2026-09-17 归档

今日共收录 2425 条安全情报，包含 1381 个 CVE，651 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-15 发布INFO

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected p...

CVE-2026-92240

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untag

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

CVE-2026-92239

A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbir

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, ...

CVE-2026-92238

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety viol

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO

Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTTP/2 read loop parses a frame’s 24-bit declared length but waits to buffer the entire pa...

CVE-2026-88975

Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTTP/2 read loop parses a frame’s

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-15 发布INFO

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Easily exp...

CVE-2026-87289

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Support

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit v...

CVE-2026-87288

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is aff

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit v...

CVE-2026-87287

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is aff

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-09-15 发布INFO

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit v...

CVE-2026-87286

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is aff

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-09-15 发布INFO