Rilevate vulnerabilità in prodotti IBM
Risolte molteplici vulnerabilità, di cui 4 con gravità "critica" e 31 con gravità "alta", in diversi prodotti IBM.
IBM IT
Výsledky hledání
When LLM Gateways Go Wrong: Findings from LiteLLM
TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from a missing authorization check on the /config/update endpoint, which allowed any authenticated user (including low-privileged accounts) to modify the proxy’s runtime configuration. This single flaw enabled arbitrary file…
EPSS 0.39 CVE-2026-35029 CVE-2026-59823 LiteLLM IL
Risolte vulnerabilità in prodotti Mozilla
Aggiornamenti di sicurezza sanano molteplici vulnerabilità di sicurezza, di cui 30 con gravità “alta”, in Firefox e Firefox ESR.
EPSS < 0.01 a dalších 13 CVE-2026-109717 CVE-2026-109718 CVE-2026-109719 CVE-2026-109720 CVE-2026-109721 CVE-2026-109722 CVE-2026-109723 CVE-2026-109724 CVE-2026-109725 CVE-2026-109726 CVE-2026-109727 CVE-2026-109728 CVE-2026-109729 CVE-2026-109730 CVE-2026-109731 CVE-2026-109732 CVE-2026-109733 Mozilla IT
· zachyceno
CVE-2026-97781 Microsoft Office OneNote Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97781 Microsoft US
· zachyceno
CVE-2026-105016 Microsoft QUIC Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-105016 Microsoft US
· zachyceno
CVE-2026-97801 .NET Framework Tampering Vulnerability
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.
EPSS 0.01 CVE-2026-97801 US
· zachyceno
CVE-2026-108463 Windows SmartScreen Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-108463 US
· zachyceno
CVE-2026-108471 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108471 US
· zachyceno
CVE-2026-108136 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108136 Microsoft US
· zachyceno
CVE-2026-108135 Windows Backup Engine Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108135 US
· zachyceno
CVE-2026-108134 Windows Autopilot Elevation of Privilege Vulnerability
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108134 US
· zachyceno
CVE-2026-108133 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108133 US
· zachyceno
CVE-2026-108132 Windows Kerberos Elevation of Privilege Vulnerability
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108132 US
· zachyceno
CVE-2026-108131 Active Directory Federation Services (AD FS) Spoofing Vulnerability
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-108131 US
· zachyceno
CVE-2026-108130 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108130 US
· zachyceno
CVE-2026-108129 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-108129 US
· zachyceno
CVE-2026-108128 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-108128 US
· zachyceno
CVE-2026-108127 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-108127 US
· zachyceno
CVE-2026-97844 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97844 US
· zachyceno
CVE-2026-97843 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97843 US
· zachyceno
CVE-2026-97842 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97842 US
· zachyceno
CVE-2026-97841 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97841 US
· zachyceno
CVE-2026-97840 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97840 US
· zachyceno
CVE-2026-97839 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97839 US
· zachyceno
CVE-2026-97838 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97838 US
· zachyceno
CVE-2026-97837 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97837 US
· zachyceno
CVE-2026-97836 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97836 US
· zachyceno
CVE-2026-97835 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97835 US
· zachyceno
CVE-2026-97834 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97834 US
· zachyceno
CVE-2026-97833 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97833 US
· zachyceno
CVE-2026-97832 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97832 US
· zachyceno
CVE-2026-97831 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97831 US
· zachyceno
CVE-2026-97830 Windows Internet Information Services Denial of Service Vulnerability
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-97830 US
· zachyceno
CVE-2026-97829 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97829 US
· zachyceno
CVE-2026-97828 Role: DNS Server Information Disclosure Vulnerability
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97828 US
· zachyceno
CVE-2026-97827 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97827 US
· zachyceno
CVE-2026-97826 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97826 US
· zachyceno
CVE-2026-97825 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97825 US
· zachyceno
CVE-2026-97824 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97824 US
· zachyceno
CVE-2026-97823 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97823 US
· zachyceno
CVE-2026-97822 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97822 US
· zachyceno
CVE-2026-97821 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97821 US
· zachyceno
CVE-2026-97820 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97820 US
· zachyceno
CVE-2026-97819 Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97819 US
· zachyceno
CVE-2026-97817 Role: DNS Server Information Disclosure Vulnerability
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97817 US
· zachyceno
CVE-2026-97816 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97816 Microsoft US
· zachyceno
CVE-2026-97815 Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97815 US
· zachyceno
CVE-2026-97814 Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97814 US
· zachyceno
CVE-2026-97813 Windows Hyper-V Information Disclosure Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97813 US
· zachyceno
CVE-2026-97812 Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97812 US
· zachyceno
CVE-2026-97811 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97811 Microsoft US
· zachyceno
CVE-2026-97810 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97810 US
· zachyceno
CVE-2026-97809 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97809 US
· zachyceno
CVE-2026-97808 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97808 US
· zachyceno
CVE-2026-97807 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97807 US
· zachyceno
CVE-2026-97806 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97806 US
· zachyceno
CVE-2026-97805 Windows Partition Management Driver Remote Code Execution Vulnerability
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97805 US
· zachyceno
CVE-2026-97804 HID Class Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97804 US
· zachyceno
CVE-2026-97803 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97803 US
· zachyceno
CVE-2026-96113 Windows Domain Name Service Remote Code Execution Vulnerability
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96113 US