최근 6개월의 모든 CVE를 매일 업데이트합니다.

4개 중 4개 표시

• 높음CVE-2026-55958CVSS 점수 7.52026. 6. 25.

  Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding the fixed message bag (MSGBAG_SIZE) sets an error code but fails to return, so execution falls through to an XMEMCPY that writes past the end

  CWE-393CWE-787wolfssl wolfssl
• 높음CVE-2026-53092CVSS 점수 7.82026. 6. 24.

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg == dst_reg Consider the case of rX += rX where src_reg and dst_reg are pointers to the same bpf_reg_state in adjust_reg_min_max_vals(). The latt

  CWE-393linux linux_kernel
• 치명CVE-2026-9058CVSS 점수 9.32026. 5. 25.

  For untrusted certificates that contain the "Authority Information Access - caIssuers URI" extension, Szafir SDK will automatically download the parent CA certificate from the specified URL and will import it to its trust store as a "nonqualified" certificate.

  CWE-295CWE-393CWE-637
• 높음CVE-2026-42246CVSS 점수 7.42026. 5. 9.

  Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS. This issue

  CWE-392CWE-393CWE-636ruby-lang net\