كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 3 من 3

• منخفضةCVE-2026-13489درجة CVSS 3.128‏/06‏/2026

  A weakness has been identified in 78 xiaozhi-esp32 up to 2.2.6. Affected by this issue is the function ParseMessage of the file main/mcp_server.cc of the component MCP Response Handler. This manipulation causes improper synchronization. Remote exploitation of

  CWE-662
• عاليةCVE-2026-53277درجة CVSS 8.825‏/06‏/2026

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walk_s1() and kvm_walk_nested_s2() expect to be called while holding kvm->srcu to guard against memslot

  CWE-662CWE-820linux linux_kernel
• متوسطةCVE-2026-39865درجة CVSS 5.908‏/04‏/2026

  Axios is a promise based HTTP client for the browser and Node.js. Starting in version 1.13.0 and prior to 1.13.2, Axios HTTP/2 session cleanup logic contains a state corruption bug that allows a malicious server to crash the client process through concurrent s

  CWE-400CWE-662axios axios