Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler 内存泄漏(CVE-2025-5777)
2026-08-21 归档
今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Chromium: CVE-2026-76047 Type confusion in V8
CVE-2026-76047
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76045 Use after free in WebGL
CVE-2026-76045
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76044 Race condition in USB
CVE-2026-76044
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76043 Incorrect calculation in V8
CVE-2026-76043
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76042 Use of uninitialized resource in GPU
CVE-2026-76042
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76041 Information leak in Skia
CVE-2026-76041
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76038 Type confusion in V8
CVE-2026-76038
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76037 Link following in CredentialProvider
CVE-2026-76037
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76035 Inappropriate implementation in Media
CVE-2026-76035
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76034 Buffer overflow in WebGL
CVE-2026-76034
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76033 Inappropriate implementation in CORS
CVE-2026-76033
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Microsoft Exchange Online Elevation of Privilege Vulnerability
CVE-2026-65801
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges ov
CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access
本篇文章为 CrowdStrike 与 Zscaler 的联合公告，宣布双方将各自的核心能力进行整合，以推动零信任访问架构中的持续身份安全。具体而言，CrowdStrike 的 Falcon 平台（具备 EDR、身份威胁检测与响应能力）与
CrowdStrike Announces Continuous Identity for AI Agents
CrowdStrike 于 2026 年 8 月 21 日通过其官方博客宣布推出用于 AI 代理的持续身份产品（Continuous Identity for AI Agents）。该产品旨在解决 AI 代理在动态环境中的身份认证与访问控制
Exploring and Analyzing Cross Layer DoS Attack Against UDP-based Services on Linux.
本文针对 TCP/IP 协议栈分层架构中一个被忽视的安全风险进行了深入研究。尽管分层设计带来了实现灵活性和独立性，但当共享资源在不同层之间管理不当时，可能引入新的攻击面。作者发现了一种名为 SocketFilled 的跨层共享资源风险：在
SoK: Quantifying Cyber Risk.
本文是一篇系统化知识综述（SoK），旨在量化网络风险。作者提出了一种受结构方程建模启发的因果模型，将网络风险结果解释为由反身性指标测量的潜在因素（如威胁、暴露、安全水平）所导致。首先，利用该模型对现有的实证网络损害研究进行分类，发现网络损害
VULCANBOOST: Boosting ReDoS Fixes through Symbolic Representation and Feature Normalization.
该论文针对正则表达式拒绝服务（ReDoS）漏洞的修复效率与质量不足问题，提出一种名为 VULCANBOOST 的自动化修复增强方法。研究背景是：ReDoS 由正则表达式的灾难性回溯导致，现有自动化修复工具在生成补丁时往往依赖语法改写或简单启
VETEOS: Statically Vetting EOSIO Contracts for the "Groundhog Day" Vulnerabilities.
本论文针对 EOSIO 区块链智能合约中一类被称为 “Groundhog Day” 的漏洞提出静态检测工具 VETEOS。该类漏洞源于 EOSIO 交易执行与回滚机制的特定交互，使得攻击者能够通过重复执行某些操作序列，在合约逻辑中造成非预期
The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues...
CVE-2026-72860
The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP reque