CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-96203

    🚨 CVE-2026-96203 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-91920

    🚨 CVE-2026-91920 A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in...

  • CVE-2026-69446

    🚨 CVE-2026-69446 Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

  • CVE-2026-100493

    🚨 CVE-2026-100493 An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that...

  • CVE-2026-110265

    🚨 CVE-2026-110265 A specially crafted malformed search query could return results from outside a user's organization. Log analysis of runZero's...

  • CVE-2026-118488

    🚨 CVE-2026-118488 In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], when a malicious server keeps sending bytes on an EOL-terminated...

  • CVE-2026-121405

    🚨 CVE-2026-121405 FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to...

  • CVE-2026-121409

    🚨 CVE-2026-121409 FreeRDP before 3.32.2 contains a denial of service vulnerability that allows malicious servers or unauthenticated peers to abort...

  • CVE-2026-121413

    🚨 CVE-2026-121413 Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 contains an authorization bypass in the session upgrade endpoint...

  • CVE-2026-40652

    🚨 CVE-2026-40652 An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially...

  • CVE-2026-111211

    🚨 CVE-2026-111211 An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19...

  • CVE-2026-119215

    🚨 CVE-2026-119215 Authorization Bypass Through User-Controlled Key vulnerability in team-alembic ash_authentication allows a user with an account...

  • CVE-2026-120754

    🚨 CVE-2026-120754 HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c. The...

  • CVE-2026-120756

    🚨 CVE-2026-120756 HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.c. When decoding...

  • CVE-2026-120757

    🚨 CVE-2026-120757 HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the default...

  • CVE-2026-120758

    🚨 CVE-2026-120758 HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.c. H5HL_protect() pins a...

  • CVE-2026-121564

    🚨 CVE-2026-121564 Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats() (whatstk/utils/chat_merge.py), reached from...

  • CVE-2026-121578

    🚨 CVE-2026-121578 Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various fields...

Статистика статей

Статьи
53,092
Просмотры
269,249
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху