2026-10-29 归档

今日共收录 3209 条安全情报,包含 2330 个 CVE,388 篇安全通告,以及 93 篇研究论文。

← 返回归档列表
漏洞预警2026-10-20 发布HIGH

TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href pa...

CVE-2012-20002

TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthen

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70274

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-70280

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

CVE-2026-96865

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an autho

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

CVE-2026-96866

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a ne

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96863

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a p

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-96862

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

CVE-2026-96861

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a ne

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88141

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88139

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88127

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88120

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.

CVE-2026-85905

Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-85906

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-85908

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-85927

Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevat

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVE-2026-85930

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

CVE-2026-85931

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88110

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

CVE-2026-88115

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD