Microsoft Copilot Information Disclosure Vulnerability
CVE-2026-55946
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut
2026-09-18 归档
今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。
← 返回归档列表scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
CVE-2026-89865
scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
Use-after-free in DoH stream cleanup code path
CVE-2026-82720
Use-after-free in DoH stream cleanup code path
Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
CVE-2026-81642
Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
CVE-2026-89854
scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC
CVE-2026-85501
Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC
net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()
CVE-2026-90049
net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()
Use-after-free in DoQ stream output buffer on reset re-transmission
CVE-2026-78227
Use-after-free in DoQ stream output buffer on reset re-transmission
gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free
CVE-2026-89789
gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free
CNAME synthesis could lead to heap corruption
CVE-2026-82717
CNAME synthesis could lead to heap corruption
batman-adv: bla: fix freeing of claims on meshif deletion
CVE-2026-89948
batman-adv: bla: fix freeing of claims on meshif deletion
ftrace: Take trace_array reference before accessing its ftrace_ops
CVE-2026-90002
ftrace: Take trace_array reference before accessing its ftrace_ops
drm/amdkfd: Add TLB flush after MES queue eviction/suspension
CVE-2026-89811
drm/amdkfd: Add TLB flush after MES queue eviction/suspension
USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
CVE-2026-90020
USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
media: go7007: defer the ALSA v4l2 put until card release
CVE-2026-89890
media: go7007: defer the ALSA v4l2 put until card release
powerpc/kexec_file: Prevent kexec range truncation
CVE-2026-89962
powerpc/kexec_file: Prevent kexec range truncation
scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
CVE-2026-89849
scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()
CVE-2026-89833
f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()
staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
CVE-2026-90018
staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
scsi: qla2xxx: Don't query firmware state while chip is down
CVE-2026-89850
scsi: qla2xxx: Don't query firmware state while chip is down