2026-10-21 归档

今日共收录 2917 条安全情报，包含 2077 个 CVE，435 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-20 发布INFO

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequ...

CVE-2026-84613

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-20 发布INFO

A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may ...

CVE-2026-84582

A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Gold

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share m...

CVE-2026-84579

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in physica...

CVE-2026-84547

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, mac

历史摘要 · 未重新核验 · NVD

#cve #cwe-20

漏洞预警2026-10-20 发布INFO

This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An ap...

CVE-2026-84508

This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, m

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布INFO

This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to bypas...

CVE-2026-84490

This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker wit

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-10-20 发布INFO

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full s...

CVE-2026-77938

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server sec

历史摘要 · 未重新核验 · NVD

#cve #cwe-526

漏洞预警2026-10-20 发布INFO

Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted user_id HTTP header. Attacke...

CVE-2026-77937

Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-20 发布INFO

Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplyin...

CVE-2026-77935

Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-639

漏洞预警2026-10-20 发布INFO

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 ...

CVE-2026-77934

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands

历史摘要 · 未重新核验 · NVD

#cve #cwe-1188

漏洞预警2026-10-20 发布INFO

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an inte...

CVE-2026-77930

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell comman

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-20 发布INFO

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated ...

CVE-2026-77926

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating s

历史摘要 · 未重新核验 · NVD

#cve #cwe-749

漏洞预警2026-10-20 发布INFO

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause une...

CVE-2026-65396

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoi

历史摘要 · 未重新核验 · NVD

#cve #cwe-119

漏洞预警2026-10-20 发布INFO

The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to ac...

CVE-2026-65379

The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-10-20 发布INFO

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able...

CVE-2026-65372

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-10-20 发布INFO

An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sens...

CVE-2026-65356

An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia

历史摘要 · 未重新核验 · NVD

#cve #cwe-284

漏洞预警2026-10-20 发布INFO

The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching.

CVE-2026-28854

The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A mali

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-20 发布INFO

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.

CVE-2026-28853

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be

历史摘要 · 未重新核验 · NVD

#cve #cwe-269

漏洞预警2026-10-20 发布INFO

An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user data.

CVE-2026-28850

An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be a

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-20 发布INFO

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless prese...

CVE-2026-109444

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run

历史摘要 · 未重新核验 · NVD

#cve #cwe-862