Poisoned into Action: Context Attacks on Typed Decision Workflows
Typed decision interfaces restrict models to predefined actions, yet schema-valid choices can still trigger policy-viola
2026-10-14 归档
今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。
← 返回归档列表From Observations to Authorized Actions: Measuring Source Information in Android Agents
Android agents read content from applications and web pages and act on it with the user's authority, yet they cannot rel
Training-Data Extraction from Genomic Language Models
Genomic language models generate long nucleotide continuations from short prefixes, exposing a direct route for studying
Accuracy and Uncertainty in Machine Deception Detection (Research White Paper)
A deception detector is only as useful as the trust its alarms deserve. Like a polygraph, detectors that read a language
Asymptotics of Random-Lattice Enumeration: Beyond HKZ via Dense Sublattices
To bridge the gap between worst-case and heuristic analyses of lattice enumeration, we study the sizes of (unpruned) enu
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
CVE-2026-105727
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an au
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
CVE-2026-105726
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
CVE-2026-105725
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-105723
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privil
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-105722
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-105720
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a networ
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-105719
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a ne
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-105718
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105717
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105716
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-105715
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105714
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.
CVE-2026-105713
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-105599
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105598
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.