СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
20| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-0209 Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies ear PureStorage / FlashArray | Средний | 6.9 | 0,38 % | 14.04.2026 | ||
| CVE-2026-108690 mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList gz-yami / mall4j | Высокий | 5.3 | 0,22 % | PoC | 11.10.2026 | |
| CVE-2026-108691 mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList gz-yami / mall4j | Высокий | 5.3 | 0,24 % | PoC | 11.10.2026 | |
| CVE-2025-24210 A logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS Apple / iOS and iPadOS · Apple / iPadOS | Средний | 5.5 | 0,33 % | 01.04.2025 | ||
| CVE-2026-7270 Local privilege escalation via execve() FreeBSD / FreeBSD | Высокий | 7.8 | 0,18 % | 30.04.2026 | ||
| CVE-2024-27886 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, ma Apple / macOS · apple / mac_os | Высокий | 7.5 | 0,48 % | 30.07.2024 | ||
| CVE-2026-25233 PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug pear / pearweb | Высокий | 7.1 | 0,37 % | 03.02.2026 | ||
| CVE-2024-32896 Android Pixel Privilege Escalation Vulnerability Google / Android · google / android | Критический | 8.1 | 2,99 % | KEV | 14.06.2024 | |
| CVE-2024-49736 In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user Google / Android | Средний | 5.5 | 0,08 % | 22.01.2025 | ||
| CVE-2025-27512 Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods coreos / zincati | Низкий | 2.1 | 0,19 % | 17.03.2025 | ||
| CVE-2024-31331 In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Sett Google / Android · google / android | Высокий | 7.8 | 0,12 % | 09.07.2024 | ||
| CVE-2024-20480 A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD Cisco / Cisco IOS XE Software · cisco / ios_xe | Высокий | 8.6 | 0,58 % | 25.09.2024 | ||
| CVE-2024-44093 In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic err Google / Android · google / android | Высокий | 7.4 | 0,08 % | 13.09.2024 | ||
| CVE-2024-34741 In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for messa Google / Android · google / android | Высокий | 7.8 | 0,15 % | 16.08.2024 | ||
| CVE-2024-31326 In multiple locations, there is a possible way in which policy migration code will never be executed Google / Android · google / android | Высокий | 7.8 | 0,13 % | 09.07.2024 | ||
| CVE-2024-34726 In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error Google / Android · imaginationtech / powervr-gpu | Высокий | 7.8 | 0,11 % | 09.07.2024 | ||
| CVE-2024-34723 In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to lau Google / Android · google / android | Средний | 5.3 | 0,12 % | 09.07.2024 | ||
| CVE-2024-34720 In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_Zygot Google / Android · google / android | Высокий | 7.4 | 0,11 % | 09.07.2024 | ||
| CVE-2024-31335 In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to Google / Android · imaginationtech / powervr-gpu | Высокий | 8.4 | 0,12 % | 09.07.2024 | ||
| CVE-2024-20314 A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IO Cisco / Cisco IOS XE Software · cisco / ios_xe | Высокий | 8.6 | 0,8 % | 27.03.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.