2026-07-16 归档

今日共收录 1958 条安全情报,包含 992 个 CVE,550 篇安全通告,以及 113 篇研究论文。

← 返回归档列表
漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, PdoAdapter::doClear() builds a DEL...

CVE-2026-45073

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.4

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.4.24 until 6.4.40, 7.4.12, and 8.0.12, the development profiler file_exc...

CVE-2026-45072

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.4.24 until 6.4.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, Symfony\Component\Mime\Header\Para...

CVE-2026-45070

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.4

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlSanitizer::parse() passes...

CVE-2026-45064

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service.

CVE-2026-15720

In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOA...

CVE-2026-15712

A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server 2026.1.22.0, 2026.2.11.0 allows an attacker with access...

CVE-2026-15642

Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Serve

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve their own pending ...

CVE-2026-15641

Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to disclos...

CVE-2026-15637

Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated user to delete another user's messages via a d...

CVE-2026-15058

Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an aut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthorized changes to t...

CVE-2026-62659

A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connect

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network...

CVE-2026-62655

A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to st

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

CVE-2026-58638

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-58634

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-58633

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privileges lo...

CVE-2026-58628

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networki

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVE-2026-58626

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-58619

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-58613

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.

CVE-2026-58594

Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD