MFSA 2026-78Security Vulnerabilities fixed in Thunderbird 154
MFSA 2026-78Security Vulnerabilities fixed in Thunderbird 154
2026-08-21 归档
今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。
← 返回归档列表MFSA 2026-77Security Vulnerabilities fixed in Firefox ESR 153.1
MFSA 2026-77Security Vulnerabilities fixed in Firefox ESR 153.1
MFSA 2026-76Security Vulnerabilities fixed in Firefox ESR 140.14
MFSA 2026-76Security Vulnerabilities fixed in Firefox ESR 140.14
MFSA 2026-75Security Vulnerabilities fixed in Firefox ESR 115.39
MFSA 2026-75Security Vulnerabilities fixed in Firefox ESR 115.39
MFSA 2026-74Security Vulnerabilities fixed in Firefox 154
MFSA 2026-74Security Vulnerabilities fixed in Firefox 154
【安全通告】Redis 远程代码执行漏洞风险通告
【安全通告】Redis 远程代码执行漏洞风险通告
Early Stable Update for Desktop
The Stable channel has been updated to 152.0.7977.54/.55 for Windows and Mac as part of our early stable release to a sm
Chrome Beta for Desktop Update
The Beta channel has been updated to 152.0.7977.54 for Windows, Mac and Linux.A partial list of changes is available in
【大模型服务平台 TokenHub】服务条款更新及《第三方部署模型服务特别说明》上线通知
【大模型服务平台 TokenHub】服务条款更新及《第三方部署模型服务特别说明》上线通知
Chrome Beta for Desktop Update
The Chrome team is excited to announce the promotion of Chrome 153 to the Beta channel for Windows, Mac and Linux. Chrom
The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/updateCustomer/route.json, which causes the admin authent...
CVE-2026-72843
The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
CVE-2026-69851
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69555
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69400
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorize
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
CVE-2026-68789
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
CVE-2026-68782
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
CVE-2026-66309
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-65816
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a
Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code...
CVE-2026-65770
Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache