كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 3 من 3

• عاليةCVE-2026-88357درجة CVSS 7.524‏/09‏/2026

  nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced withou

  CWE-1335
• متوسطةCVE-2026-5072درجة CVSS 6.522‏/05‏/2026

  A bitwise shift vulnerability in Zephyr's PTP subsystem allows a remote attacker to cause undefined behavior and potential system crashes. An attacker sends a crafted PTP_MSG_MANAGEMENT message to set an unvalidated negative log_announce_interval value in the

  CWE-1335zephyrproject zephyr
• متوسطةCVE-2026-4426درجة CVSS 6.519‏/03‏/2026

  A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a spe

  CWE-1335libarchive libarchiveredhat hardened_imagesredhat openshift_container_platform