News & Sicurezza

CVE ID :CVE-2026-0108 Published : March 10, 2026, 8:46 p.m. | 30 minutes ago Description :The register protection of the PowerVR GPU is incorrectly configured. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-0107 Published : March 10, 2026, 8:46 p.m. | 30 minutes ago Description :In gmc_ddr_handle_mba_mr_req of gmc_mba_ddr.c, there is a possible escalation of privileges due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Critical Microsoft Excel bug weaponizes Copilot Agent for zero-click information disclosure attack After a whopper of a Patch Tuesday last month, with six Microsoft flaws exploited as zero-days, March didn't exactly roar in like a lion. Just two of the 83 Microsoft CVEs released on Tuesday are list ... Read more Published Date: Mar 10, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-26144 CVE-2026-26127 CVE-2026-26113 CVE-2026-26110 CVE-2026-21262

IBM Trusteer Rapport installer 3.5.2309.290 IBM Trusteer Rapport could allow a local attacker to execute arbitrary code on the system, caused by DLL uncontrolled search path element vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system.

Fortinet Security Update – Patch for Multiple Vulnerabilities That Enable Malicious Command Execution Fortinet released a sweeping security advisory on March 10, 2026, addressing eleven vulnerabilities across its core enterprise products, including FortiManager, FortiAnalyzer, FortiSwitchAXFixed, and ... Read more Published Date: Mar 10, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-25836 CVE-2026-22629 CVE-2026-22628 CVE-2026-22627 CVE-2026-22572 CVE-2025-68648 CVE-2025-68482 CVE-2025-54820 CVE-2025-53608 CVE-2025-49784 CVE-2025-48418

CVE ID :CVE-2026-27280 Published : March 10, 2026, 6:23 p.m. | 52 minutes ago Description :DNG SDK versions 1.7.1 2471 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-27281 Published : March 10, 2026, 6:23 p.m. | 52 minutes ago Description :DNG SDK versions 1.7.1 2471 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-3862 Published : March 10, 2026, 6:19 p.m. | 57 minutes ago Description :Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page. Severity: 4.6 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-3854 Published : March 10, 2026, 6:19 p.m. | 57 minutes ago Description :An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly sanitized before being included in internal service headers. Because the internal header format used a delimiter character that could also appear in user input, an attacker could inject additional metadata fields through crafted push option values. This vulnerability was reported via the GitHub Bug Bounty program and has been fixed in GitHub Enterprise Server versions 3.14.24, 3.15.19, 3.16.15, 3.17.12, 3.18.6 and 3.19.3. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-3845 Published : March 10, 2026, 6:19 p.m. | 57 minutes ago Description :Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability affects Firefox Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-3846 Published : March 10, 2026, 6:19 p.m. | 57 minutes ago Description :Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability affects Firefox Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-3847 Published : March 10, 2026, 6:19 p.m. | 57 minutes ago Description :Memory safety bugs present in Firefox 148.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...