2026-10-12 归档

今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。

漏洞预警2026-10-12 发布INFO

Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.

CVE-2026-21131

Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary act

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkou...

CVE-2026-21130

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attac

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Ch...

CVE-2026-21129

Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout p...

CVE-2026-21128

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attac

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.

CVE-2026-21127

Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers t

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21126

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 al

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.

CVE-2026-21125

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.

CVE-2026-21124

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 al

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before ...

CVE-2026-21123

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with roo

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.

CVE-2026-21122

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.

CVE-2026-21121

Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use th

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.

CVE-2026-21120

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary co

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.

CVE-2026-21119

Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.

CVE-2026-21118

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in sc

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.

CVE-2026-21117

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21116

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21115

Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-b

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.

CVE-2026-21114

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary c

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-12 发布INFO

A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file tinyfilemanager.php. Performing...

CVE-2026-108801

A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_

历史摘要 · 未重新核验 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-10-12 发布INFO

A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulation leads to cross-site request forgery. The attack can b...

CVE-2026-108800

A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulat

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-862