Поиск уязвимостей
Количество 50
Количество 50
BDU:2026-17395
Уязвимость алгоритма сжатия данных Brotli программной платформы Node.js, позволяющая нарушителю выполнить произвольный код
ALT-PU-2026-20365
ALT-PU-2026-20365: package `libbrotli` update to version 1.2.1-alt1
ALT-PU-2026-19677
ALT-PU-2026-19677: package `libbrotli` update to version 1.2.1-alt1
ALT-PU-2020-2373
ALT-PU-2020-2373: package `p7zip` update to version 17.02-alt1
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
CVE-2026-111497
Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) ...
openSUSE-SU-2026:22213-1
Security update for brotli
SUSE-SU-2026:4945-1
Security update for brotli
RLSA-2026:90501
Important: brotli security update
RLSA-2026:90495
Important: brotli security update
RLSA-2026:90449
Important: brotli security update
GHSA-9v8h-qqgm-4m35
Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
ELSA-2026-90501
ELSA-2026-90501: brotli security update (IMPORTANT)
ELSA-2026-90495
ELSA-2026-90495: brotli security update (IMPORTANT)
ELSA-2026-90449
ELSA-2026-90449: brotli security update (IMPORTANT)
ELSA-2026-500520
ELSA-2026-500520: nodejs:24 security update (IMPORTANT)
ELSA-2026-500519
ELSA-2026-500519: nodejs:22 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-17395 Уязвимость алгоритма сжатия данных Brotli программной платформы Node.js, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 83% Высокий | 19 дней назад |
| ALT-PU-2026-20365 ALT-PU-2026-20365: package `libbrotli` update to version 1.2.1-alt1 | CVSS3: 9.8 | 83% Высокий | 4 дня назад |
| ALT-PU-2026-19677 ALT-PU-2026-19677: package `libbrotli` update to version 1.2.1-alt1 | CVSS3: 9.8 | 83% Высокий | 12 дней назад |
| ALT-PU-2020-2373 ALT-PU-2020-2373: package `p7zip` update to version 17.02-alt1 | CVSS3: 9.8 | больше 6 лет назад | |
 | CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. | CVSS3: 9.8 | 83% Высокий | 18 дней назад |
 | CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. | CVSS3: 8.1 | 83% Высокий | 18 дней назад |
 | CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. | CVSS3: 9.8 | 83% Высокий | 18 дней назад |
 | CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder | CVSS3: 8.1 | 83% Высокий | 15 дней назад |
| CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) ... | CVSS3: 9.8 | 83% Высокий | 18 дней назад |
 | openSUSE-SU-2026:22213-1 Security update for brotli | 83% Высокий | 8 дней назад | |
| SUSE-SU-2026:4945-1 Security update for brotli | 83% Высокий | 11 дней назад | |
 | RLSA-2026:90501 Important: brotli security update | 83% Высокий | 11 дней назад | |
| RLSA-2026:90495 Important: brotli security update | 83% Высокий | 11 дней назад | |
| RLSA-2026:90449 Important: brotli security update | 83% Высокий | 11 дней назад | |
| GHSA-9v8h-qqgm-4m35 Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package | CVSS3: 9.8 | 83% Высокий | 18 дней назад |
| ELSA-2026-90501 ELSA-2026-90501: brotli security update (IMPORTANT) | 83% Высокий | 13 дней назад | |
| ELSA-2026-90495 ELSA-2026-90495: brotli security update (IMPORTANT) | 83% Высокий | 7 дней назад | |
| ELSA-2026-90449 ELSA-2026-90449: brotli security update (IMPORTANT) | 83% Высокий | 13 дней назад | |
| ELSA-2026-500520 ELSA-2026-500520: nodejs:24 security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
| ELSA-2026-500519 ELSA-2026-500519: nodejs:22 security update (IMPORTANT) | 83% Высокий | 14 дней назад |
Уязвимостей на страницу