2026-08-23 归档

今日共收录 968 条安全情报,包含 250 个 CVE,385 篇安全通告,以及 68 篇研究论文。

← 返回归档列表
漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattr_prepare() The check that fs-verity is avail...

CVE-2026-74596

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enable

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() fscrypt_ioctl_set_policy() c...

CVE-2026-74595

In the Linux kernel, the following vulnerability has been resolved: fscrypt: use the mount idmap for the owner check in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() psi_schedule_rtpoll_work() is called locklessly from...

CVE-2026-74594

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpoll_timer in psi_cgroup_fre

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Take cgroup_lock() first in scx_cgroup_lock() scx_cgroup_lock() write-locks scx_cgroup_ops_rwsem...

CVE-2026-74593

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Take cgroup_lock() first in scx_cgroup_l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate file_truncate and path_truncate hooks Instantiate the file_truncate and path_truncate LSM ...

CVE-2026-74592

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate file_truncate and path_truncate ho

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: __filemap_add_folio() restore index before retrying In __filemap_add_folio()'s split-a-conflict...

CVE-2026-74591

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: __filemap_add_folio() restore index bef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions The BPF verifier and the dynptr abstraction ensu...

CVE-2026-74590

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpf_get_fsverity_digest() dynptr assu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk_redir use-after-free in send verdict sk_psock_msg_verdict() takes a socket reference f...

CVE-2026-74589

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk_redir use-after-free in send v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk->transport in step with the list it is queued on __sctp_outq_flush_rtx() moves a gap-acked...

CVE-2026-74588

In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk->transport in step with the list i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addip_last_asconf caches the outstanding outbound ASCONF ch...

CVE-2026-74587

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk ad

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sctp: clear new_transport when removing a peer sctp_process_asconf_param() stores a newly added peer transp...

CVE-2026-74586

In the Linux kernel, the following vulnerability has been resolved: sctp: clear new_transport when removing a peer sct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound the DROM dual link port number before indexing sw->ports tb_drom_parse_entry_port() vali...

CVE-2026-74585

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound the DROM dual link port number b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.

CVE-2026-77992

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateCommen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in the jsactions feature leads to an stored XSS vector.

CVE-2026-77027

Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.

CVE-2026-76609

Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdateComment en

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 - The onGetEmail endpoint did not perform any access checks.

CVE-2026-76608

Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 - The on

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.3 - ???.

CVE-2026-76607

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.3 - ???.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3 - ???.

CVE-2026-76606

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3 - ???.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.3 - ???.

CVE-2026-76605

Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.3 - ???.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-22 发布INFO

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.3 - The PHP form element is vulnerable to the execution of user prov...

CVE-2026-76604

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.3 - The PHP

历史摘要 · 未重新核验 · NVD