今日共收录 1958 条安全情报，包含 992 个 CVE，550 篇安全通告，以及 113 篇研究论文。
← 返回归档列表CVE-2026-58547
Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges loc
CVE-2026-58544
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-58542
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
CVE-2026-58541
Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate pr
CVE-2026-58540
Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-58536
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-58534
Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges lo
CVE-2026-58532
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-58531
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an aut
CVE-2026-58530
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code local
CVE-2026-58527
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an
CVE-2026-58277
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network
CVE-2026-57973
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perfor
CVE-2026-57968
Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-57102
Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass
CVE-2026-57101
Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an una
CVE-2026-57096
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate
CVE-2026-57095
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate
CVE-2026-57094
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a
CVE-2026-57093
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca