Уязвимость компонента Fonts браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю вызвать отказ в обслуживании

Уязвимость компонента Fonts браузеров Google Chrome и Microsoft Edge связана с чтением за пределами допустимого диапазона в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

The vulnerability in the net/bpf/test_run.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/bpf/testrun.c module of the Linux operating system is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-45988

A flaw was found in the Linux kernel's rxrpc subsystem. When an rxrpc RESPONSE packet experiences a temporary processing failure, it may enter a partially decrypted state and be re-queued for another attempt. This incorrect handling of partially decrypted packets could lead to communication...

Improperly Implemented Security Check for Standard

Overview Affected versions of this package are vulnerable to Improperly Implemented Security Check for Standard due to improper enforcement of security rules during concurrent execution of Security Mode Command and N2 handover procedures. An attacker can cause handover failures and disrupt networ...

CVE-2025-71304

CVE-2025-71304 — Linux kernel Smack DOI handling : The issue arises when writing to /smack/doi with a value previously used, which can disable networking for non-ambient labels. This can lead to privilege escalation, DoS, or information leaks. Debian/RootOS OSV notes indicate patches exist (e.g.,...

GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

CrowdStrike, in partnership with Google and the Shadowserver Foundation, has announced the simultaneous disruption of all command-and-control C2 channels associated with GlassWorm, a persistent software chain campaign targeting software developers through malicious packages and extensions. "Since...

Incorrect Behavior Order: Validate Before Canonicalize

Overview @fedify/fedify is an An ActivityPub server framework Affected versions of this package are vulnerable to Incorrect Behavior Order: Validate Before Canonicalize through manipulation of JSON-LD document structure using keywords such as @graph, @included, and @reverse. An attacker can alter...

EUVD-2025-209936

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...

Improper Resource Shutdown or Release

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the OpenAI-compatible Serving Path component. An attacker can cause the service to become unavailable by...

CVE-2026-48134

When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserCheck incident information. This could lead to...

EUVD-2026-31821

When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserCheck incident information. This could lead to...

CVE-2026-48131

The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service temporary disruption of VPN-related functionality...

CVE-2025-11482

The vulnerability CVE-2025-11482 concerns the OPC-UA Server component used in PPT30. An unauthenticated, network-based attacker can exploit an Allocation of Resources Without Limits or Throttling vulnerability on affected systems running operating system versions before 1.8.0, potentially renderi...

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via the loadFromSharedState function. An attacker can cause unauthorized disclosure of information, modification of data, or disruption of service by supplying specially crafted input to th...

CVE-2026-48692

FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism. The server is initialized with grpc::InsecureServerCredentials src/fastnetmon.cpp line 477 and a source code comment explicitly acknowledges 'Listen on the given address without an...

Linux Distros Unpatched Vulnerability : CVE-2026-41470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens...

The vulnerability of the formWizSurvey function in the /goform/formWizSurvey microprogramming system for wireless signal amplifiers from Edimax EW-7438RPn allows a intruder to execute arbitrary code or trigger a service failure.

The vulnerability of the formWizSurvey function in the /goform/formWizSurvey microprogramming system for wireless signal amplifiers from Edimax EW-7438RPn is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute...

The vulnerability of the crypto-x509 component in the Go programming language, which allows a perpetrator to trigger a service failure

The vulnerability of the Go programming language’s crypto-x509 component is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to reading data beyond the buffer in memory, which allows an attacker to cause a service failure.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird involve reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of the webbrowser.open() function in the CPython interpreter allows a hacker to trigger a service failure.

The vulnerability of the webbrowser.open function in the CPython interpreter is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...