Ransomfeed

Alerts & Advisory dai CERTs

Gli ultimi avvisi di sicurezza dai Computer Emergency Response Teams governativi e non-governativi rilevanti del mondo cybersec

Mostrando 2151-2175 di 5670 risultati

Pagina 87 di 227

Avvisi di Sicurezza

CERT	Alert	Data	#
MSRC Security Update	CVE-2026-10512 X25519 x86_64 assembly final reduction leaves non-canonical field element	01-07-2026	2151
MSRC Security Update	CVE-2026-10592 Wildcard DNS SAN bypasses CA name-constraint checks	01-07-2026	2152
MSRC Security Update	CVE-2026-6091 Partial-chain verification accepts untrusted intermediate as trust anchor	01-07-2026	2153
MSRC Security Update	CVE-2026-6325 Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list	01-07-2026	2154
MSRC Security Update	CVE-2026-55958 Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage	01-07-2026	2155
MSRC Security Update	CVE-2026-6731 X.509 name constraint bypass via Subject CN treated as a DNS name	01-07-2026	2156
MSRC Security Update	CVE-2026-7511 PKCS7_verify signer confusion allows forged signatures to be accepted	01-07-2026	2157
MSRC Security Update	CVE-2026-6330 ML-KEM ARM64 NEON ciphertext comparison only compares half of the input	01-07-2026	2158
MSRC Security Update	CVE-2026-6331 HMAC zero-length tag forgery in EVP_DigestVerifyFinal	01-07-2026	2159
MSRC Security Update	CVE-2026-6094 Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData	01-07-2026	2160
MSRC Security Update	CVE-2026-6678 Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info	01-07-2026	2161
MSRC Security Update	CVE-2026-55961 wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer	01-07-2026	2162
MSRC Security Update	CVE-2026-6329 PKCS#12 MAC verification uses attacker-controlled comparison length	01-07-2026	2163
MSRC Security Update	CVE-2026-11999 X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()	01-07-2026	2164
MSRC Security Update	CVE-2026-55962 TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify	01-07-2026	2165
MSRC Security Update	CVE-2026-55967 AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse	01-07-2026	2166
MSRC Security Update	CVE-2026-11703 Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption	01-07-2026	2167
MSRC Security Update	CVE-2026-55964 Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)	01-07-2026	2168
MSRC Security Update	CVE-2026-55960 Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation	01-07-2026	2169
MSRC Security Update	CVE-2026-6450 CRL critical extension bypass in ParseCRL_Extensions	01-07-2026	2170
MSRC Security Update	CVE-2026-7532 iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined	01-07-2026	2171
MSRC Security Update	CVE-2026-6291 Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption	01-07-2026	2172
MSRC Security Update	CVE-2026-57918 libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker.	01-07-2026	2173
MSRC Security Update	CVE-2026-57231 Podman: Malformed Image can trick podman run into leaking host environment variables into the container	01-07-2026	2174
MSRC Security Update	CVE-2026-13325 Virt-handler-rhel9: kubevirt: kubevirt: disabletls migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces	01-07-2026	2175