2026-10-21 归档

今日共收录 2917 条安全情报,包含 2077 个 CVE,435 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-20 发布INFO

net: systemport: Fix buffer overflow in bcm_sysport_get_stats()

CVE-2026-98808

net: systemport: Fix buffer overflow in bcm_sysport_get_stats()

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type

CVE-2026-98743

ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

net: xps: reject an out of range traffic class

CVE-2026-98567

net: xps: reject an out of range traffic class

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO

CVE-2026-98455

Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

nfp: hold IPsec RX state under the XArray lock

CVE-2026-98561

nfp: hold IPsec RX state under the XArray lock

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF

CVE-2026-98840

vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

nfc: nfcmrvl: validate helper command length before pull

CVE-2026-98583

nfc: nfcmrvl: validate helper command length before pull

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

usb: core: clear both ep_in and ep_out for non-ep0 control endpoints

CVE-2026-98763

usb: core: clear both ep_in and ep_out for non-ep0 control endpoints

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

drm/amd/display: guard dc_sink dereferences in MST mode validation

CVE-2026-98786

drm/amd/display: guard dc_sink dereferences in MST mode validation

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

netfilter: nft_flow_offload: drop flowtable reference on init error path

CVE-2026-98851

netfilter: nft_flow_offload: drop flowtable reference on init error path

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup

CVE-2026-98754

tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()

CVE-2026-98499

HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST

CVE-2026-98531

ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-20 发布INFO

Stable Channel Update for Desktop

CVE-2026-113119 · CVE-2026-113317 · CVE-2026-113104 · CVE-2026-113098 · CVE-2026-113072 · CVE-2026-113193 · CVE-2026-113271 · CVE-2026-113082 · CVE-2026-113298 · CVE-2026-113163 · CVE-2026-113101 · CVE-2026-113092 · CVE-2026-113236 · CVE-2026-113141 · CVE-2026-113279 · CVE-2026-113253 · CVE-2026-113134 · CVE-2026-113341 · CVE-2026-113058 · CVE-2026-113303 · CVE-2026-113315 · CVE-2026-113188 · CVE-2026-113097 · CVE-2026-113339 · CVE-2026-113117 · CVE-2026-113322 · CVE-2026-113284 · CVE-2026-113280 · CVE-2026-113242

 The Chrome team is delighted to announce the promotion of Chrome 156 to the stable channel for Windows, Mac and Linux.

历史摘要 · 未重新核验 · Google Chrome Releases

威胁情报2026-10-20 发布INFO

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

CVE-2026-106173

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw i

历史摘要 · 未重新核验 · The Hacker News

漏洞预警2026-10-21 发布INFO

Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that stores a delegated user-actor token in browser-readable s...

CVE-2026-114070

Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify edge type lightweight and unique schema flags without UP...

CVE-2026-114056

ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte count as wide-character printf precision. A maliciou...

CVE-2026-114041

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 1...

CVE-2026-91494

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 1...

CVE-2026-91493

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). S

历史摘要 · 未重新核验 · NVD