Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 1476-1500 di 3799 risultati

Pagina 60 di 152

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2025-71162 dmaengine: tegra-adma: Fix use-after-free	28-02-2026	1476
MSRC Security Update	CVE-2025-71161 dm-verity: disable recursive forward error correction	28-02-2026	1477
MSRC Security Update	CVE-2025-71160 netfilter: nf_tables: avoid chain re-validation if possible	28-02-2026	1478
MSRC Security Update	CVE-2025-71154 net: usb: rtl8150: fix memory leak on usb_submit_urb() failure	28-02-2026	1479
MSRC Security Update	CVE-2025-71152 net: dsa: properly keep track of conduit reference	28-02-2026	1480
MSRC Security Update	CVE-2025-71150 ksmbd: Fix refcount leak when invalid session is found on session lookup	28-02-2026	1481
MSRC Security Update	CVE-2025-71147 KEYS: trusted: Fix a memory leak in tpm2_load_cmd	28-02-2026	1482
MSRC Security Update	CVE-2025-71089 iommu: disable SVA when CONFIG_X86 is set	28-02-2026	1483
MSRC Security Update	CVE-2025-68817 ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency	28-02-2026	1484
MSRC Security Update	CVE-2025-68365 fs/ntfs3: Initialize allocated memory before use	28-02-2026	1485
MSRC Security Update	CVE-2025-68340 team: Move team device type change at the end of team_port_add	28-02-2026	1486
MSRC Security Update	CVE-2025-68211 ksm: use range-walk function to jump over holes in scan_get_next_rmap_item	28-02-2026	1487
MSRC Security Update	CVE-2025-40251 devlink: rate: Unset parent pointer in devl_rate_nodes_destroy	28-02-2026	1488
MSRC Security Update	CVE-2025-40149 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().	28-02-2026	1489
MSRC Security Update	CVE-2025-40040 mm/ksm: fix flag-dropping behavior in ksm_madvise	28-02-2026	1490
MSRC Security Update	CVE-2025-40039 ksmbd: Fix race condition in RPC handle list access	28-02-2026	1491
MSRC Security Update	CVE-2023-54207 HID: uclogic: Correct devm device reference for hidinput input_dev name	28-02-2026	1492
MSRC Security Update	CVE-2026-21523 GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability	27-02-2026	1493
MSRC Security Update	CVE-2026-21518 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability	27-02-2026	1494
MSRC Security Update	CVE-2026-21620 TFTP Path Traversal	27-02-2026	1495
MSRC Security Update	CVE-2026-27571 nats-server websockets are vulnerable to pre-auth memory DoS	27-02-2026	1496
MSRC Security Update	CVE-2025-69873 ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., "^(a\|a)*$") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation.	27-02-2026	1497
MSRC Security Update	CVE-2026-27969 Vitess users with backup storage access can write to arbitrary file paths on restore	27-02-2026	1498
MSRC Security Update	CVE-2026-27965 Vitess users with backup storage access can gain unauthorized access to production deployment environments	27-02-2026	1499
MSRC Security Update	Chromium: CVE-2026-3063 Inappropriate implementation in DevTools	27-02-2026	1500