| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-20589 | 6.7 | In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11 | 2026-10-30 03:16:41 | 2026-10-05 02:16:54 |
| CVE-2026-20588 | 6.7 | In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patc | 2026-10-30 03:16:41 | 2026-10-05 02:16:54 |
| CVE-2026-28367 | 8.7 | A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache Traffic Server and Go | 2026-10-30 03:16:41 | 2026-03-27 17:16:27 |
| CVE-2026-20587 | 6.7 | In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AL | 2026-10-30 03:16:40 | 2026-10-05 02:16:53 |
| CVE-2026-20586 | 8.8 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Iss | 2026-10-30 03:16:40 | 2026-10-05 02:16:53 |
| CVE-2026-20579 | 6.7 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11 | 2026-10-30 03:16:40 | 2026-10-05 02:16:53 |
| CVE-2026-20470 | 6.2 | In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP | 2026-10-30 03:16:40 | 2026-08-03 03:16:41 |
| CVE-2026-20469 | 6.0 | In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation | 2026-10-30 03:16:38 | 2026-08-03 03:16:41 |
| CVE-2026-91920 | 6.5 | A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests. The issue occurs because a security check for the chunk size is performed before the value is shifted, allow | 2026-10-30 02:17:10 | 2026-10-30 02:17:10 |
| CVE-2026-93006 | 6.8 | A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client t | 2026-10-30 02:17:10 | 2026-10-29 13:17:15 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: