2026-08-03 归档

今日共收录 797 条安全情报,包含 119 个 CVE,373 篇安全通告,以及 59 篇研究论文。

← 返回归档列表
安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge...

CVE-2026-58060

In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This is

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could...

CVE-2026-20478

In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In display, there is a possible memory corruption due to use after free. This could lead to local...

CVE-2026-20473

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability...

CVE-2026-18582

A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This...

CVE-2026-20465

In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (pro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a...

CVE-2026-65875

BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and opens

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and...

CVE-2026-59648

In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also aff

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead...

CVE-2026-20468

In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity...

CVE-2026-59651

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue als

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could...

CVE-2026-20464

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalatio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.

CVE-2026-59652

In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value....

CVE-2026-59650

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and...

CVE-2026-8763

In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In trusted_mem, there is a possible escalation of privilege due to improper input validation....

CVE-2026-20469

In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Telephony, there is a possible information disclosure due to a missing permission check. This...

CVE-2026-20470

In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local inf

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In apusys, there is a possible escalation of privilege due to a missing bounds check. This could...

CVE-2026-20467

In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalatio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This...

CVE-2026-20466

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation...

CVE-2026-59644

In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session...

CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for...

CVE-2026-59641

In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This iss

历史摘要 · 未重新核验 · GitHub Advisory