2026-05-02 归档

今日共收录 1052 条安全情报，包含 324 个 CVE，429 篇安全通告，以及 17 篇研究论文。

漏洞预警2026-05-01 发布INFO

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared library. On certain p...

CVE-2026-22165

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF cras

历史摘要 · 未重新核验 · NVD

#cve #cwe-416

漏洞预警2026-05-01 发布INFO

A flaw has been found in Open5GS up to 2.7.7. This issue affects the function bsf_sess_find_by_ipv6prefix of the file /src/bsf/context.c of the component BSF. This manipulation ...

CVE-2026-7583

A flaw has been found in Open5GS up to 2.7.7. This issue affects the function bsf_sess_find_by_ipv6prefix of the file /s

历史摘要 · 未重新核验 · NVD

#cve #cwe-404

漏洞预警2026-05-01 发布INFO

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by XML parsing resource ampli...

CVE-2026-43507

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur v

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-05-01 发布INFO

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by memory leaks from unauthen...

CVE-2026-43506

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur v

历史摘要 · 未重新核验 · NVD

#cve #cwe-401

漏洞预警2026-05-01 发布INFO

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in the activa...

CVE-2026-43505

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Be

历史摘要 · 未重新核验 · NVD

#cve #cwe-420

漏洞预警2026-05-01 发布INFO

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in a paused s...

CVE-2026-43504

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Be

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback NETIF_F_IPV6_CSUM only advertises support ...

CVE-2026-43057

In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_CSUM

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in add_adev() error path If auxiliary_device_add() fails, add_adev() jumps to...

CVE-2026-43056

In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in add_adev() error p

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: target: file: Use kzalloc_flex for aio_cmd The target_core_file doesn't initialize the aio_cmd->iocb ...

CVE-2026-43055

In the Linux kernel, the following vulnerability has been resolved: scsi: target: file: Use kzalloc_flex for aio_cmd T

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Drain commands in target_reset handler tcm_loop_target_reset() violates the SCSI EH...

CVE-2026-43054

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Drain commands in target_re

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in attr dabtree inactivation When inactivating an inode with node-format extended a...

CVE-2026-43053

In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in attr dabtree inactivatio

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_oper When NL80211_TDLS_ENABLE_LINK is called, the code on...

CVE-2026-43052

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_o

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq The wacom_intuos_bt_irq() function processes Blue...

CVE-2026-43051

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intuos_

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix use-after-free in sock_def_readable() A race condition exists between lec_atm_close() setting...

CVE-2026-43050

In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix use-after-free in sock_def_readable()

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Presently, if the forc...

CVE-2026-43049

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on forc

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate potential OOB by removing bogus memset() The memset() in hid_report_raw_event() has the...

CVE-2026-43048

In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate potential OOB by removing bogus

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report responses match the request It is possible for a malicious (or clum...

CVE-2026-43047

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report responses m

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with drop_progress and zero drop_level [BUG] When recovering relocation at mount t...

CVE-2026-43046

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with drop_progress and zer

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mshv: Fix error handling in mshv_region_pin The current error handling has two issues: First, pin_user_pag...

CVE-2026-43045

In the Linux kernel, the following vulnerability has been resolved: mshv: Fix error handling in mshv_region_pin The cu

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-05-01 发布INFO

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix DMA corruption on long hmac keys When a key longer than block size is supplied, it is co...

CVE-2026-43044

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix DMA corruption on long hmac keys

历史摘要 · 未重新核验 · NVD

#cve