Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 1401-1425 di 5364 risultati

Pagina 57 di 215

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-42767 NULL Pointer Dereference in CRMF EncryptedValue Decryption	18-06-2026	1401
MSRC Security Update	CVE-2026-42766 Possible NULL Dereference in Password-Based CMS Decryption	18-06-2026	1402
MSRC Security Update	CVE-2026-7383 Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion	18-06-2026	1403
MSRC Security Update	CVE-2026-34182 CMS AuthEnvelopedData Processing May Accept Forged Messages	18-06-2026	1404
MSRC Security Update	CVE-2026-45447 Heap Use-After-Free in the PKCS7_verify() Function	18-06-2026	1405
MSRC Security Update	CVE-2026-25681 Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html	18-06-2026	1406
MSRC Security Update	CVE-2026-25680 Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html	18-06-2026	1407
MSRC Security Update	CVE-2026-48854 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc	18-06-2026	1408
MSRC Security Update	CVE-2026-45475 Microsoft Office Remote Code Execution Vulnerability	17-06-2026	1409
MSRC Security Update	CVE-2026-42828 Windows Projected File System Elevation of Privilege Vulnerability	17-06-2026	1410
MSRC Security Update	CVE-2026-47636 Microsoft SharePoint Server Spoofing Vulnerability	17-06-2026	1411
MSRC Security Update	CVE-2026-35433 .NET Elevation of Privilege Vulnerability	17-06-2026	1412
Center of Internet Security	Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution	16-06-2026	1413
Center of Internet Security	A Vulnerability in SimpleHelp Could Allow for Authentication Bypass	16-06-2026	1414
MSRC Security Update	CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability	16-06-2026	1415
MSRC Security Update	CVE-2026-45602 Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability	16-06-2026	1416
MSRC Security Update	CVE-2026-50656 Microsoft Defender Elevation of Privilege Vulnerability	16-06-2026	1417
MSRC Security Update	CVE-2026-42915 Microsoft Windows VMSwitch Denial of Service Vulnerability	16-06-2026	1418
Unit42	Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE	16-06-2026	1419
MSRC Security Update	CVE-2026-34182 CMS AuthEnvelopedData Processing May Accept Forged Messages	16-06-2026	1420
MSRC Security Update	CVE-2026-54411 Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences. The comparison uses strncmp() (or strncasecmp() when PAM_ICASE_ARG is set) preceded by a length-equality check, so the time to reject a candidate depends on the index of the first differing byte and on whether the candidate's length matches the stored password, leaking the password length and individual prefix bytes. The vulnerable path is reached when the administrator configures pam_userdb with crypt=none, with an unrecognized crypt method, or without a crypt= argument, causing the module to store and compare credentials in plaintext.	16-06-2026	1421
MSRC Security Update	Chromium: CVE-2026-11700 Use after free in Tracing	16-06-2026	1422
MSRC Security Update	Chromium: CVE-2026-11699 Use after free in Bluetooth	16-06-2026	1423
MSRC Security Update	Chromium: CVE-2026-11698 Use after free in Bluetooth	16-06-2026	1424
MSRC Security Update	Chromium: CVE-2026-11697 Insufficient validation of untrusted input in UI	16-06-2026	1425