← nejvýznamnější zprávy · všechny zprávy

poslední zpráva

SPOJENO PŘES CVE EPSS 0.00

Signal bug could let someone keep listening after you hang up

A recently disclosed flaw in Signal’s calling software could allow another participant to keep hearing you after you hang up. The vulnerability, tracked as CVE-2026-113380 (CVSS score 9.3 out of 10), affects RingRTC versions earlier than 2.72.0. RingRTC is the open-source library behind Signal’s voice and video calling functionality, providing calling components for its mobile and desktop applications. The flaw concerns how Signal’s calling library shuts down a call. It does not affect how it…

Číst originál na Malwarebytes Labs →

2 zprávy z 2 zdrojů · první CZ · EN/orig

Signal US IT

tg: zranitelnost tg: propagace tp: soukromí

CVE v události 1

CVEhodnoceníKEVEPSS
CVE-2026-113380 9.3 4.0 · mitre – 0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.3.

Jak se o tom psalo 2

  1. · Malwarebytes Labs US nadpis události

    Signal bug could let someone keep listening after you hang up

    A recently disclosed flaw in Signal’s calling software could allow another participant to keep hearing you after you hang up. The vulnerability, tracked as CVE-2026-113380 (CVSS score 9.3 out of 10), affects RingRTC versions earlier than 2.72.0. RingRTC is the open-source library behind Signal’s voice and video calling functionality, providing calling components for its mobile and desktop applications. The flaw concerns how Signal’s calling library shuts down a call. It does not affect how it…

  2. · CSIRT Itálie (ACN) IT

    Risolta vulnerabilità in Signal RingRTC

    Signal ha rilasciato aggiornamenti di sicurezza per sanare una vulnerabilità con gravità “critica” in RingRTC, libreria middleware per la gestione delle chiamate audio e video.