2026-09-12 归档

今日共收录 1637 条安全情报,包含 801 个 CVE,449 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer set_attribute() populates the secur...

CVE-2026-89444

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isst_if_get_perf_level_mask() and isst_if_get_base_f...

CVE-2026-89443

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos_assoc ioctl isst_if_clos_assoc() validates the user-supplied...

CVE-2026-89442

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos_asso

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the device interrupt and freeing the IRQ preven...

CVE-2026-89441

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure request_irq() registers the SD card-detect inter...

CVE-2026-89440

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Add a NULL check for sst_inst[] To be consistent with other places, add a NULL check fo...

CVE-2026-89439

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Add a NULL check for sst_inst[]

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core po...

CVE-2026-89438

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86: int1092: Fix potential memory leak in sar_probe() The memory allocated for device_mode_info i...

CVE-2026-89437

In the Linux kernel, the following vulnerability has been resolved: platform/x86: int1092: Fix potential memory leak in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[] acpi_pcc_retrieve_biosdata() rejects SI...

CVE-2026-89436

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obt...

CVE-2026-89332

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

Concrete CMS before 9.5.3 evaluated the authorization check for an Express entry submission against the entity of the posted form rather than the entity identified by the dashbo...

CVE-2026-81916

Concrete CMS before 9.5.3 evaluated the authorization check for an Express entry submission against the entity of the po

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::submit() dashboard controller loaded and saved the Page Ty...

CVE-2026-81915

Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft a single link on the site's own domain that sends a user...

CVE-2026-81913

Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery in the Move Multiple Groups feature. The dashboard/users/groups/bulkupdate/confirm() endpoint moved the sel...

CVE-2026-81912

Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery in the Move Multiple Groups feature. The dashboard

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The custom_slot save_template endpoint authorizes the request only against the targ...

CVE-2026-81911

Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The custom_slot save_templ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support also allows the syste...

CVE-2026-81018

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate si

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bound the EC-reported sensor number Each EC FIFO event carries an 8-bit sensor ...

CVE-2026-81017

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bound the EC-reported s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amd_stb_s2d_init() discards the return ...

CVE-2026-81016

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and vali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amd_pmc_probe() registers the LPS0 s2i...

CVE-2026-81015

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks wh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() sk_store() and kek_store() strip ...

CVE-2026-81014

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read in sk_s

历史摘要 · 未重新核验 · NVD