今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表CVE-2026-72955
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
CVE-2026-72934
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges lo
CVE-2026-91357
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry). Support
CVE-2026-91212
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). S
CVE-2026-91211
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Co
CVE-2026-91210
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The sup
CVE-2026-91209
Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that
CVE-2026-91208
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is aff
CVE-2026-90726
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7
CVE-2026-88967
A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-contro
CVE-2026-88858
A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression (uncontr
CVE-2026-87399
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The sup
CVE-2026-70277
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
CVE-2026-83526
The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7
CVE-2026-82962
ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place, by pushing it into
CVE-2026-82961
The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied by a user-mode call
CVE-2026-74969
Race condition, use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Fir
CVE-2026-74949
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Fir
CVE-2026-74946
Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability w
CVE-2026-58255
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.121, a non-administrat