CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-91899

    🚨 CVE-2026-91899 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature...

  • CVE-2026-105475

    🚨 CVE-2026-105475 Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

  • CVE-2026-105476

    🚨 CVE-2026-105476 Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and...

  • CVE-2026-116766

    🚨 CVE-2026-116766 CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to...

  • CVE-2026-116767

    🚨 CVE-2026-116767 CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can...

  • CVE-2026-116768

    🚨 CVE-2026-116768 CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers...

  • CVE-2026-116958

    🚨 CVE-2026-116958 A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in...

  • CVE-2026-120503

    🚨 CVE-2026-120503 A vulnerability was detected in EchoHS GeekezBrowser up to 1.7.2/1.8.0. This affects an unknown part of the file /api/status of...

  • CVE-2026-29508

    🚨 CVE-2026-29508 ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows...

  • CVE-2026-49903

    🚨 CVE-2026-49903 The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and...

  • CVE-2026-49906

    🚨 CVE-2026-49906 An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an activity...

  • CVE-2026-58873

    🚨 CVE-2026-58873 In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check...

  • CVE-2026-58915

    🚨 CVE-2026-58915 A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive...

  • CVE-2026-58924

    🚨 CVE-2026-58924 The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a...

  • CVE-2026-58925

    🚨 CVE-2026-58925 The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service...

  • CVE-2026-58926

    🚨 CVE-2026-58926 A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the...

  • CVE-2026-58927

    🚨 CVE-2026-58927 The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr`...

  • CVE-2026-58930

    🚨 CVE-2026-58930 An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving...

Статистика статей

Статьи
53,092
Просмотры
273,852
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху