2026-10-28 归档

今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-10-26 发布INFO

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execut...

CVE-2026-112427

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A r

历史摘要 · 未重新核验 · NVD

#cve #cwe-287

漏洞预警2026-10-26 发布INFO

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS S...

CVE-2026-112425

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-26 发布INFO

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to...

CVE-2026-112424

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-26 发布INFO

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS S...

CVE-2026-112423

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-26 发布INFO

A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be a...

CVE-2026-112421

A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2,

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-26 发布INFO

An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.

CVE-2026-112417

An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a mal

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-26 发布INFO

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, ...

CVE-2026-112416

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-26 发布INFO

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS...

CVE-2026-112415

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2

历史摘要 · 未重新核验 · NVD

#cve #cwe-787

漏洞预警2026-10-26 发布INFO

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequo...

CVE-2026-112414

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-26 发布INFO

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS S...

CVE-2026-112413

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-26 发布INFO

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may...

CVE-2026-112410

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-26 发布INFO

A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three ...

CVE-2025-13833

A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and

历史摘要 · 未重新核验 · NVD

#cve #cwe-295

漏洞预警2026-10-26 发布INFO

Some externally supplied values stored by the device may be rendered in the web interface without sufficient output encoding. An attacker who can influence one of these values c...

CVE-2026-70382

Some externally supplied values stored by the device may be rendered in the web interface without sufficient output enco

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-26 发布INFO

An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthentica...

CVE-2026-70381

An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-devi

历史摘要 · 未重新核验 · NVD

#cve #cwe-290

漏洞预警2026-10-26 发布INFO

A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network acces...

CVE-2026-70380

A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE

历史摘要 · 未重新核验 · NVD

#cve #cwe-400

漏洞预警2026-10-26 发布INFO

The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical length. When verifying an ECDSA signature, jose_jwk_kty_ec:verify/4 in src/jwk...

CVE-2026-65632

The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical length. When verifyin

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-10-26 发布INFO

Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion denial of service by submitting a crafted RSA JSON Web Key....

CVE-2026-65631

Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion de

历史摘要 · 未重新核验 · NVD

#cve #cwe-407

漏洞预警2026-10-26 发布INFO

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fal...

CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key throug

历史摘要 · 未重新核验 · NVD

#cve #cwe-208

漏洞预警2026-10-26 发布INFO

Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a password-encrypted private-key export to recover the private key...

CVE-2026-65629

Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a passwor

历史摘要 · 未重新核验 · NVD

#cve #cwe-916

漏洞预警2026-10-26 发布INFO

jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKs. Its first function clause only matches when both JWKs carry...

CVE-2026-65628

jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKs. It

历史摘要 · 未重新核验 · NVD

#cve #cwe-674