Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
2026-09-23 归档
今日共收录 1513 条安全情报，包含 580 个 CVE，548 篇安全通告，以及 93 篇研究论文。
← 返回归档列表CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
CVE-2026-0307
CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
【安全通告】Linux Kernel vhost "Vghost" 本地权限提升漏洞风险通告（CVE-2026-74580）
CVE-2026-74580
【安全通告】Linux Kernel vhost "Vghost" 本地权限提升漏洞风险通告（CVE-2026-74580）
libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow
CVE-2026-88807
libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow
libX11 XkbGetMap Reply Heap-based Buffer Overflow
CVE-2026-88806
libX11 XkbGetMap Reply Heap-based Buffer Overflow
Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
CVE-2026-90898
A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allow
Metrics Failure in LLM-Based Code Vulnerability Repair: An Empirical Study and a Change-Aware Screen
该论文针对大语言模型（LLM）自动修复 C/C++ 安全漏洞的评测方法提出质疑。编译通过率（compile rate）长期被当作衡量修复进展的常用代理指标，但作者认为它在单函数漏洞修复场景中科学上不可靠。为验证这一观点，他们围绕 Big-V
SyzHarness: Patch-Based Kernel Bug Reproduction with LLM-Synthesized Fuzzing Harnesses
本文针对 Linux 内核漏洞自动化复现这一长期难题提出 SyzHarness 框架。内核漏洞复现是缺陷分诊、补丁验证与回归测试的关键环节，但其实现有效且高效的自动化仍十分困难。作者指出核心挑战有两点：一是复现程序必须先恢复出能够到达脆弱状
I Prove, Therefore I Am: Spatiotemporal Multi-Party Computation
该论文首次提出并研究了时空安全多方计算（spatiotemporal MPC），将传统 MPC 的输入从纯数字数据扩展到依赖物理事实（如参与方位置、时间、运动轨迹）的场景。核心问题在于：协议不仅要隐藏这些时空信息，还必须保证其物理一致性——
Staged Multi-step UTXO Workflows via Recursive Invariants
该论文研究无状态 UTXO 执行模型下的多步工作流（multi-step workflow）一致性问题。UTXO 式执行只依据交易自身的本地数据与被引用的历史数据完成验证，天然支持并行验证，并使序列化体积与权重核算可预测。但多步工作流的本质
On the Construction of Trapdoor Claw-Free Functions with Certifiable Key
本文研究陷门无爪函数（TCF, Trapdoor Claw-Free Functions）的密钥可信性问题。TCF 是经典—量子密码交互的核心原语，量子性证明（proof of quantumness）、量子同态加密、可验证随机性等协议都建
Pattern-level Differential Privacy for High-utility Complex Event Processing
该论文聚焦复杂事件处理（CEP）系统中的隐私保护问题。CEP 引擎从高速事件流中检测模式（如事件序列、时序关联、聚合条件），而现有的隐私保护机制（PPM）通常对整条数据流或单个事件施加统一噪声，限制性过强：隐私预算被平摊到大量与最终模式无关
SoK: From Finding to Deployment: Systematizing the OS Kernel Bug Lifecycle
本文是一篇系统化知识（SoK）论文，聚焦 Linux 内核缺陷从发现到部署的完整生命周期。背景是：近年来自动化内核缺陷发现能力快速提升，以 syzbot 为代表的持续模糊测试与静态分析系统，已能以远超下游处理能力的规模持续暴露 Linux
FASTAR: FRI Accelerator for Scalable Transparent ARguments of Knowledge
该论文关注零知识证明（ZKP）基础设施正在经历的范式转移：从 Groth16 等依赖可信设置、且面对量子对手不安全的经典 zk-SNARK，转向以 zk-STARK 为代表的透明、后量子安全构造。zk-STARK 仅依赖抗碰撞哈希函数即可获
Trust in Edge-Enabled IoT Security: Features, Challenges and Research Directions
该论文是一篇系统性综述，聚焦于边缘使能（edge-enabled）物联网环境中的信任管理（trust management）问题。研究背景是：物联网为人类生活与工业生产提供了自主智能、泛在连接与可用性，而为了支撑时延敏感、资源受限的应用，I
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attac...
CVE-2026-95862
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi g
A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) at...
CVE-2026-95861
A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniF
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack...
CVE-2026-77558
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi ga
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack...
CVE-2026-77556
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi ga
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attac...
CVE-2026-77555
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi g