Software installed and run as a non-privileged user may conduct improper GPU system calls to...
CVE-2026-45204
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kern
2026-08-07 归档
今日共收录 1483 条安全情报，包含 647 个 CVE，430 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate...
CVE-2026-65668
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a netwo
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import...
CVE-2026-7405
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-B
Improper limitation of a pathname to a restricted directory ('path traversal') in Application...
CVE-2026-49163
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows a
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds...
CVE-2026-8325
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A ma
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-15805
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized...
CVE-2026-62918
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a...
CVE-2026-7406
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance...
CVE-2026-62836
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized
Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker...
CVE-2026-17264
Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of
Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated...
CVE-2026-70636
Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access th
FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow...
CVE-2026-70628
FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtit
FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write...
CVE-2026-70632
FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native G
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the...
CVE-2026-70634
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression revers
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability...
CVE-2026-70633
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compres
Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level...
CVE-2026-70559
Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation t
FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read...
CVE-2026-70629
FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the na
FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory...
CVE-2026-70631
FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in
diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any...
CVE-2026-70557
diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any @TableField column of
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability...
CVE-2026-70635
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authentica