Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
2026-09-04 归档
今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Microsoft Entra ID Elevation of Privilege Vulnerability
CVE-2026-62916
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevat
Entra ID Elevation of Privilege Vulnerability
CVE-2026-83941
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
Azure Cosmos DB Spoofing Vulnerability
CVE-2026-69857
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing ov
Power Automate Elevation of Privilege Vulnerability
CVE-2026-65818
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.
Copilot Studio Elevation of Privilege Vulnerability
CVE-2026-80098
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CVE-2026-83711
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker
Microsoft Fabric Elevation of Privilege Vulnerability
CVE-2026-70178
Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
Azure AI Language Elevation of Privilege Vulnerability
CVE-2026-70352
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges
Microsoft Discovery Studio Information Disclosure Vulnerability
CVE-2026-62906
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep
CVE-2026-19953
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in
Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf
CVE-2026-13732
Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf
A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer
CVE-2026-75538
A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauth
inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth
CVE-2026-74994
inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth
inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception
CVE-2026-74835
inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception
inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length
CVE-2026-73812
inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length
inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i
CVE-2026-73276
inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i
httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems
CVE-2026-73270
httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems
httpc does not bound server-supplied numeric header values before integer conversion
CVE-2026-71562
httpc does not bound server-supplied numeric header values before integer conversion
httpd applies no timeout while receiving a request body, parking a worker on a stalled client
CVE-2026-71380
httpd applies no timeout while receiving a request body, parking a worker on a stalled client