今日共收录 1483 条安全情报，包含 593 个 CVE，506 篇安全通告，以及 97 篇研究论文。
← 返回归档列表CVE-2026-62804
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-62801
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthori
CVE-2026-62762
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a networ
CVE-2026-62759
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjace
CVE-2026-62744
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a
CVE-2026-62706
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-62697
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-62694
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-58649
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-58611
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.
CVE-2026-58600
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges loc
CVE-2026-58599
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
CVE-2026-57099
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service ove
CVE-2026-57098
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose infor
CVE-2026-56198
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
CVE-2026-56177
Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
CVE-2026-56172
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
CVE-2026-54611
InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution (R
CVE-2026-50349
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Functio
CVE-2026-48707
InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forg