Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-68782
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut
2026-08-21 归档
今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Azure Data Factory Information Disclosure Vulnerability
CVE-2026-66800
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-66309
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Azure Arc Elevation of Privilege Vulnerability
CVE-2026-65816
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a
Microsoft Fabric Elevation of Privilege Vulnerability
CVE-2026-63509
Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
CVE-2026-65770
Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache
Windows Remote Help Defense Spoofing Vulnerability
CVE-2026-55013
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locall
Microsoft Remote Help Denial of Service Vulnerability
CVE-2026-55015
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.
Microsoft Entra ID Remote Code Execution Vulnerability
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Microsoft Entra ID Elevation of Privilege Vulnerability
CVE-2026-69851
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a
Azure Stack HCI Information Disclosure Vulnerability
CVE-2026-69519
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a networ
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-68789
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut
Azure Data Factory Elevation of Privilege Vulnerability
CVE-2026-62834
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privil
Stable Channel Update for Desktop
CVE-2026-76020 · CVE-2026-76022 · CVE-2026-76021 · CVE-2026-76019 · CVE-2026-76018 · CVE-2026-76023 · CVE-2026-76017
The Stable channel has been updated to 151.0.7922.173/.174 for Windows and Mac and 151.0.7922.173 for Linux, which will
ShadowPath: Lookup-Private Credential Status Verification over Authenticated State
本文提出 ShadowPath，一种面向可验证凭证（Verifiable Credentials）的隐私保护撤销状态验证方案。传统可验证凭证允许持有者直接出示由签发者签名的数字声明，而无需签发者参与每次出示，但撤销机制会破坏这种隐私模型：验
Catastrophic Learning: A New Attack Vector on Continual Learning Networks
本论文针对持续学习（Continual Learning, CL）场景提出了一种新型安全攻击向量。持续学习旨在让深度模型在不遗忘旧知识的情况下从数据流中迭代学习，现有对抗研究主要关注如何重新引发灾难性遗忘，以破坏模型稳定性或可用性。作者发现
Benchmarking Automated Security Patch Backporting: How Far Are We?
该研究针对自动化安全补丁回移（backporting）工具的可泛化性问题展开。尽管现有工具在各自测试集上宣称成功率超过80%，但这些评估多局限于单一仓库或特定版本，导致其在实际跨版本、跨分支、跨仓库场景下的表现未知。作者构建了Porting
SoK: Cross-Chain Transaction Identification and Matching
该论文是一篇关于跨链交易识别与匹配的系统化知识综述（SoK）。随着区块链生态向多链演进，跨链桥、即时加密货币交易所和中心化跨账本平台频繁地在不同链之间转移资产，但这类系统也屡屡成为高价值攻击的目标，并被用于跨链洗钱。与单链交易分析相比，跨链
QUASAR: A Quantum-Classical Neural Network for SAR Satellite Physical-Layer Authentication
本文提出了一种名为 QUASAR 的新型量子-经典混合神经网络架构，用于 X 波段合成孔径雷达（SAR）卫星的物理层认证（PLA）。X 波段（8-12 GHz）SAR 卫星在灾害响应、环境监测和军事侦察中至关重要，但其物理层认证机制尚不完善
Trustworthy mobile edge caching: a blockchain approach to mitigate malicious nodes and incentivize cache sharing
随着移动网络流量的持续增长，边缘服务器上的内容缓存对于降低延迟至关重要。然而，当前面临两大挑战：一是恶意边缘服务器可能删除或篡改缓存内容，二是边缘服务器自身容量有限。为克服容量限制，可引入辅助移动节点贡献其缓存资源，但这些节点可能因自私行为