2026-08-16 归档

今日共收录 1655 条安全情报,包含 947 个 CVE,388 篇安全通告,以及 62 篇研究论文。

← 返回归档列表
安全公告2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix list...

CVE-2026-74518

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix list corruption in allocate_file_re

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix IOPF...

CVE-2026-74520

In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix IOPF group ownership UAF iopf_g

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix leaking...

CVE-2026-74536

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix leaking sk after socket release

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold...

CVE-2026-74529

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_pa_sy

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold...

CVE-2026-74530

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_big_s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't...

CVE-2026-74519

In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized dev_n

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk...

CVE-2026-74537

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_conn_ready

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on...

CVE-2026-74525

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp() to...

CVE-2026-74521

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use memcmp() to compare ClientGUIDs ClientG

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix out-of-bounds...

CVE-2026-74524

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix out-of-bounds page-table walk during

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject...

CVE-2026-74515

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forwarding

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix UAF in...

CVE-2026-74510

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix UAF in pair command cancellati

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

s2n-quic has excessive memory allocation

CVE-2026-10740

s2n-quic is a Rust implementation of the QUIC protocol. An unauthenticated user can attempt to exhaust server memory on

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints

CVE-2026-55156

# Unauthenticated Path Traversal in Dashboard Session Log API Endpoints | Field | Value | | ----------------

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

Token Optimizer MCP: OS command injection in smart_user via username in get-user-info

CVE-2026-55157

### Summary `token-optimizer-mcp` is vulnerable to OS command injection in the `smart_user` tool. The `get-user-info`

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"

CVE-2026-55153

### Impact Prior to version 0.6.0, mchange-commons-java includes a JNDI `ObjectFactory` implementation (`com.mchange.v2.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket

CVE-2026-53657

### Impact On an instance of Lima running with `qemu` driver, an arbitrary user in the VM could access `/run/lima-guesta

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-14 发布INFO

Grav: Unauthenticated denial of service via unbounded image derivative dimensions

CVE-2026-53653

### Summary An unauthenticated visitor exhausts server memory and CPU by requesting an image with oversized resize dimen

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-16 发布INFO

Paper专业的技术文章,安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神,技术分享和热衷解决问题及超越极限,Seebug Paper 期待您的分享。

Paper专业的技术文章,安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神,技术分享和热衷解决问题及超越极限,Seebug Paper 期待您的分享。

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-08-16 发布INFO

Cookie settings

Cookie settings

历史摘要 · 未重新核验 · Mozilla Security Advisories