This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Qlib. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. Weiterlesen: ZDI-26-848: Microsoft Qlib StaticDataLoader Deserialization of Untrus…
Intelligence View
⚡ tsecurity.de Intelligence
ZDI-26-848: Microsoft Qlib StaticDataLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Qlib. User interaction is required to exploit this…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Scan public-facing services with OpenVAS, sharpen WAF rules, shorten patch windows.
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
13 sources
CVE-2026-98432: A Remote Use-After-Free in the Linux Kernel’s TCP Stack
12 more sources
VVulDB Updates5 hours agoCVE-2026-99241 | Linux Kernel up to 7.2.13 NTFS ntfs_filemap_page_mkwrite race condition (EUVD-2026-115283) VVulDB Updates5 hours agoCVE-2026-99240 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 Damon Core mm/damon/core.c damos_commit_quota_goal target_value divide by zero (EUVD-2026-115282) VVulDB Updates5 hours agoCVE-2026-99239 | Linux Kernel up to 7.3.0 L2CAP __l2cap_chan_add toctou (EUVD-2026-115281) VVulDB Updates5 hours agoCVE-2026-99237 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 tracing update_last_data_if_empty race condition (EUVD-2026-115279) VVulDB Updates5 hours agoCVE-2026-99238 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 Tracing trace_module_record locking (EUVD-2026-115280) VVulDB Updates5 hours agoCVE-2026-99235 | Linux Kernel up to 7.3.0 Tracing event_hist_trigger_free use after free (EUVD-2026-115277)
+6
10 sources
CVE-2026-85297 | Google Cloud Run MCP up to 1.10.x information disclosure (EUVD-2026-109906)
9 more sources
VVulDB Updates14 min. agoCVE-2026-76306 | Splunk SOAR up to 8.6.x REST API Query Filters information disclosure (EUVD-2026-107645) GGoogle Cloud Tech5 hours agoGoogle Cloud Tech: Trusted agents, real outcomes: Driving AI impact at scale with Google's Agentic Data Cloud VVulDB Updates7 hours agoCVE-2022-48335 | Google Nexus 6 Widevine Trustlet PRDiagVerifyProvisioning buffer overflow (EUVD-2022-51035) VVulDB Updates7 hours agoCVE-2022-48336 | Google Nexus 6 Widevine Trustlet PRDiagParseAndStoreData buffer overflow (EUVD-2022-51036) VVulDB Updates7 hours agoCVE-2022-48346 | Huawei Smart Phone HwContacts information disclosure (EUVD-2022-51045) VVulDB Updates5 hours agoCVE-2026-119329 | Immich App up to 2.x Map Service map.service.ts information disclosure (EUVD-2026-114376)
+3
8 sources
Apple HomeView Ultra, Drone and Laundry-Folding Robot Reportedly In Development
7 more sources
LLatest from TechRadar1 hour agoApple charges over 100% more to double Mac Studio M5 Ultra memory, making two 256GB units cheaper than one 512GB MMacDailyNews2 hours agoApple’s HomeView software indicates how long the company delayed its release ZZDNET3 hours agoThe Apple Watch Ultra 4 just hit its lowest price ever ahead of Black Friday ZZDNET3 hours agoThe Apple Watch Ultra 4 just hit its lowest price ever ahead of Black Friday TThe Verge3 hours agoThe Apple Watch Ultra 4 is $100 off, matching its best price to date ZZDNET3 hours agoThe Apple Watch Ultra 4 just hit its lowest price ever ahead of Black Friday
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4315426/vulnerabilities-cve/zdi-26-848-microsoft-qlib-staticdataloader-deserialization-of-untrusted-data-remote-code-execution-vulnerability/