2026-09-09 归档

今日共收录 1483 条安全情报,包含 593 个 CVE,506 篇安全通告,以及 97 篇研究论文。

← 返回归档列表
漏洞预警2026-09-08 发布INFO

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-69409

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose informati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69407

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-69406

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

CVE-2026-69405

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-69404

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.

CVE-2026-69403

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a netw...

CVE-2026-69402

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally.

CVE-2026-69401

Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges loca...

CVE-2026-69398

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-69397

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69396

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network.

CVE-2026-69395

Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69394

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.

CVE-2026-69393

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-69392

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69391

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

CVE-2026-69390

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

CVE-2026-69389

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges lo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69388

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69386

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a

历史摘要 · 未重新核验 · NVD