2026-10-14 归档

今日共收录 1875 条安全情报,包含 867 个 CVE,609 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-13 发布INFO

Windows Backup Engine Elevation of Privilege Vulnerability

CVE-2026-108135

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVE-2026-108471

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to el

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Windows Autopilot Elevation of Privilege Vulnerability

CVE-2026-108134

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

MessagePack-CSharp Denial of Service Vulnerability

CVE-2026-92707

Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a networ

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Windows Kerberos Elevation of Privilege Vulnerability

CVE-2026-108132

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Active Directory Federation Services (AD FS) Spoofing Vulnerability

CVE-2026-108131

No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofin

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

CVE-2026-108133

Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to eleva

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVE-2026-108130

Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to eleva

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-108128

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-108129

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-108127

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-97844

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

.NET Elevation of Privilege Vulnerability

CVE-2026-96225

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileg

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Windows Overlay Filter Elevation of Privilege Vulnerability

CVE-2026-105004

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-97843

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-97842

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-97840

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-97841

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-103575

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-13 发布INFO

Role: DNS Server Information Disclosure Vulnerability

CVE-2026-97839

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC