СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-109964 ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder ImageMagick / ImageMagick · imagemagick / imagemagick | Средний | 6.3 | 0,36 % | Патч | 13.10.2026 | |
| CVE-2026-0966 Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 9 | Средний | 6.5 | 0,6 % | 26.03.2026 | ||
| CVE-2025-4373 Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar · Red Hat / Red Hat Enterprise Linux 10 | Средний | 4.8 | 0,64 % | 06.05.2025 | ||
| CVE-2026-97008 Microsoft Office Excel Remote Code Execution Vulnerability Microsoft / Microsoft 365 Apps for Enterprise · Microsoft / Microsoft Office 365 for Mac | Высокий | 8.8 | 0,86 % | Патч | 13.10.2026 | |
| CVE-2026-5089 YAML::Syck versions before 1.38 for Perl has an out-of-bounds read TODDR / YAML::Syck | Критический | 7.3 | 0,4 % | PoCПатч | 12.05.2026 | |
| CVE-2026-109448 psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters PostgreSQL / psqlODBC | Средний | 5.9 | 0,22 % | 12.10.2026 | ||
| CVE-2026-16179 IBM DataPower Gateway Buffer Underwrite IBM / DataPower Gateway 10.6CD · IBM / DataPower Gateway 10.6.0 | Высокий | 7.5 | 0,32 % | Патч | 08.10.2026 | |
| CVE-2026-40013 An attacker that has valid credentials can submit a Sieve script containing an extreme numeric liter Open-Xchange GmbH / OX Dovecot Pro · Open-Xchange GmbH / OX Dovecot CE | Средний | 4.3 | 0,87 % | 28.08.2026 | ||
| CVE-2026-71969 OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations OP-TEE / optee_os | Критический | 8.4 | 0,18 % | PoCПатч | 10.08.2026 | |
| CVE-2026-73075 Vim: Out-of-bounds Access in Popup Opacity Handling vim / vim | Средний | 4.6 | 0,09 % | 11.08.2026 | ||
| CVE-2026-16439 Eclipse OpenJ9 : Using -Xtrace to trace method arguments can lead to buffer underflow Eclipse Foundation / OpenJ9 | Средний | 5.8 | 0,43 % | 21.07.2026 | ||
| CVE-2026-26199 Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero HDFGroup / hdf5 | Высокий | 5.9 | 0,35 % | PoC | 20.07.2026 | |
| CVE-2026-34253 A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4 n/a / n/a · Red Hat / Red Hat Enterprise Linux 6 | Критический | 8.2 | 0,57 % | PoC | 15.05.2026 | |
| CVE-2026-44631 Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow Apache Software Foundation / Apache HTTP Server | Критический | 9.8 | 0,5 % | 08.06.2026 | ||
| CVE-2024-36343 Improper input validation in the System Management Mode (SMM) communications buffer could allow a pr AMD / AMD EPYC™ 4004 · AMD / AMD EPYC™ 4005 | Средний | 4.6 | 0,19 % | 20.05.2026 | ||
| CVE-2026-26204 Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData wazuh / wazuh | Высокий | 4.4 | 0,17 % | PoC | 29.04.2026 | |
| CVE-2026-41499 Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string() wazuh / wazuh | Высокий | 6.5 | 0,25 % | PoC | 29.04.2026 | |
| CVE-2026-20104 A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco / Cisco IOS XE Software | Средний | 6.1 | 0,16 % | 25.03.2026 | ||
| CVE-2026-1485 Glib: glib: local denial of service via buffer underflow in content type parsing Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 6 | Низкий | 2.8 | 0,16 % | 27.01.2026 | ||
| CVE-2026-28419 Vim has Heap-based Buffer Underflow in Emacs tags parsing vim / vim | Средний | 5.3 | 0,2 % | 28.02.2026 | ||
| CVE-2024-36310 Improper input validation in the SMM communications buffer could allow a privileged attacker to perf AMD / AMD EPYC™ 9004 Series Processors · AMD / AMD EPYC™ 9005 Series Processors | Средний | 4.6 | 0,2 % | 10.02.2026 | ||
| CVE-2025-68114 Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow capstone-engine / capstone | Высокий | 4.8 | 0,2 % | PoC | 18.12.2025 | |
| CVE-2025-61915 OpenPrinting CUPS vulnerable to stack based out-of-bound write OpenPrinting / cups | Высокий | 6.0 | 0,5 % | PoC | 29.11.2025 | |
| CVE-2025-53101 ImageMagick has Stack Buffer Overflow in image.c ImageMagick / ImageMagick | Критический | 7.4 | 0,95 % | PoC | 14.07.2025 | |
| CVE-2025-62786 Wazuh Vulnerable to Heap-based Buffer Out-Of-Bounds WRITE in decode_win_permissions wazuh / wazuh | Средний | 6.3 | 0,73 % | 29.10.2025 | ||
| CVE-2025-61690 KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability. If the product uses a s KEYENCE CORPORATION / KV STUDIO | Высокий | 7.1 | 0,14 % | 02.10.2025 | ||
| CVE-2025-20694 In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to r MediaTek, Inc. / MT2718, MT6639, MT6653, MT6985, MT6989, MT6990, MT6991, MT7925, MT7927, MT8113, MT8115, MT8127, MT8163, MT8168, MT8169, MT8173, MT8183, MT8186, MT8188, MT8195, MT8196, MT8370, MT8390, MT8391, MT8395, MT8512, MT8516, MT8519, MT8676, MT8678, MT8695, MT8696, MT8698, MT8786, MT8792, MT8796, MT8893 | Средний | 6.5 | 0,17 % | 08.07.2025 | ||
| CVE-2025-20695 In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to r MediaTek, Inc. / MT6639, MT6653, MT6985, MT6989, MT6990, MT6991, MT7925, MT7927, MT8196, MT8678, MT8796 | Средний | 6.5 | 0,17 % | 08.07.2025 | ||
| CVE-2025-27439 Zoom Apps - Buffer Underflow Zoom Communications, Inc / Zoom Workplace Apps | Высокий | 8.5 | 0,44 % | 11.03.2025 | ||
| CVE-2025-27440 Zoom Apps - Heap-based Buffer Overflow Zoom Communications, Inc / Zoom Workplace Apps | Высокий | 8.5 | 0,45 % | 11.03.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.