2026-07-15 归档

今日共收录 995 条安全情报,包含 81 个 CVE,528 篇安全通告,以及 87 篇研究论文。

← 返回归档列表
安全公告2026-07-15 发布INFO

【安全通告】Linux Kernel "GhostLock" 本地权限提升漏洞风险通告(CVE-2026-43499)

CVE-2026-43499

【安全通告】Linux Kernel "GhostLock" 本地权限提升漏洞风险通告(CVE-2026-43499)

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-07-14 发布INFO

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

CVE-2026-41109

Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

CVE-2026-58529

Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Microsoft Office Information Disclosure Vulnerability

CVE-2026-55121

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Network Address Translation (NAT) Spoofing Vulnerability

CVE-2026-56181

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Boot Loader Security Feature Bypass Vulnerability

CVE-2026-58638

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Client-Side Caching Elevation of Privilege Vulnerability

CVE-2026-58637

Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-58634

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-58633

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2026-58632

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2026-58629

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Wireless Network Manager Elevation of Privilege Vulnerability

CVE-2026-58628

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networki

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows DHCP Server Denial of Service Vulnerability

CVE-2026-58627

Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2026-58626

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Sensor Data Service Elevation of Privilege Vulnerability

CVE-2026-58619

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Visual Studio Remote Code Execution Vulnerability

CVE-2026-47305

Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-58594

Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2026-58541

Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate pr

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Universal Print Management Service Elevation of Privilege Vulnerability

CVE-2026-58543

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Media Remote Code Execution Vulnerability

CVE-2026-58542

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC