CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-9771

    🚨 CVE-2026-9771 The flash_copy() system call is verified by z_vrfy_flash_copy() in drivers/flash/flash_util.c. On builds with CONFIG_USERSPACE...

  • CVE-2026-12520

    🚨 CVE-2026-12520 The Sierra Wireless HL7800 cellular modem driver (drivers/modem/vendor_standalone/hl7800.c, located at drivers/modem/hl7800.c in...

  • CVE-2026-12631

    🚨 CVE-2026-12631 The Zephyr kernel validates the k_thread_join() and k_thread_abort() system calls (declared __syscall in include/zephyr/kernel.h)...

  • CVE-2026-12632

    🚨 CVE-2026-12632 Zephyr's Precision Time Protocol receive handler ptp_msg_post_recv() in subsys/net/lib/ptp/msg.c takes the 4-bit message type...

  • CVE-2026-12522

    🚨 CVE-2026-12522 The HL7800 cellular modem driver's +CGCONTRDP: response handler on_cmd_atcmdinfo_ipaddr() in...

  • CVE-2026-12633

    🚨 CVE-2026-12633 The IPv6 neighbor-discovery code in subsys/net/ip/ipv6_nbr.c processes the 6LoWPAN Context Option (6CO, RFC 6775) carried inside...

  • CVE-2026-12999

    🚨 CVE-2026-12999 The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc_wifi.c allocates a net_buf...

  • CVE-2026-9728

    🚨 CVE-2026-9728 The userspace syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validated the nested msg->data/msg->size fields...

  • CVE-2026-13212

    🚨 CVE-2026-13212 The Zephyr virtio driver does not validate the descriptor-chain head id that the virtio device writes into the used ring. In...

  • CVE-2026-13213

    🚨 CVE-2026-13213 The Hearing Access Service (HAS) GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally...

  • CVE-2026-13214

    🚨 CVE-2026-13214 The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp_j.c contains a stack buffer overflow in parse_getconfig_msg(). When handling a...

  • CVE-2026-13215

    🚨 CVE-2026-13215 The Zephyr ext2 filesystem driver fails to validate the s_log_block_size field of the on-disk superblock when mounting a...

  • CVE-2026-13216

    🚨 CVE-2026-13216 The virtio PCI driver (drivers/virtio/virtio_pci.c) parses a device's PCI capability list during driver initialization. In...

  • CVE-2026-13217

    🚨 CVE-2026-13217 The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT...

  • CVE-2026-13478

    🚨 CVE-2026-13478 The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2_init_fs() (subsys/fs/ext2/ext2_impl.c) by passing...

  • CVE-2026-13479

    🚨 CVE-2026-13479 The LoRaWAN application-layer clock-synchronization service parses downlinks in clock_sync_package_callback()...

  • CVE-2026-13481

    🚨 CVE-2026-13481 The IEEE 1588 PTP management-message parser in subsys/net/lib/ptp/tlv.c mishandles the PTP_MGMT_TIME management id. In...

  • CVE-2026-14366

    🚨 CVE-2026-14366 The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c frees a network...

Статистика статей

Статьи
53,088
Просмотры
263,731
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху