СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-106464 Out-of-bounds read via an empty signature BIT STRING in NetX Secure X.509 parsing Eclipse Foundation / Eclipse ThreadX NetX Duo | Высокий | 8.7 | 0,17 % | 14.10.2026 | ||
| CVE-2026-102714 ICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option walkers past the packet or into a permanent loop Eclipse Foundation / Eclipse ThreadX NetX Duo | Высокий | 7.1 | 0,15 % | 29.09.2026 | ||
| CVE-2026-75083 Integer underflow of the radio-reported frame length causes an out-of-bounds write in the NXP KW41Z IEEE 802.15.4 driver zephyrproject / zephyr | Средний | 5.9 | 0,23 % | Патч | 14.10.2026 | |
| CVE-2026-19186 Integer underflow in IEEE 802.15.4 frame decryption leads to out-of-bounds read and write zephyrproject / zephyr | Высокий | 8.1 | 0,21 % | Патч | 07.10.2026 | |
| CVE-2026-18747 Integer underflow of net_buf length in the MCUmgr serial (SMP over console) transport leads to out-of-bounds read zephyrproject / zephyr | Средний | 6.8 | 0,12 % | Патч | 29.09.2026 | |
| CVE-2026-121727 Kore before 4.3.0 Integer Underflow Memory Exhaustion via http_header_recv() jorisvink / kore | Высокий | 8.7 | — | Патч | 04.11.2026 | |
| CVE-2026-112625 An integer underflow was addressed with improved input validation. This issue is fixed in iOS 26... Apple / iOS and iPadOS · Apple / macOS | Высокий | 7.5 | 0,22 % | 26.10.2026 | ||
| CVE-2024-47606 GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes gstreamer / gstreamer · debian / debian_linux | Высокий | 8.6 | 1,73 % | Патч | 11.12.2024 | |
| CVE-2026-61497 TinyUSB < 0.20.1 Integer Underflow via HID Report Descriptor Parser hathach / TinyUSB | Средний | 5.2 | — | Патч | 03.11.2026 | |
| CVE-2025-26269 DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial DragonflyDB / Dragonfly | Средний | 3.3 | 0,29 % | PoC | 17.04.2025 | |
| CVE-2026-67298 FreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow FreeRDP / FreeRDP · freerdp / freerdp | Критический | 8.7 | 0,67 % | PoCПатч | 01.08.2026 | |
| CVE-2026-86566 Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 9 | Средний | 6.5 | 0,17 % | 14.10.2026 | ||
| CVE-2026-20576 In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to... MediaTek, Inc. / MediaTek chipset | Средний | 6.7 | 0,11 % | 02.11.2026 | ||
| CVE-2026-20572 In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to... MediaTek, Inc. / MediaTek chipset | Средний | 6.7 | 0,12 % | 02.11.2026 | ||
| CVE-2026-120060 psqlODBC does not validate server-supplied counts and lengths PostgreSQL / psqlODBC | Средний | 5.9 | 0,22 % | 02.11.2026 | ||
| CVE-2026-120058 psqlODBC row cache overflow when a later FETCH changes the column count PostgreSQL / psqlODBC | Высокий | 7.5 | 0,26 % | 02.11.2026 | ||
| CVE-2026-109246 FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDU FreeRDP / FreeRDP · freerdp / freerdp | Критический | 7.1 | 0,4 % | PoC | 12.10.2026 | |
| CVE-2026-82947 Multiple Out-of-Bounds Reads in Frame Processing RT-Labs AB / SOEM | Высокий | 7.1 | 0,17 % | 26.10.2026 | ||
| CVE-2026-70388 Memory Corruption via Integer Underflow in Message Length Validation RT-Labs AB / SOEM | Высокий | 8.3 | 0,21 % | 26.10.2026 | ||
| CVE-2026-59090 Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow · Red Hat / Red Hat Enterprise Linux 9 | Критический | 9.9 | 0,65 % | PoC | 10.08.2026 | |
| CVE-2026-55039 Microsoft Excel Remote Code Execution Vulnerability Microsoft / Microsoft 365 Apps for Enterprise · Microsoft / Microsoft Excel 2016 | Высокий | 7.8 | 0,47 % | Патч | 14.07.2026 | |
| CVE-2026-50498 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,36 % | Патч | 14.07.2026 | |
| CVE-2026-50388 Windows NTFS Remote Code Execution Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,47 % | Патч | 14.07.2026 | |
| CVE-2026-50300 Windows DWM Core Library Information Disclosure Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Средний | 5.5 | 0,4 % | Патч | 14.07.2026 | |
| CVE-2026-50308 Windows NTFS Remote Code Execution Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.8 | 0,47 % | Патч | 14.07.2026 | |
| CVE-2026-49790 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.3 | 0,36 % | Патч | 14.07.2026 | |
| CVE-2026-49181 Windows DHCP Client Elevation of Privilege Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 7.5 | 1,17 % | Патч | 14.07.2026 | |
| CVE-2026-55011 Microsoft Defender Remote Code Execution Vulnerability Microsoft / Microsoft Malware Protection Engine | Высокий | 7.8 | 0,47 % | Патч | 14.07.2026 | |
| CVE-2026-54982 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Microsoft / Windows 10 Version 1607 · Microsoft / Windows 10 Version 1809 | Высокий | 8.8 | 0,54 % | Патч | 14.07.2026 | |
| CVE-2025-4948 Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup · Red Hat / Red Hat Enterprise Linux 10 | Критический | 7.5 | 0,81 % | PoC | 19.05.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.