2026-08-01 归档

今日共收录 1220 条安全情报，包含 330 个 CVE，503 篇安全通告，以及 110 篇研究论文。

← 返回归档列表

安全公告2026-07-31 发布INFO

Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation)

CVE-2026-65835

### Summary CVE-2026-22872 (GHSA-qjjm-7j9w-pw72) reported that a Tenant Owner could create cluster-scoped resources (e.g

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-269 #cwe-863 #severity:medium

安全公告2026-07-31 发布INFO

re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)

CVE-2026-67550

## Summary `re2` validates the user-settable `lastIndex` against the subject's **UTF-8 byte length** but then uses it a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-125 #severity:medium

安全公告2026-07-31 发布INFO

Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)

CVE-2026-56819

### Summary A remote, unauthenticated peer can leak one direct `ByteBuf` per HTTP/2 `DATA` frame in applications that e

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-400 #severity:high

安全公告2026-07-31 发布INFO

`nx graph` dev server permissive CORS policy

CVE-2026-54753

## Summary The local HTTP server started by `nx graph` sent `Access-Control-Allow-Origin: *` on every response, letting

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-749 #cwe-942 #severity:medium

安全公告2026-07-31 发布INFO

Wings exposes node configuration secrets through egg configuration-file templating

CVE-2026-52855

### Impact **Type:** Exposure of sensitive information / insufficiently protected credentials leading to privilege esca

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-200 #cwe-522 #severity:critical

安全公告2026-08-01 发布INFO

Firefox browsers

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories

#mozilla #firefox #browser

安全公告2026-08-01 发布INFO

Sign in to Cloud

Sign in to Cloud

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-08-01 发布INFO

Sign Up for Free Cloud Tier

Sign Up for Free Cloud Tier

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

#oracle #database #java

安全公告2026-08-01 发布INFO

iOS 26.4.2 and iPadOS 26.4.2

iOS 26.4.2 and iPadOS 26.4.2

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-08-01 发布INFO

iOS 18.7.8 and iPadOS 18.7.8

iOS 18.7.8 and iPadOS 18.7.8

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-08-01 发布INFO

iOS 18.7.7 and iPadOS 18.7.7

iOS 18.7.7 and iPadOS 18.7.7

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-08-01 发布INFO

iOS 26.4 and iPadOS 26.4

iOS 26.4 and iPadOS 26.4

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-08-01 发布INFO

Background Security Improvements for iOS, iPadOS, and macOS

Background Security Improvements for iOS, iPadOS, and macOS

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-08-01 发布INFO

iOS 16.7.15 and iPadOS 16.7.15

iOS 16.7.15 and iPadOS 16.7.15

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-08-01 发布INFO

iOS 15.8.7 and iPadOS 15.8.7

iOS 15.8.7 and iPadOS 15.8.7

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-08-01 发布INFO

iOS 26.3 and iPadOS 26.3

iOS 26.3 and iPadOS 26.3

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-08-01 发布INFO

iOS 18.7.5 and iPadOS 18.7.5

iOS 18.7.5 and iPadOS 18.7.5

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-08-01 发布INFO

iOS 26.2 and iPadOS 26.2

iOS 26.2 and iPadOS 26.2

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-08-01 发布INFO

iOS 18.7.3 and iPadOS 18.7.3

iOS 18.7.3 and iPadOS 18.7.3

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

安全公告2026-08-01 发布INFO

Compressor 4.11.1

Compressor 4.11.1

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos