Alert for CVE-2022-21500
CVE-2022-21500
Alert for CVE-2022-21500
2026-10-14 归档
今日共收录 1875 条安全情报，包含 867 个 CVE，609 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Alert for CVE-2021-44228
CVE-2021-44228
Alert for CVE-2021-44228
Linux 内核提权 CVE-2026-31431(copy-fail)
CVE-2026-31431
Linux 内核提权 CVE-2026-31431(copy-fail)
Alert for CVE-2026-35273
CVE-2026-35273
Alert for CVE-2026-35273
Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing
CVE-2026-93433
Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing
Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
CVE-2026-108266
Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
CVE-2026-102010
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
Gcc: libstdc++ integer overflow in `new` operator
CVE-2026-95619
Gcc: libstdc++ integer overflow in `new` operator
Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
CVE-2026-108267
Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters
CVE-2026-85013
Environment-modules: command injection in environment-modules bash completion via malicious module names containing shel
Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
CVE-2026-107655
Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix
CVE-2026-26158 · CVE-2026-108119
Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored.
CVE-2026-108985
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_z
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992.
CVE-2026-108976 · CVE-2026-79992
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has
wifi: mac80211: don't allow injecting frames wider than the chanctx
CVE-2026-98329
wifi: mac80211: don't allow injecting frames wider than the chanctx
Microsoft QUIC Remote Code Execution Vulnerability
CVE-2026-105016
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
.NET Framework Tampering Vulnerability
CVE-2026-97801
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering ov
Microsoft Office OneNote Remote Code Execution Vulnerability
CVE-2026-97781
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows a
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2026-108463
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feat
Microsoft Windows Search Component Elevation of Privilege Vulnerability
CVE-2026-108136
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.