СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
20| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-86385 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper... Dell / PowerProtect Data Domain | Высокий | 8.8 | 0,37 % | 28.10.2026 | ||
| CVE-2026-58086 ktrace(2) privilege incorrectly validated in jails FreeBSD / FreeBSD · freebsd / freebsd | Высокий | 8.1 | 0,38 % | 19.08.2026 | ||
| CVE-2026-32107 xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails neutrinolabs / xrdp | Высокий | 8.8 | 0,16 % | Патч | 17.04.2026 | |
| CVE-2026-101304 Multiple jail filesystem root escapes FreeBSD / FreeBSD | Высокий | 7.1 | 0,15 % | 15.10.2026 | ||
| CVE-2026-101306 Multiple jail filesystem root escapes FreeBSD / FreeBSD | Критический | 9.8 | 0,27 % | 15.10.2026 | ||
| CVE-2026-101305 Multiple jail filesystem root escapes FreeBSD / FreeBSD | Высокий | 8.8 | 0,23 % | 15.10.2026 | ||
| CVE-2026-60085 PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess Sandbox MervinPraison / PraisonAI · praisonai | Высокий | 8.7 | 0,26 % | 15.07.2026 | ||
| CVE-2026-80047 Hugging Face Transformers library writes remote code to disk prior to consent check Hugging Face / Transformers · transformers | Высокий | 7.8 | 0,1 % | 01.09.2026 | ||
| CVE-2026-61897 accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts Canonical / accountsservice | Высокий | 7.8 | 0,14 % | 20.08.2026 | ||
| CVE-2026-49421 unlinkat(2) ignores AT_RESOLVE_BENEATH flag FreeBSD / FreeBSD | Высокий | 7.1 | 0,13 % | 19.08.2026 | ||
| CVE-2026-58089 hwpmc fails to detach PMCs during exec credential transitions FreeBSD / FreeBSD | Высокий | 7.8 | 0,14 % | 26.08.2026 | ||
| CVE-2026-54552 sh _uid does not drop supplementary groups (incomplete privilege drop) amoffat / sh · sh | Высокий | 7.9 | 0,17 % | 18.08.2026 | ||
| CVE-2026-44073 seteuid failure ignored in auth modules Netatalk / Netatalk | Средний | 4.0 | 0,28 % | 21.05.2026 | ||
| CVE-2026-21882 theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution AsfhtgkDavid / theshit | Высокий | 8.4 | 0,2 % | 02.03.2026 | ||
| CVE-2024-25420 An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges vi n/a / n/a · igniterealtime / openfire | Высокий | 7.2 | 1,43 % | 26.03.2024 | ||
| CVE-2024-8382 Internal browser event interfaces were exposed to web content when privileged EventHandler listener Mozilla / Firefox · Mozilla / Firefox ESR | Высокий | 8.8 | 0,6 % | 03.09.2024 | ||
| CVE-2024-38813 Privilege escalation vulnerability n/a / VMware vCenter Server · n/a / VMware Cloud Foundation | Критический | 7.5 | 17,36 % | KEV | 17.09.2024 | |
| CVE-2025-62175 Mastodon streaming API fails to disconnect disabled and suspended users mastodon / mastodon | Средний | 4.3 | 0,24 % | 13.10.2025 | ||
| CVE-2025-27396 A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Siemens / SCALANCE LPE9403 | Высокий | 8.7 | 0,44 % | 11.03.2025 | ||
| CVE-2025-1003 HP Anyware Agent for Linux – Potential Authentication Bypass HP, Inc. / HP Anyware Linux Agent | Высокий | 8.5 | 0,24 % | 04.02.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.