2026-04-30 归档

今日共收录 966 条安全情报,包含 229 个 CVE,399 篇安全通告,以及 34 篇研究论文。

← 返回归档列表
安全公告2026-04-30 发布INFO

Alert for CVE-2022-21500

CVE-2022-21500

Alert for CVE-2022-21500

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-04-30 发布INFO

Alert for CVE-2021-44228

CVE-2021-44228

Alert for CVE-2021-44228

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-04-30 发布INFO

Linux 内核提权 CVE-2026-31431(copy-fail)

CVE-2026-31431

Linux 内核提权 CVE-2026-31431(copy-fail)

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-04-30 发布INFO

【安全通告】Linux Kernel 本地权限提升漏洞风险通告(CVE-2026-31431)

CVE-2026-31431

【安全通告】Linux Kernel 本地权限提升漏洞风险通告(CVE-2026-31431)

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-04-29 发布INFO

Long Term Support Channel Update for ChromeOS

CVE-2026-4680 · CVE-2026-4456 · CVE-2026-4675 · CVE-2026-6297

A new LTS-144  version 144.0.7559.249 (Platform Version: 16503.81.0), is being rolled out for most ChromeOS devices. Thi

历史摘要 · 未重新核验 · Google Chrome Releases

安全公告2026-04-29 发布INFO

net: macb: Use dev_consume_skb_any() to free TX SKBs

CVE-2026-31563

net: macb: Use dev_consume_skb_any() to free TX SKBs

历史摘要 · 未重新核验 · Microsoft MSRC

学术论文2026-04-29 发布INFO

Can Cross-Layer Design Bridge Security and Efficiency? A Robust Authentication Framework for Healthcare Information Exchange Systems

本文针对医疗健康信息交换(HIE)网络中设备认证的安全与效率平衡问题,提出了一种新颖的跨层认证方案。该方案将传统密码学机制与物理层(PHY)认证相结合,以在确保可靠通信的同时最小化计算和通信开销。初始认证阶段采用基于公钥基础设施(PKI)的

历史摘要 · 未重新核验 · arXiv cs.CR

漏洞预警2026-04-30 发布INFO

RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6522

RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to caus...

CVE-2026-7426

Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a denial of...

CVE-2026-7425

Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

A vulnerability was identified in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/wecom.py of the component W...

CVE-2026-7396

A vulnerability was identified in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.

CVE-2026-0206

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewal

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denial of service during SCRAM-SHA-256 auth...

CVE-2026-42198

pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor privileges can persist...

CVE-2026-40230

Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated a

历史摘要 · 未重新核验 · NVD

威胁情报2026-04-30 发布INFO

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

CVE-2026-20929

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-04-29 发布INFO

GitHub fixes RCE flaw that gave access to millions of private repos

CVE-2026-3854

In early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) that could have allowed at

历史摘要 · 未重新核验 · BleepingComputer

安全公告2026-04-30 发布INFO

Compatibility Test Suite (CTS)

Android 兼容性测试套件(CTS)是 Google 提供的一套用于验证 Android 设备是否符合 Android 兼容性定义文档(CDD)要求的自动化测试工具。它帮助确保不同厂商生产的 Android 设备能够正常运行 Andro

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-04-30 发布INFO

Compatibility Definition Document (CDD)

Android 兼容性定义文档(CDD)是 Android 生态系统中的核心规范性文件,由 Google 官方发布。该文档详细定义了 Android 设备必须满足的软硬件兼容性要求,包括但不限于 API 行为、硬件传感器、屏幕尺寸、输入法、

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-04-30 发布INFO

Tools, build, and related reference

该输入来自 Android 安全公告(Android Security Bulletin)的参考页面,标题为“Tools, build, and related reference”,URL 指向 Android 开发者文档的设置/参考部分

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-04-30 发布INFO

Latest Compatibility Definition Document (CDD)

Android 安全公告发布了最新版本的 Compatibility Definition Document (CDD)。CDD 是 Android 生态系统的关键文档,定义了设备兼容 Android 平台所需满足的硬件、软件和 API 要

历史摘要 · 未重新核验 · Android Security Bulletin