今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-105597
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105596
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105595
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105593
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105592
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105591
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105013
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne
CVE-2026-105009
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges local
CVE-2026-105007
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails
CVE-2026-105006
Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-105005
Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.
CVE-2026-105004
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-105003
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2026-104937
Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective
CVE-2026-104875
Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emerge
CVE-2026-104817
Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss
CVE-2026-104816
Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed
CVE-2026-104584
reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Com
CVE-2026-104344
Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution
CVE-2026-104343
Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-s