2026-10-08 归档

今日共收录 832 条安全情报,包含 0 个 CVE,435 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-08 发布INFO

Alert for CVE-2022-21500

CVE-2022-21500

Alert for CVE-2022-21500

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-10-08 发布INFO

Alert for CVE-2021-44228

CVE-2021-44228

Alert for CVE-2021-44228

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-10-08 发布INFO

Linux 内核提权 CVE-2026-31431(copy-fail)

CVE-2026-31431

Linux 内核提权 CVE-2026-31431(copy-fail)

历史摘要 · 未重新核验 · 知道创宇 / Seebug

安全公告2026-10-08 发布INFO

Alert for CVE-2026-35273

CVE-2026-35273

Alert for CVE-2026-35273

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

安全公告2026-10-07 发布INFO

Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic

CVE-2026-94655

Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)

CVE-2026-96292

Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)

CVE-2026-96288

Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec

CVE-2026-87117

Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation

CVE-2026-61373

Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)

CVE-2026-94650

Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception

CVE-2026-94642

Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic)

CVE-2026-94658

Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic)

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error

CVE-2026-94651

Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

net: lan743x: fix RX checksum use-after-free

CVE-2026-98239

net: lan743x: fix RX checksum use-after-free

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation

CVE-2026-98306

seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound

CVE-2026-94644

Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

selinux: preserve user SID across nested backing files

CVE-2026-98215

selinux: preserve user SID across nested backing files

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound

CVE-2026-94657

Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

net: bridge: mst: move switchdev call outside rcu

CVE-2026-98301

net: bridge: mst: move switchdev call outside rcu

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc

CVE-2026-98176

drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc

历史摘要 · 未重新核验 · Microsoft MSRC