Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 2201-2225 di 5359 risultati

Pagina 89 di 215

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-25833 Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function	31-05-2026	2201
MSRC Security Update	CVE-2026-25834 Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.	31-05-2026	2202
MSRC Security Update	CVE-2026-28388 NULL Pointer Dereference When Processing a Delta CRL	31-05-2026	2203
MSRC Security Update	CVE-2026-34873 An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session.	31-05-2026	2204
MSRC Security Update	CVE-2026-34874 An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing that allows an attacker to write to address 0.	31-05-2026	2205
MSRC Security Update	CVE-2025-15504 lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereference	31-05-2026	2206
MSRC Security Update	CVE-2026-2673 OpenSSL TLS 1.3 server may choose unexpected key agreement group	31-05-2026	2207
MSRC Security Update	CVE-2026-34875 An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys.	31-05-2026	2208
MSRC Security Update	CVE-2026-34871 An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random Number Generator (PRNG).	31-05-2026	2209
MSRC Security Update	CVE-2026-28390 Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo	31-05-2026	2210
MSRC Security Update	CVE-2026-33671 Picomatch has a ReDoS vulnerability via extglob quantifiers	31-05-2026	2211
MSRC Security Update	CVE-2026-25835 Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).	31-05-2026	2212
MSRC Security Update	CVE-2026-33672 Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching	31-05-2026	2213
MSRC Security Update	CVE-2026-34872 An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using finite-field Diffie-Hellman, the other party can force the shared secret into a small set of values (lack of contributory behavior). This is a problem for protocols that depend on contributory behavior (which is not the case for TLS). The attack can be carried by the peer, or depending on the protocol by an active network attacker (person in the middle).	31-05-2026	2214
MSRC Security Update	CVE-2026-31789 Heap Buffer Overflow in Hexadecimal Conversion	31-05-2026	2215
MSRC Security Update	CVE-2026-28389 Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo	31-05-2026	2216
MSRC Security Update	CVE-2017-3736 There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.	31-05-2026	2217
MSRC Security Update	CVE-2025-66442 In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected.	31-05-2026	2218
MSRC Security Update	CVE-2026-34876 An issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls_ccm_finish() in library/ccm.c allows attackers to obtain adjacent CCM context data via invocation of the multipart CCM API with an oversized tag_len parameter. This is caused by missing validation of the tag_len parameter against the size of the internal 16-byte authentication buffer. The issue affects the public multipart CCM API in Mbed TLS 3.x, where mbedtls_ccm_finish() can be invoked directly by applications. In Mbed TLS 4.x versions prior to the fix, the same missing validation exists in the internal implementation; however, the function is not exposed as part of the public API. Exploitation requires application-level invocation of the multipart CCM API.	31-05-2026	2219
MSRC Security Update	CVE-2026-48864 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data	31-05-2026	2220
MSRC Security Update	CVE-2026-9804 Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read	31-05-2026	2221
MSRC Security Update	CVE-2026-7374 Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability	31-05-2026	2222
MSRC Security Update	CVE-2026-42012 Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans	31-05-2026	2223
MSRC Security Update	CVE-2026-5260 Gnutls: gnutls: information disclosure via heap overread in rsa key exchange	31-05-2026	2224
MSRC Security Update	CVE-2026-42015 Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling	31-05-2026	2225