최근 6개월의 모든 CVE를 매일 업데이트합니다.

15개 중 15개 표시

• 높음CVE-2026-20336CVSS 점수 8.82026. 9. 16.

  As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has cond

  CWE-664
• 높음CVE-2026-54251CVSS 점수 8.72026. 9. 15.

  netty-incubator-codec-ohttp implements Oblivious HTTP (OHTTP) gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/src/main/java/io/netty/incubator/codec/ohttp/OHttpRequestResponseContext.java al

  CWE-664
• 치명CVE-2026-20353CVSS 점수 9.82026. 9. 14.

  As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software har

  CWE-664
• 낮음CVE-2026-86203CVSS 점수 3.72026. 9. 9.

  PocketMine-MP versions before 5.39.2 fail to validate entity despawn state when processing attack packets from clients. Attackers can exploit a race condition by attacking a disconnecting player to trigger multiple death handlers, causing inventory items and e

  CWE-664
• 중간CVE-2026-79603CVSS 점수 4.32026. 9. 8.

  x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen (if needed) when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a

  CWE-664
• 치명CVE-2026-20274CVSS 점수 9.82026. 9. 2.

  As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple inte

  CWE-664cisco ios_xr
• 낮음CVE-2026-79289CVSS 점수 3.12026. 8. 25.

  Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

  CWE-664google chrome
• 높음CVE-2026-18549CVSS 점수 7.52026. 8. 15.

  @fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is st

  CWE-400CWE-664fastify fastify-multipart
• 낮음CVE-2026-19380CVSS 점수 2.32026. 8. 10.

  A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. T

  CWE-664CWE-911
• 높음CVE-2026-20269CVSS 점수 8.62026. 8. 5.

  As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple intern

  CWE-664cisco ios_xe
• 중간CVE-2026-64721CVSS 점수 5.52026. 7. 27.

  This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able

  CWE-664apple ipadosapple iphone_osapple macos
• 높음CVE-2026-20158CVSS 점수 7.52026. 7. 15.

  As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally d

  CWE-664cisco roomoscisco roomos_cloud
• 높음CVE-2026-43503CVSS 점수 8.82026. 5. 23.

  In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail to propagate the SKBFL_SHARED_FRAG bit in skb_shin

  CWE-664linux linux_kernel
• 중간CVE-2026-8582CVSS 점수 5.32026. 5. 14.

  Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

  CWE-664google chrome
• 높음CVE-2026-8517CVSS 점수 8.82026. 5. 14.

  Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

  CWE-664google chromeapple macos