2026-07-16 归档

今日共收录 1958 条安全情报,包含 992 个 CVE,550 篇安全通告,以及 113 篇研究论文。

← 返回归档列表
漏洞预警2026-07-14 发布INFO

A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized commands. This co...

CVE-2026-62656

A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was i...

CVE-2026-15757

A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel.

CVE-2026-0515

Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local access to cause a cra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

CVE-2026-55009

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges local

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

CVE-2026-55006

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privile

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

CVE-2026-55005

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of pri...

CVE-2026-59841

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0...

CVE-2026-59840

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 ...

CVE-2026-59839

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM ...

CVE-2026-59837

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to acce...

CVE-2026-59835

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by means of specially crafted HTTP/3 frames. Impact HTTP...

CVE-2026-12523

Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by mea

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated attacker to retriev...

CVE-2025-53379

A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions may allow an authenticated remote attacker to ret...

CVE-2025-43892

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all v

历史摘要 · 未重新核验 · NVD

安全公告2026-07-16 发布INFO

Compatibility Test Suite (CTS)

本公告来自 Android 安全公告,但内容实际上是关于 Compatibility Test Suite (CTS) 的说明。CTS 是 Android 兼容性测试套件,用于确保 Android 设备符合兼容性定义文档 (CDD) 的要求

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-07-16 发布INFO

Compatibility Definition Document (CDD)

Android 兼容性定义文档(CDD)是由 Android 安全公告发布的官方文件,用于定义 Android 设备必须满足的兼容性要求,以确保应用和服务的正常运行。该文档涵盖硬件、软件、API、安全模型等多个方面的标准,是设备制造商、开发

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-07-16 发布INFO

Tools, build, and related reference

本条目来自 Android 安全公告(Android Security Bulletin),是一个关于工具、构建和相关参考的页面。该页面提供了 Android 开源项目(AOSP)的构建系统、参考文档和工具链信息,旨在帮助开发者和安全工程师

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-07-16 发布INFO

Latest Compatibility Definition Document (CDD)

本公告为 Android 兼容性定义文档(CDD)的最新版本发布。CDD 是 Android 生态系统中的关键规范文件,定义了设备必须满足的硬件和软件要求,以确保应用兼容性和系统一致性。更新可能涉及对最新 Android 版本的支持、新硬件

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-07-16 发布INFO

Latest security bulletins

本公告为Android安全公告的最新一期(2026年7月),由Google官方发布。公告通常涵盖Android操作系统及内核、高通组件、Media框架等多个模块的安全补丁,修复可能包括远程代码执行、权限提升、信息泄露等严重漏洞。由于输入中未

历史摘要 · 未重新核验 · Android Security Bulletin

安全公告2026-07-16 发布INFO

update the software on your Mac

Apple 发布了安全更新公告,建议用户更新 Mac 上的软件。该公告未提供具体的漏洞细节、CVE 编号或受影响的产品版本。可能是针对已知安全问题的常规更新。建议用户及时检查并安装最新的系统更新。

历史摘要 · 未重新核验 · Apple Security Releases