今日共收录 1258 条安全情报，包含 460 个 CVE，421 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-55269
In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. Th
CVE-2026-55266
In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lea
CVE-2026-55265
In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This coul
CVE-2026-49937
In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. Th
CVE-2026-49933
In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth proces
CVE-2026-49885
In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead
CVE-2026-49880
In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This c
CVE-2026-49878
In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in
CVE-2026-45524
In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This coul
CVE-2026-28667
In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lea
CVE-2026-28648
In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of priv
CVE-2026-28647
In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error i
CVE-2026-28641
In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission byp
CVE-2026-28640
In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass du
CVE-2026-28625
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local
CVE-2026-105712
gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted arch
CVE-2026-105646
Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import file could cause excessi
CVE-2026-105645
Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external media inliner
CVE-2026-105644
Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were store
CVE-2026-105643
Ghost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could by