2026-09-18 归档

今日共收录 2436 条安全情报,包含 1258 个 CVE,779 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-09-18 发布INFO

Alert for CVE-2021-44228

CVE-2021-44228

Alert for CVE-2021-44228

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-09-18 发布INFO

Linux 内核提权 CVE-2026-31431(copy-fail)

CVE-2026-31431

Linux 内核提权 CVE-2026-31431(copy-fail)

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-09-18 发布INFO

Alert for CVE-2026-35273

CVE-2026-35273

Alert for CVE-2026-35273

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-09-17 发布INFO

Azure Billing Elevation of Privilege Vulnerability

CVE-2026-62874

Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges ov

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Database for PostgreSQL Elevation of Privilege Vulnerability

CVE-2026-85878

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a netwo

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

M365 Copilot Information Disclosure Vulnerability

CVE-2026-85887

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose informat

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Portal Spoofing Vulnerability

CVE-2026-83946

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthori

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Microsoft Fabric Elevation of Privilege Vulnerability

CVE-2026-69843

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a netwo

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure AI Foundry Elevation of Privilege Vulnerability

CVE-2026-85889

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges o

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure AI Foundry Elevation of Privilege Vulnerability

CVE-2026-85917

Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a netw

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability

CVE-2026-78501

Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Logic Apps Elevation of Privilege Vulnerability

CVE-2026-70200

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorize

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Cosmos DB Elevation of Privilege Vulnerability

CVE-2026-87701

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB al

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Logic Apps Elevation of Privilege Vulnerability

CVE-2026-83944

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Microsoft 365 Copilot Elevation of Privilege Vulnerability

CVE-2026-85885

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Machine Learning Information Disclosure Vulnerability

CVE-2026-68791

Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Arc Elevation of Privilege Vulnerability

CVE-2026-69399

Azure Arc Elevation of Privilege Vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Microsoft Dataverse Elevation of Privilege Vulnerability

CVE-2026-77903

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a ne

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Microsoft Container Registry Elevation of Privilege Vulnerability

CVE-2026-69865

Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elev

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Arc Elevation of Privilege Vulnerability

CVE-2026-70009

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attac

历史摘要 · 未重新核验 · Microsoft MSRC