C/CONATION SECURITY
EnglishCMS

UNIFIED INTELLIGENCE CORPUS

Одно событие. Все материалы.

Уязвимости, патчи, атаки, утечки, исследования и репринты — связанные в единое досье, без потери первоисточника.

10событий
Сбросить
detection
GLOBALПодтверждено1 документов

ZDI-26-906: X.Org Server libX11 XkbGetMap Reply Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of X.Org Server. User interaction is required to exploit this vulnerability in that the target must connect to a malicious X11 server. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-88806.

advisory:ZDI-26-906cve:CVE-2026-88806
Покрытие: 1global-zdi-rss
detection
GLOBALПодтверждено1 документов

ZDI-26-905: X.Org Server libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of X.Org Server. User interaction is required to exploit this vulnerability in that the target must connect to a malicious X11 server. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-88807.

advisory:ZDI-26-905cve:CVE-2026-88807
Покрытие: 1global-zdi-rss
detection
GLOBALПодтверждено1 документов

ZDI-26-904: NVIDIA Megatron-LM Checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron-LM. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-65110.

advisory:ZDI-26-904cve:CVE-2026-65110
Покрытие: 1global-zdi-rss
detection
GLOBALПодтверждено1 документов

ZDI-26-903: X.Org Server Font Alias Resolution Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50256.

advisory:ZDI-26-903cve:CVE-2026-50256
Покрытие: 1global-zdi-rss
detection
GLOBALПодтверждено1 документов

ZDI-26-902: X.Org Server XkbResizeKeySyms Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50258.

advisory:ZDI-26-902cve:CVE-2026-50258
Покрытие: 1global-zdi-rss
detection
GLOBALПодтверждено1 документов

ZDI-26-901: X.Org Server ProcDRI2GetBuffers Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50264.

advisory:ZDI-26-901cve:CVE-2026-50264
Покрытие: 1global-zdi-rss
detection
GLOBALПодтверждено1 документов

ZDI-26-900: уязвимость Wireshark SMB Object Export Overflow Remote Code Execution

Эта уязвимость позволяет удаленным злоумышленникам выполнять произвольный код на затронутых установках Wireshark. Для того чтобы воспользоваться этой уязвимостью, требуется взаимодействие с пользователем.

advisory:ZDI-26-900
Покрытие: 1global-zdi-rss
detection
GLOBALПодтверждено1 документов

ZDI-26-899: Wireshark LBMC Fragment Reassembly Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wireshark. Authentication is not required to exploit this vulnerability. However, only instances with LBMC fragment reassembly enabled are vulnerable. The ZDI has assigned a CVSS rating of 7.5.

advisory:ZDI-26-899
Покрытие: 1global-zdi-rss
detection
GLOBALПодтверждено1 документов

ZDI-26-898: Wireshark LoRaWAN Decryption Numeric Truncation Error Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wireshark. Authentication is not required to exploit this vulnerability. However, only instances with LoRaWAN decryption enabled are vulnerable. The ZDI has assigned a CVSS rating of 7.1.

advisory:ZDI-26-898
Покрытие: 1global-zdi-rss
detection
GLOBALПодтверждено1 документов

ZDI-26-897: (Pwn2Own) домашний помощник зеленый aiohttp_client Server-Side Request Forgery Vulnerability

Эта уязвимость позволяет соседним с сетью злоумышленникам инициировать произвольные запросы со стороны сервера на затронутых установках Home Assistant Green. Автентификация не требуется для использования этой уязвимости. ZDI присвоил CVSS рейтинг 5.4.

advisory:ZDI-26-897cve:CVE-2026-91131
Покрытие: 1global-zdi-rss