Эксплуатируемые и новые серьёзные CVE: сентябрь 2026 г.

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, built with TX_ENABLE_EVENT_TRACE, the Module Manager lets a user-mode, memory-protec

• Локальное повышение привилегий

eclipse foundation · eclipse-threadx/threadx29 сент. 2026 г.

Unbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stall

• Без аутентификации
• Ошибки памяти

eclipse foundation · netx duo29 сент. 2026 г.

ICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option wa

• Без аутентификации
• Ошибки памяти

eclipse foundation · netx duo29 сент. 2026 г.

mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packet

• Без аутентификации

eclipse foundation · eclipse-threadx/netxduo29 сент. 2026 г.

A malformed Session header permanently orphans one packet-pool block per RTSP request

• Без аутентификации
• Отказ в обслуживании

eclipse foundation · eclipse-threadx/netxduo29 сент. 2026 г.

Out-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER length

• Без аутентификации
• Ошибки памяти

eclipse foundation · netx duo29 сент. 2026 г.

NULL Pointer Dereference on MSRP Attribute Table Exhaustion

• Без аутентификации
• Ошибки памяти

eclipse foundation · netx duo29 сент. 2026 г.

NULL pointer dereference when evicting the last MSRP attribute in a participant's list

• Без аутентификации
• Ошибки памяти

eclipse foundation · netx duo29 сент. 2026 г.

Out-of-bounds Read from Unvalidated MSRP Attribute List Length

• Без аутентификации
• Ошибки памяти

eclipse foundation · netx duo29 сент. 2026 г.

Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read

• Без аутентификации
• Ошибки памяти

eclipse foundation · netx duo29 сент. 2026 г.

Out-of-bounds Write via NAND Metadata Parsing at Mount in LevelX

• Ошибки памяти

eclipse foundation · eclipse-threadx/levelx(nand driver)29 сент. 2026 г.

An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode,

• Локальное повышение привилегий
• Ошибки памяти

eclipse foundation · threadx29 сент. 2026 г.

The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data.

• Без аутентификации
• Отказ в обслуживании

eclipse foundation · netx duo29 сент. 2026 г.

When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP.

• Без аутентификации
• Ошибки памяти

eclipse foundation · netx duo29 сент. 2026 г.

NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the l

• Без аутентификации
• Ошибки памяти

eclipse foundation · netx duo29 сент. 2026 г.

The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message.

• Без аутентификации
• Отказ в обслуживании

eclipse foundation · netx duo29 сент. 2026 г.

PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress

• Без аутентификации
• Ошибки памяти

px4 · px4-autopilot29 сент. 2026 г.

PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command

• Без аутентификации

px4 · px4-autopilot29 сент. 2026 г.

Marmite through 0.4.2 Path Traversal via Development Server

• Без аутентификации
• Обход пути

rochacbruno · marmite29 сент. 2026 г.

Marmite through 0.4.2 Unauthenticated API Access via Development Server

• Без аутентификации
• Обход аутентификации
• Обход пути

rochacbruno · marmite29 сент. 2026 г.

Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

• Локальное повышение привилегий
• Состояние гонки

python software foundation · cpython29 сент. 2026 г.

IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []

ibm · i29 сент. 2026 г.

DataStage on Cloud Pak for Data has several vulnerabilities

• RCE
• Обход пути

ibm · datastage on cloud pak for data29 сент. 2026 г.

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• RCE
• Инъекция команд

ibm · guardium data protection29 сент. 2026 г.

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• RCE
• Инъекция команд

ibm · guardium data protection29 сент. 2026 г.

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• RCE
• Инъекция команд

ibm · guardium data protection29 сент. 2026 г.

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• Обход пути

ibm · guardium data protection29 сент. 2026 г.

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030.

• Ошибки памяти

29 сент. 2026 г.

Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proc

• RCE без входа

google · chrome29 сент. 2026 г.

Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proce

• RCE без входа

google · chrome29 сент. 2026 г.

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process

• Нарушение контроля доступа (IDOR)

google · chrome29 сент. 2026 г.

Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

• RCE без входа
• Состояние гонки

google · chrome29 сент. 2026 г.

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside t

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vi

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary cod

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside t

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the ren

• Нарушение контроля доступа (IDOR)

google · chrome29 сент. 2026 г.

Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vi

• RCE без входа

google · chrome29 сент. 2026 г.

UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar

• Без аутентификации

google · chrome29 сент. 2026 г.

Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the

• RCE
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proce

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome29 сент. 2026 г.

Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

• RCE без входа

google · chrome29 сент. 2026 г.

Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox v

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentia

• RCE без входа

google · chrome29 сент. 2026 г.

Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome29 сент. 2026 г.

Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sa

• RCE
• Ошибки памяти

google · chrome29 сент. 2026 г.

Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to pot

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass sy

google · chrome29 сент. 2026 г.

Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrar

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox vi

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the rende

• RCE без входа

google · chrome29 сент. 2026 г.

Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentia

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sand

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proc

• RCE без входа

google · chrome29 сент. 2026 г.

Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vi

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site is

• Без аутентификации
• Состояние гонки

google · chrome29 сент. 2026 г.

Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to po

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary co

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside t

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execut

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vi

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to pot

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the re

• RCE без входа
• Нарушение контроля доступа (IDOR)

google · chrome29 сент. 2026 г.

Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentiall

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to by

• Без аутентификации
• CSRF

google · chrome29 сент. 2026 г.

Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside t

• RCE без входа

google · chrome29 сент. 2026 г.

Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code

• RCE без входа

google · chrome29 сент. 2026 г.

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to p

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitr

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineeri

• Без аутентификации

google · chrome29 сент. 2026 г.

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute

• RCE без входа

google · chrome29 сент. 2026 г.

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer pro

• RCE без входа

google · chrome29 сент. 2026 г.

russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened

• Без аутентификации

eugeny · russh29 сент. 2026 г.

simple-git allows command execution through unblocked Git configuration includes

• RCE без входа
• Инъекция команд

simple-git project · simple-git29 сент. 2026 г.

simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

• RCE без входа
• Инъекция команд

simple-git project · simple-git29 сент. 2026 г.

simple-git unsafe-operation guard does not block trailer command configuration

• RCE без входа
• Инъекция команд

simple-git project · simple-git29 сент. 2026 г.

simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

• RCE без входа
• Инъекция команд

steveukx · git-js29 сент. 2026 г.

JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard

• Без аутентификации
• XSS

jupyterlab · jupyterlab29 сент. 2026 г.

An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat i

• RCE без входа

29 сент. 2026 г.

Initialization of a resource with an insecure default in Anjvision YSSD-RTMP-H5

• Без аутентификации

anjvision · yssd-rtmp-h529 сент. 2026 г.

Improper neutralization of special elements used in an OS command ('OS command injection') in Anjvision YSSD-RTMP-H5

• RCE
• Инъекция команд

anjvision · yssd-rtmp-h529 сент. 2026 г.

Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5

• Слабая криптография

anjvision · yssd-rtmp-h529 сент. 2026 г.

Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5

• Без аутентификации
• Зашитые учётные данные

anjvision · yssd-rtmp-h529 сент. 2026 г.

Improper Check for Unusual or Exceptional Conditions in Anjvision YSSD-RTMP-H5

anjvision · yssd-rtmp-h529 сент. 2026 г.

Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H5

• Утечка информации

anjvision · yssd-rtmp-h529 сент. 2026 г.

Use of Weak Credentials in Anjvision YSSD-RTMP-H5

anjvision · yssd-rtmp-h529 сент. 2026 г.

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

• RCE без входа

google · chrome29 сент. 2026 г.

Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to pot

• RCE без входа
• Ошибки памяти

google · chrome29 сент. 2026 г.