CVE-2026-69646
Nieprawidłowa weryfikacja podpisu kryptograficznego w Skype for Business umożliwia spoofing.
- CVSS
- 8,3
- EPSS
- 0,32 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Nieprawidłowa weryfikacja podpisu kryptograficznego w Skype for Business umożliwia spoofing.
Wykorzystanie uwierzytelniania po stronie klienta w Skype for Business umożliwia podszywanie się w sieci.
Niedobór całkowity w Skype for Business umożliwia atakującemu odmowę usługi w sieci.
Atak SSRF w Skype for Business umożliwia nieautoryzowanemu atakującemu ujawnienie informacji w sieci.
In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required.
In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not…
In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Niebezpieczny PendingIntent w StorageManagerService umożliwia lokalną eskalację uprawnień.
Przepełnienie bufora w fsck.c umożliwia lokalną eskalację uprawnień bez interakcji użytkownika.
In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-69646 Nieprawidłowa weryfikacja podpisu kryptograficznego w Skype for Business umożliwia spoofing. |
Monitoruj |
CVSS 8,3EPSS 0,32 % | ||
| CVE-2026-66305 Wykorzystanie uwierzytelniania po stronie klienta w Skype for Business umożliwia podszywanie się w sieci. |
Monitoruj |
CVSS 7,1EPSS 0,53 % | ||
| CVE-2026-66307 Niedobór całkowity w Skype for Business umożliwia atakującemu odmowę usługi w sieci. |
Monitoruj |
CVSS 7,5EPSS 1,17 % | ||
| CVE-2026-66304 Atak SSRF w Skype for Business umożliwia nieautoryzowanemu atakującemu ujawnienie informacji w sieci. |
Monitoruj |
CVSS 7,5EPSS 0,97 % | ||
| CVE-2026-58846 In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution… |
Monitoruj |
CVSS 7,8EPSS 0,11 % | ||
| CVE-2026-58848 In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution… |
Monitoruj |
CVSS 7,0EPSS 0,09 % | ||
| CVE-2026-58874 In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no… |
Monitoruj |
CVSS 7,8EPSS 0,09 % | ||
| CVE-2026-58941 In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privilege with no additional… |
Monitoruj |
CVSS 7,8EPSS 0,11 % | ||
| CVE-2026-58820 In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required. |
Monitoruj |
CVSS 7,8EPSS 0,1 % | ||
| CVE-2026-58823 In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional… |
Monitoruj |
CVSS 7,8EPSS 0,1 % | ||
| CVE-2026-58839 In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution… |
Monitoruj |
CVSS 7,8EPSS 0,1 % | ||
| CVE-2026-55273 In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional… |
Monitoruj |
CVSS 7,8EPSS 0,1 % | ||
| CVE-2026-55277 In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution… |
Monitoruj |
CVSS 8,0EPSS 0,17 % | ||
| CVE-2026-55285 In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional… |
Monitoruj |
CVSS 7,8EPSS 0,1 % | ||
| CVE-2026-55294 In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional… |
Monitoruj |
CVSS 7,8EPSS 0,1 % | ||
| CVE-2026-49918 In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed.… |
Monitoruj |
CVSS 7,8EPSS 0,1 % | ||
| CVE-2026-49919 In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution… |
Monitoruj |
CVSS 7,8EPSS 0,1 % | ||
| CVE-2026-49927 In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed.… |
Monitoruj |
CVSS 7,8EPSS 0,1 % | ||
| CVE-2026-49932 In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution… |
Monitoruj |
CVSS 7,8EPSS 0,1 % | ||
| CVE-2026-45528 Niebezpieczny PendingIntent w StorageManagerService umożliwia lokalną eskalację uprawnień. |
Monitoruj |
CVSS 7,3EPSS 0,09 % | ||
| CVE-2026-45531 Przepełnienie bufora w fsck.c umożliwia lokalną eskalację uprawnień bez interakcji użytkownika. |
Monitoruj |
CVSS 7,8EPSS 0,1 % | ||
| CVE-2026-49879 In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges… |
Monitoruj |
CVSS 8,8EPSS 0,37 % | ||
| CVE-2026-49881 In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no… |
Monitoruj |
CVSS 7,8EPSS 0,1 % | ||
| CVE-2026-49882 In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution… |
Monitoruj |
CVSS 8,8EPSS 0,38 % | ||
| CVE-2026-49884 In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional… |
Monitoruj |
CVSS 7,8EPSS 0,1 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 9.11.2026, 15:32 UTC – 9.11.2026, 17:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.