Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexi...

CVE-2026-20753

Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adve

历史摘要 · 未重新核验 · NVD

Out-of-bounds read for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System...

CVE-2026-20751

Out-of-bounds read for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Rin

历史摘要 · 未重新核验 · NVD

Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unpr...

CVE-2026-20738

Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: Use

历史摘要 · 未重新核验 · NVD

Incorrect default permissions for some Intel(R) NPU Driver software installers before version 32.0.100.4511 within Ring 3: User Applications may allow an escalation of privilege...

CVE-2026-20718

Incorrect default permissions for some Intel(R) NPU Driver software installers before version 32.0.100.4511 within Ring

历史摘要 · 未重新核验 · NVD

Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged sof...

CVE-2026-20717

Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User App

历史摘要 · 未重新核验 · NVD

Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software ...

CVE-2025-36515

Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may

历史摘要 · 未重新核验 · NVD

Improper buffer restrictions for some Display Virtualization for Windows OS driver software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software ad...

CVE-2025-36510

Improper buffer restrictions for some Display Virtualization for Windows OS driver software within Ring 2: Device Driver

历史摘要 · 未重新核验 · NVD

Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information disclosure. System software adversary with a privileg...

CVE-2025-35991

Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an informat

历史摘要 · 未重新核验 · NVD

Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege...

CVE-2025-35990

Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring

历史摘要 · 未重新核验 · NVD

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-root (guest...

CVE-2025-35979

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executio

历史摘要 · 未重新核验 · NVD

Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege....

CVE-2025-35969

Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. within Ring 3

历史摘要 · 未重新核验 · NVD

Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Kernel may allow a denial of service. Unprivileged software...

CVE-2025-27723

Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Ke

历史摘要 · 未重新核验 · NVD

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

CVE-2026-20929

Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse

历史摘要 · 未重新核验 · CrowdStrike

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 16.9.1, certain endpoints failed to enforce proper authorization checks, allowing users to modify d...

CVE-2026-44442

CVE-2026-44442 是开源企业资源规划（ERP）工具 ERPNext 中的一个严重授权绕过漏洞。该漏洞影响 16.9.1 之前的所有版本。由于某些端点未能正确执行授权检查，导致低权限用户能够越权修改其角色允许范围之外的数据。攻击者

历史摘要 · 未重新核验 · NVD

Compatibility Test Suite (CTS)

本公告来自 Android 安全公告，内容涉及 Compatibility Test Suite (CTS) 的更新或说明。CTS 是用于验证 Android 设备是否符合兼容性定义的测试套件，确保应用在不同设备上的一致性和稳定性。公告未披

历史摘要 · 未重新核验 · Android Security Bulletin

Compatibility Definition Document (CDD)

该公告来自Android安全公告，内容为Android兼容性定义文档（CDD）。CDD是Google制定的Android设备兼容性标准，定义了设备必须满足的硬件和软件要求，以确保应用兼容性和安全性。虽然此公告不涉及具体漏洞，但CDD的更新可

历史摘要 · 未重新核验 · Android Security Bulletin

Tools, build, and related reference

该公告来自 Android 安全公告系列，但标题为“Tools, build, and related reference”，内容指向 Android 构建工具的参考文档页面。页面中未提及任何安全漏洞、CVE 或修复建议，仅提供构建 And

历史摘要 · 未重新核验 · Android Security Bulletin

Latest Compatibility Definition Document (CDD)

安卓兼容性定义文档（CDD）最新版本发布。CDD是谷歌为Android设备制定的兼容性要求，规定了系统行为、硬件规格、API实现等标准。本次更新可能包含对新的Android版本（如Android 16）的兼容性要求调整，例如针对新硬件功能、

历史摘要 · 未重新核验 · Android Security Bulletin

Latest security bulletins

本公告为2026年5月14日发布的Android安全公告。该公告通常包含影响Android操作系统及其组件（如系统框架、内核、媒体框架、蓝牙、Wi-Fi等）的多个安全漏洞修复。由于公告缺乏具体漏洞详情，无法提供更多技术细节。建议用户关注官方

历史摘要 · 未重新核验 · Android Security Bulletin

update the software on your Mac

苹果公司于2026年5月14日发布了一项安全公告，提醒用户更新Mac上的软件。该公告未提供具体的漏洞详情或CVE编号，但强调了及时安装安全更新的重要性，以保护设备免受潜在威胁。公告建议用户通过系统设置中的软件更新功能或访问苹果官方网站获取最

历史摘要 · 未重新核验 · Apple Security Releases