AWS Security Bulletins چهارشنبه ۱۳ آبان ۱۴۰۵ · ۲۳:۱۰

CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard

Bulletin ID: 2026-169-AWS Publication Date: 11/04/2026 11:30 AM PST Description: We identified CVE-2026-122192, an issue in Firecracker v0.23.0 through v1.16.1 that, under certain host memory conditions, can let a root user in a guest read or modify memory of the Firecracker process. It affects VMs restored from a snapshot using the File memory backend with a balloon or virtio-mem device. Impacted versions: Firecrack…

آسیب‌پذیری و روز صفر توسعه وب رایانش ابری

خواندن متن کامل در AWS Security Bulletins درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

BleepingComputer پنجشنبه ۱۴ آبان ۱۴۰۵ · ۰۰:۲۸

Zyxel fixes zero-day exploited to hack nearly 1,000 network switches

Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. [...]

آسیب‌پذیری و روز صفر

منبع

TechCrunch Security پنجشنبه ۱۴ آبان ۱۴۰۵ · ۰۰:۰۶

Hackers stole DreamHost customer files and inboxes during months-long attack

The web host said hackers exploited a vulnerability to access customer emails and files during a "deliberate attack."

آسیب‌پذیری و روز صفر

منبع

Cisco Security Advisories چهارشنبه ۱۳ آبان ۱۴۰۵ · ۲۲:۲۲

Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026

On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The vulnerabilities pose risks for remote code execution and traffic interception. For more information, see Node.js Security Release…

آسیب‌پذیری و روز صفر شبکه و اینترنت

منبع

eSecurityPlanet چهارشنبه ۱۳ آبان ۱۴۰۵ · ۲۰:۳۸

Google Fixes 216 Android Vulnerabilities: What Users Should Know

Google's November 2026 Android update addresses 216 vulnerabilities, including a critical zero-click RCE flaw. See the fixes and patch levels to check.

آسیب‌پذیری و روز صفر توسعه موبایل

منبع