DTLS handshake reassembler allocates buffer from unchecked 24-bit length
CVE-2026-59646
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This is
2026-08-04 归档
今日共收录 1122 条安全情报，包含 327 个 CVE，410 篇安全通告，以及 104 篇研究论文。
← 返回归档列表CRMF/CMP password-MAC honours unbounded iteration count
CVE-2026-59647
In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects
OpenPGP Argon2 S2K honours attacker-chosen memory and passes
CVE-2026-59648
In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also aff
OpenPGP user-attribute subpacket length bounded only by JVM max memory
CVE-2026-59649
In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issu
MTI/A0 DH agreement exponentiates unvalidated peer value
CVE-2026-59650
In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects
BKS keystore accepts legacy version with 16-bit integrity MAC key
CVE-2026-59651
In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue als
LDAP filter injection in legacy jdk1.4 LDAPStoreHelper
CVE-2026-59652
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.
BKS/UBER keystore allocates from untrusted lengths before integrity check
CVE-2026-12185
In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This i
Name Constraints bypass via trailing dot in rfc822Name and URI
CVE-2026-8763
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also a
PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input
CVE-2026-15055
In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also a
Compatibility Test Suite (CTS)
本次条目来自 Android Security Bulletin 中关于 Compatibility Test Suite (CTS) 的说明。CTS 是 Android 兼容性测试套件，用于验证设备实现是否符合 Android 兼容性定义
Compatibility Definition Document (CDD)
本次来自Android安全公告的内容是发布了《兼容性定义文档》（Compatibility Definition Document, CDD）。该文档是Android生态系统的权威参考，定义了实现Android兼容性所需的硬件、软件、API
Tools, build, and related reference
该条目来自 Android 安全公告（Android Security Bulletin）的“工具、构建及相关参考”（Tools, build, and related reference）页面。该页面主要提供 Android 平台构建过程
Latest Compatibility Definition Document (CDD)
本公告为 Android 安全公告（Android Security Bulletin）发布的“最新兼容性定义文档（Latest Compatibility Definition Document, CDD）”更新通知。CDD 是 Andr
Latest security bulletins
本输入仅提供了 Android Security Bulletin 的官方公告页面信息（发布于2026-08-04），标题为“Latest security bulletins”，来源为 Android 官方安全公告。内容摘要为空，未列出具
update the software on your Mac
Apple 安全团队于 2026 年 8 月 4 日发布了一则安全更新公告，标题为 'update the software on your Mac'。该公告来自 Apple 官方安全发布页面，核心建议是用户尽快更新 Mac 上的软件。然而
update the software on your iPhone or iPad
苹果官方安全发布页面发布了一则标题为“update the software on your iPhone or iPad”的公告，提醒用户更新其 iPhone 或 iPad 上的系统软件。该公告来自 Apple Security Rele
submit your research
该输入仅包含一个标题为“submit your research”的条目，来源标注为 Apple Security Releases，并提供了一个指向 Apple 支持页面的 URL。然而，输入的正文/摘要为空，未提供任何漏洞描述、受影响组
Get help with security issues
本输入来自 Apple 官方安全发布页面，标题为“Get help with security issues”，发布于 2026-08-04。该页面旨在为用户提供获取安全问题帮助的官方渠道，可能包括联系 Apple 安全团队、报告安全漏洞的
Background Security Improvements
本次公告来自苹果官方安全发布渠道，标题为“Background Security Improvements”，属于“后台安全改进”类别的公告。此类公告通常用于描述苹果在操作系统或内置组件中实施的底层安全加固，这些加固可能涉及内存管理、沙盒隔