Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder

CVE-2026-55737

Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder

历史摘要 · 未重新核验 · Microsoft MSRC

TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

CVE-2026-58227

TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

历史摘要 · 未重新核验 · Microsoft MSRC

No Title

CVE-2026-59251

No Title

历史摘要 · 未重新核验 · Microsoft MSRC

epmd permanent DoS via EMFILE on accept(2) in erts

CVE-2026-42792

epmd permanent DoS via EMFILE on accept(2) in erts

历史摘要 · 未重新核验 · Microsoft MSRC

TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

CVE-2026-55953

TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

历史摘要 · 未重新核验 · Microsoft MSRC

No Title

CVE-2026-7260

No Title

历史摘要 · 未重新核验 · Microsoft MSRC

No Title

CVE-2026-17543

No Title

历史摘要 · 未重新核验 · Microsoft MSRC

Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()

CVE-2026-64557

Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()

历史摘要 · 未重新核验 · Microsoft MSRC

perf/core: Detach event groups during remove_on_exec

CVE-2026-64556

perf/core: Detach event groups during remove_on_exec

历史摘要 · 未重新核验 · Microsoft MSRC

XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization

CVE-2026-15037

XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization

历史摘要 · 未重新核验 · Microsoft MSRC

Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path

CVE-2026-58023

Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path

历史摘要 · 未重新核验 · Microsoft MSRC

Apache Thrift: c_glib TLS Client Missing Hostname Verification

CVE-2026-48144

Apache Thrift: c_glib TLS Client Missing Hostname Verification

历史摘要 · 未重新核验 · Microsoft MSRC

Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()

CVE-2026-64549

Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()

历史摘要 · 未重新核验 · Microsoft MSRC

crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents

CVE-2026-64544

crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents

历史摘要 · 未重新核验 · Microsoft MSRC

drm/edid: fix OOB read in drm_parse_tiled_block()

CVE-2026-64546

drm/edid: fix OOB read in drm_parse_tiled_block()

历史摘要 · 未重新核验 · Microsoft MSRC

net: usb: net1080: validate packet_len before pad-byte access in rx_fixup

CVE-2026-64547

net: usb: net1080: validate packet_len before pad-byte access in rx_fixup

历史摘要 · 未重新核验 · Microsoft MSRC

Delay Attacks on the German Smart Metering Infrastructure: A Security Analysis of CLS Channel Timing Constraints

本文针对德国智能计量基础设施（SMI）中可控本地系统（CLS）通道的控制信号传输，系统分析了延迟攻击的可行性。研究结合理论分析与实验验证，在基于智能电表网关（SMGW）通用标准保护文件（PP）的威胁模型下，评估了单点及多 CLS 通道同时遭

历史摘要 · 未重新核验 · arXiv cs.CR

Toward Practical Decentralized Proof-of-Location via Physical Witnessing Zones

该论文针对数字服务中位置声称（如人员、设备或资产在特定时间位于特定地点）难以验证和易被伪造的问题，提出并实现了一种基于物理见证区域的去中心化位置证明（Proof-of-Location, PoL）系统。作者在先前理论工作的基础上，将抽象协议

历史摘要 · 未重新核验 · arXiv cs.CR

A Sound Translation from Tamarin to ProVerif: Enabling Comparative Analysis

本文提出一种从形式化验证工具 Tamarin 到 ProVerif 的可信翻译方法，旨在解决二者在底层形式化体系和验证技术上的显著差异，从而支持系统性的对比分析。Tamarin 基于多集重写规则，提供完备且可靠的验证；而 ProVerif

历史摘要 · 未重新核验 · arXiv cs.CR

Game Hopping in Lean

该论文介绍了一个名为 HOPSCOTCH 的 Lean 4 形式化验证框架，用于机械化、计算可靠的基于博弈的密码学证明。研究背景是：传统密码学证明通常依赖游戏跳跃（game-hopping）范式，但手工证明容易出错，且缺乏机器可验证的严密性

历史摘要 · 未重新核验 · arXiv cs.CR