2026-10-14 归档

今日共收录 1875 条安全情报,包含 867 个 CVE,609 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-13 发布INFO

Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi...

CVE-2026-104342

Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the cont

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2026-104341

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2026-104340

Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2026-103967

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2026-103966

Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0, cleanup processing may not execute during file uploads. ...

CVE-2026-103937

Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose ...

CVE-2026-103857

Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose ...

CVE-2026-103856

Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-103578

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-103577

Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-103576

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthoriz

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-103575

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute cod...

CVE-2026-103572

Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Managem

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.

CVE-2026-103569

Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges l...

CVE-2026-103568

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Provid

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

CVE-2026-103567

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-103565

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-103560

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

CVE-2026-103558

Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a netw

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-103555

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privilege

历史摘要 · 未重新核验 · NVD