CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-58926

    🚨 CVE-2026-58926 A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the...

  • CVE-2026-58927

    🚨 CVE-2026-58927 The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr`...

  • CVE-2026-58977

    🚨 CVE-2026-58977 In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead...

  • CVE-2026-116635

    🚨 CVE-2026-116635 Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server...

  • CVE-2026-120831

    🚨 CVE-2026-120831 A flaw was found in libslirp in if_output(). When moving a session from the fast queue to the batch queue, the code unlinked and...

  • CVE-2026-119742

    🚨 CVE-2026-119742 Nagios XI before 2026R2 contains an OS command injection vulnerability in the MIB upload feature where the install_mib()...

  • CVE-2026-120572

    🚨 CVE-2026-120572 Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159.0.1.

  • CVE-2026-100493

    🚨 CVE-2026-100493 An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that...

  • CVE-2026-106991

    🚨 CVE-2026-106991 hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control. Any registered user can delete, lock, or sticky any...

  • CVE-2026-110265

    🚨 CVE-2026-110265 A specially crafted malformed search query could return results from outside a user's organization. Log analysis of runZero's...

  • CVE-2026-118488

    🚨 CVE-2026-118488 In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], when a malicious server keeps sending bytes on an EOL-terminated...

  • CVE-2026-118489

    🚨 CVE-2026-118489 In Eclipse Vert.x versions [4.0.0,4.5.35] or [5.0.0,5.2.2], when one `CachingWebClient` is shared across users — the documented...

  • CVE-2026-104935

    🚨 CVE-2026-118527 Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated...

  • CVE-2026-121386

    🚨 CVE-2026-121386 FreeRDP before 3.32.2 contains a denial of service vulnerability in WinPR's winpr_read_png_from_buffer() and...

  • CVE-2026-121387

    🚨 CVE-2026-121387 FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerability in freerdp_dsp_decode_gsm610 that allows malicious RDP...

  • CVE-2026-121388

    🚨 CVE-2026-121388 FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to...

  • CVE-2026-121389

    🚨 CVE-2026-121389 FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnerability in rdpdr_dump_packet that allows malicious RDP...

  • CVE-2026-121390

    🚨 CVE-2026-121390 FreeRDP 3.0.0 before 3.32.2 built with WITH_AAD=ON contains a reachable assertion because its ARM gateway response parser...

Статистика статей

Статьи
53,092
Просмотры
271,555
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху