Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 3701-3725 di 5670 risultati

Pagina 149 di 227

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-33671 Picomatch has a ReDoS vulnerability via extglob quantifiers	02-06-2026	3701
MSRC Security Update	CVE-2026-25835 Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).	02-06-2026	3702
MSRC Security Update	CVE-2026-33672 Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching	02-06-2026	3703
MSRC Security Update	CVE-2026-34872 An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using finite-field Diffie-Hellman, the other party can force the shared secret into a small set of values (lack of contributory behavior). This is a problem for protocols that depend on contributory behavior (which is not the case for TLS). The attack can be carried by the peer, or depending on the protocol by an active network attacker (person in the middle).	02-06-2026	3704
MSRC Security Update	CVE-2026-31789 Heap Buffer Overflow in Hexadecimal Conversion	02-06-2026	3705
MSRC Security Update	CVE-2026-28389 Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo	02-06-2026	3706
MSRC Security Update	CVE-2017-3736 There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.	02-06-2026	3707
MSRC Security Update	CVE-2025-66442 In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected.	02-06-2026	3708
MSRC Security Update	CVE-2026-34876 An issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls_ccm_finish() in library/ccm.c allows attackers to obtain adjacent CCM context data via invocation of the multipart CCM API with an oversized tag_len parameter. This is caused by missing validation of the tag_len parameter against the size of the internal 16-byte authentication buffer. The issue affects the public multipart CCM API in Mbed TLS 3.x, where mbedtls_ccm_finish() can be invoked directly by applications. In Mbed TLS 4.x versions prior to the fix, the same missing validation exists in the internal implementation; however, the function is not exposed as part of the public API. Exploitation requires application-level invocation of the multipart CCM API.	02-06-2026	3709
MSRC Security Update	CVE-2026-42015 Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling	02-06-2026	3710
MSRC Security Update	CVE-2026-42250 Off-by-One Leading to Out-of-Bounds Write in bzip2	02-06-2026	3711
MSRC Security Update	CVE-2026-41184 ServiceAccount token disclosure via install-cni container logs	02-06-2026	3712
MSRC Security Update	CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header	02-06-2026	3713
MSRC Security Update	CVE-2026-46157 ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger	02-06-2026	3714
MSRC Security Update	CVE-2026-46235 media: saa7164: add ioremap return checks and cleanups	02-06-2026	3715
MSRC Security Update	CVE-2026-46179 ASoC: SOF: Don't allow pointer operations on unconfigured streams	02-06-2026	3716
MSRC Security Update	CVE-2026-46232 HID: playstation: Clamp num_touch_reports	02-06-2026	3717
MSRC Security Update	CVE-2026-7259 Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()	02-06-2026	3718
MSRC Security Update	CVE-2026-46194 f2fs: fix node_cnt race between extent node destroy and writeback	02-06-2026	3719
MSRC Security Update	CVE-2026-7568 Signed integer overflow in metaphone()	02-06-2026	3720
MSRC Security Update	CVE-2026-46148 spi: microchip-core-qspi: control built-in cs manually	02-06-2026	3721
MSRC Security Update	CVE-2025-14179 SQL injection in pdo_firebird via NUL bytes in quoted strings	02-06-2026	3722
MSRC Security Update	CVE-2026-46184 sound: ua101: fix division by zero at probe	02-06-2026	3723
MSRC Security Update	CVE-2026-7262 NULL pointer dereference in SOAP apache:Map decoder with missing	02-06-2026	3724
MSRC Security Update	CVE-2026-46121 mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock	02-06-2026	3725