Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 5376-5400 di 6079 risultati

Pagina 216 di 244

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-7383 Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion	18-06-2026	5376
MSRC Security Update	CVE-2026-34182 CMS AuthEnvelopedData Processing May Accept Forged Messages	18-06-2026	5377
MSRC Security Update	CVE-2026-45447 Heap Use-After-Free in the PKCS7_verify() Function	18-06-2026	5378
MSRC Security Update	CVE-2026-25681 Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html	18-06-2026	5379
MSRC Security Update	CVE-2026-25680 Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html	18-06-2026	5380
MSRC Security Update	CVE-2026-48854 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc	18-06-2026	5381
Consiglio Federale CH	Avvio del progetto per il sistema di comunicazione mobile sicuro (CMS)	18-06-2026	5382
MSRC Security Update	CVE-2026-35433 .NET Elevation of Privilege Vulnerability	17-06-2026	5383
MSRC Security Update	CVE-2026-47636 Microsoft SharePoint Server Spoofing Vulnerability	17-06-2026	5384
MSRC Security Update	CVE-2026-45475 Microsoft Office Remote Code Execution Vulnerability	17-06-2026	5385
MSRC Security Update	CVE-2026-42828 Windows Projected File System Elevation of Privilege Vulnerability	17-06-2026	5386
Center of Internet Security	Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution	16-06-2026	5387
Center of Internet Security	A Vulnerability in SimpleHelp Could Allow for Authentication Bypass	16-06-2026	5388
MSRC Security Update	CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability	16-06-2026	5389
MSRC Security Update	CVE-2026-45602 Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability	16-06-2026	5390
MSRC Security Update	CVE-2026-50656 Microsoft Defender Elevation of Privilege Vulnerability	16-06-2026	5391
MSRC Security Update	CVE-2026-42915 Microsoft Windows VMSwitch Denial of Service Vulnerability	16-06-2026	5392
MSRC Security Update	CVE-2026-34182 CMS AuthEnvelopedData Processing May Accept Forged Messages	16-06-2026	5393
MSRC Security Update	CVE-2026-54411 Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences. The comparison uses strncmp() (or strncasecmp() when PAM_ICASE_ARG is set) preceded by a length-equality check, so the time to reject a candidate depends on the index of the first differing byte and on whether the candidate's length matches the stored password, leaking the password length and individual prefix bytes. The vulnerable path is reached when the administrator configures pam_userdb with crypt=none, with an unrecognized crypt method, or without a crypt= argument, causing the module to store and compare credentials in plaintext.	16-06-2026	5394
MSRC Security Update	Chromium: CVE-2026-11700 Use after free in Tracing	16-06-2026	5395
MSRC Security Update	Chromium: CVE-2026-11699 Use after free in Bluetooth	16-06-2026	5396
MSRC Security Update	Chromium: CVE-2026-11698 Use after free in Bluetooth	16-06-2026	5397
MSRC Security Update	Chromium: CVE-2026-11697 Insufficient validation of untrusted input in UI	16-06-2026	5398
MSRC Security Update	Chromium: CVE-2026-11696 Uninitialized Use in Video	16-06-2026	5399
MSRC Security Update	Chromium: CVE-2026-11695 Inappropriate implementation in Passwords	16-06-2026	5400