2026-08-13 归档

今日共收录 1881 条安全情报,包含 959 个 CVE,493 篇安全通告,以及 113 篇研究论文。

← 返回归档列表
漏洞预警2026-08-11 发布INFO

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu...

CVE-2026-48407

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu...

CVE-2026-48406

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu...

CVE-2026-48405

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu...

CVE-2026-48404

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker ...

CVE-2026-48397

Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...

CVE-2026-47940

Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability

CVE-2026-0465

A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kern

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary co...

CVE-2025-54512

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution.

CVE-2025-0046

Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrar

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the...

CVE-2026-73086

nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the na

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly...

CVE-2026-73084

Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's n...

CVE-2026-73081

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability t...

CVE-2026-71390

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit t...

CVE-2026-71389

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit th...

CVE-2026-71387

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

is affected by a Cross-site Scripting (XSS) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulner...

CVE-2026-71386

is affected by a Cross-site Scripting (XSS) vulnerability that could result in arbitrary code execution in the context o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures...

CVE-2026-71383

is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker coul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network.

CVE-2026-71331

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an un

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a ne...

CVE-2026-70355

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

CVE-2026-70354

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD