unique_key ||...

Статистика статей

Статьи
53,088
Просмотры
263,731
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху