Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: microsoft'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-106376 4.7 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) 2026-10-09 16:42:28
CVE-2025-36128 7.5 IBM MQ 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting slowloris-type attacks, a remote attacker could exploit this vulnerability 2026-10-09 10:10:00
CVE-2025-53951 5.3 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's Outlookproxy plugin for Windows 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 2026-10-09 10:10:00
CVE-2025-53950 5.5 An Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS and Windows 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 2026-10-09 10:10:00
CVE-2025-46752 4.4 A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code. 2026-10-09 10:10:00
CVE-2026-70125 8.8 Microsoft Office Outlook Remote Code Execution Vulnerability 2026-10-05 18:11:18
CVE-2026-57099 7.5 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. 2026-10-05 17:28:25
CVE-2026-55007 8.1 Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. 2026-10-05 17:11:46
CVE-2026-103624 8.3 Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium s 2026-10-05 15:06:56
CVE-2026-103626 9.6 Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security 2026-10-05 15:06:29
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/2317
Zapisa po stranici: