2026-06-02 归档

今日共收录 1188 条安全情报,包含 407 个 CVE,402 篇安全通告,以及 101 篇研究论文。

← 返回归档列表
安全公告2026-06-02 发布INFO

In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect...

CVE-2026-0076

In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. This coul

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence...

CVE-2026-0078

In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input va

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due...

CVE-2026-0052

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent...

CVE-2026-0067

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due...

CVE-2026-0080

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service ...

CVE-2026-0074

In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In multiple functions, there is a possible way to access the contacts database due to a SQL...

CVE-2026-0075

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure...

CVE-2026-0045

In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system...

CVE-2026-0044

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an inte

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible...

CVE-2026-0060

In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security...

CVE-2026-0088

In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to mislea

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a...

CVE-2026-0070

In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large...

CVE-2026-0085

In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to imprope

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds...

CVE-2026-0056

In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check. This could lead

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application...

CVE-2026-0077

In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of...

CVE-2026-0079

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In handleBondStateChanged of AdapterService.java, there is a possible sensitive information...

CVE-2026-0050

In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-01 发布INFO

kas checks out SHA-like git branches as valid commits

CVE-2026-47191

### Impact When relying solely on a git commit ID (SHA-1 or SHA-256) to qualify if a checkout of a repository is equival

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-01 发布INFO

rattler has an entry-point path traversal in noarch:python install (arbitrary file write)

CVE-2026-47425

## Summary `EntryPoint::FromStr` in `rattler_conda_types` performs only `.trim()` on the `command` field before the lin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-01 发布INFO

Nezha's authenticated agents can forge service-monitor results for other users' services

CVE-2026-48119

#### Summary Nezha accepts service-monitor `TaskResult` messages from an authenticated agent based only on whether the

历史摘要 · 未重新核验 · GitHub Advisory