【安全通告】Linux Kernel "Dirty Frag" 本地权限提升漏洞风险通告（CVE-2026-43284, CVE-2026-43500）
CVE-2026-43500 · CVE-2026-43284
【安全通告】Linux Kernel "Dirty Frag" 本地权限提升漏洞风险通告（CVE-2026-43284, CVE-2026-43500）
2026-05-13 归档
今日共收录 822 条安全情报，包含 0 个 CVE，457 篇安全通告，以及 56 篇研究论文。
← 返回归档列表Long Term Support Channel Update for ChromeOS
CVE-2026-5276 · CVE-2026-5872 · CVE-2026-3923 · CVE-2026-3922 · CVE-2026-7363 · CVE-2026-4454 · CVE-2026-5866 · CVE-2026-5280 · CVE-2026-5290 · CVE-2026-3921 · CVE-2026-6303
A new LTS-144 version 144.0.7559.250 (Platform Version: 16503.82.0), is being rolled out for most ChromeOS devices. Thi
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2026-42833
Execution with unnecessary privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute c
Microsoft Office Spoofing Vulnerability
CVE-2026-42832
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
CVE-2026-42830
Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
Azure Logic Apps Elevation of Privilege Vulnerability
CVE-2026-42823
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
Visual Studio Code Elevation of Privilege Vulnerability
CVE-2026-41613
Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.
Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2026-40381
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Secure Boot Security Feature Bypass Vulnerability
CVE-2026-41097
Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
CVE-2026-41086
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-40420
Improper access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-35436
Insufficient granularity of access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate pri
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-40418
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40413
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network.
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2026-40403
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2026-40402
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40401
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.
Windows Remote Desktop Services Elevation of Privilege Vulnerability
CVE-2026-40398
Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability
CVE-2026-32209
Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature l
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2026-40397
Integer underflow (wrap or wraparound) in Windows Common Log File System Driver allows an authorized attacker to elevate