2026-06-10 归档

今日共收录 1730 条安全情报,包含 831 个 CVE,478 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-06-09 发布INFO

Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of se...

CVE-2026-0466

Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Improper access control for register interface in the input-output memory management unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD sec...

CVE-2025-54509

Improper access control for register interface in the input-output memory management unit (IOMMU) could allow a privileg

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality ...

CVE-2026-9212

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A he...

CVE-2026-7383

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy()

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-50508

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform sp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-50507

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a ph

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by placing malicious execut...

CVE-2026-49959

Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows authenticated attackers

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the git_discard function within api/workspace_git.py that allo...

CVE-2026-49958

Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the g

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Hermes WebUI before version 0.51.269 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting ...

CVE-2026-49957

Hermes WebUI before version 0.51.269 contains a workspace boundary bypass vulnerability that allows authenticated attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the...

CVE-2026-49956

Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Hermes WebUI before version 0.51.270 contains a resource exhaustion vulnerability that allows unauthenticated remote attackers to degrade service availability by repeatedly call...

CVE-2026-49955

Hermes WebUI before version 0.51.270 contains a resource exhaustion vulnerability that allows unauthenticated remote att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hard...

CVE-2026-49848

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hard...

CVE-2026-49847

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hard...

CVE-2026-49843

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hard...

CVE-2026-49842

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hard...

CVE-2026-49475

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hard...

CVE-2026-49472

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.

CVE-2026-49161

Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.

CVE-2026-49160

Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-48583

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD