CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)
CVE-2026-0295
CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)
2026-09-12 归档
今日共收录 1637 条安全情报，包含 801 个 CVE，449 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)
CVE-2026-0296
CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
CVE-2026-0299
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)
CVE-2026-0297
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)
CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)
CVE-2026-0298
CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MED
drm/amdkfd: fix QID bit leak in pqm_create_queue()
CVE-2026-74448
drm/amdkfd: fix QID bit leak in pqm_create_queue()
drm/vmwgfx: reject DX_BIND_QUERY without a DX context
CVE-2026-74445
drm/vmwgfx: reject DX_BIND_QUERY without a DX context
mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()
CVE-2026-80822
mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()
ipvs: fix the checksum validations
CVE-2026-80901
ipvs: fix the checksum validations
ALSA: usb-audio: fix use-after-free in ump_to_endpoint()
CVE-2026-74501
ALSA: usb-audio: fix use-after-free in ump_to_endpoint()
drm/vmwgfx: use check_add_overflow for shader size+offset bound
CVE-2026-80887
drm/vmwgfx: use check_add_overflow for shader size+offset bound
Bluetooth: btintel: Validate length before parsing diagnostics TLV
CVE-2026-74532
Bluetooth: btintel: Validate length before parsing diagnostics TLV
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87564
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87587
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside
Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
CVE-2026-78254
Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
HID: core: fix number/pointer type confusion on long items
CVE-2026-80918
HID: core: fix number/pointer type confusion on long items
io_uring: defer eventfd signaling when queued from a wakeup handler
CVE-2026-80920
io_uring: defer eventfd signaling when queued from a wakeup handler
Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
CVE-2026-80914
Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
CVE-2026-80917
PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
xhci: dbgtty: Fix unregister on tty_register_driver() failure
CVE-2026-80923
xhci: dbgtty: Fix unregister on tty_register_driver() failure