2026-10-29 归档

今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83850

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loc

来源摘录 · NVD

#cve #cwe-122

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83851

Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges

来源摘录 · NVD

#cve #cwe-122

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83852

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-10-22 发布MEDIUM

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDImplicitGrant.validate_authorization_request() checks the client-controlled raw ...

CVE-2026-114619

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDImplicitGrant.validate_

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-22 发布MEDIUM

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.get_audiences() returns an empty list, causing JWT...

CVE-2026-114618

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBeare

来源摘录 · NVD

#cve #cwe-1188 #cwe-287

漏洞预警2026-10-22 发布MEDIUM

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parse_id_token() reads the nonce_supported decision from the untrusted ID ...

CVE-2026-114617

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parse_id_token()

来源摘录 · NVD

#cve #cwe-294 #cwe-807

漏洞预警2026-10-22 发布LOW

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.is_secure_transport() uses a textual prefix comparison ...

CVE-2026-114614

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.securit

来源摘录 · NVD

#cve #cwe-601 #cwe-693

漏洞预警2026-10-22 发布MEDIUM

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthenticationRequest passes the unauthenticated, client-control...

CVE-2026-114620

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthent

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-22 发布MEDIUM

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline characters only from the Subject an...

CVE-2026-114725

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send

来源摘录 · NVD

#cve #cwe-99

漏洞预警2026-10-22 发布HIGH

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserialize(). A session key prefixed with “!” was treated as hav...

CVE-2026-114724

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserial

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-22 发布MEDIUM

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action. rcube_mime::decode_address_list() did ...

CVE-2026-114726

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounc

来源摘录 · NVD

#cve #cwe-99

漏洞预警2026-03-26 发布HIGH

A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive m...

CVE-2026-2100

A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a

来源摘录 · NVD

#cve #cwe-824

漏洞预警2026-10-22 发布HIGH

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. SVG and EPS were accepted as valid image types fo...

CVE-2026-114727

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing

来源摘录 · NVD

#cve #cwe-829

漏洞预警2026-10-22 发布MEDIUM

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcube_washtml detected the CSS url(...

CVE-2026-114728

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling o

来源摘录 · NVD

#cve #cwe-184

漏洞预警2026-10-22 发布HIGH

In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit condition (infinite loop). These messages must come from a dev...

CVE-2026-66281

In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit condi

来源摘录 · NVD

#cve #cwe-835

漏洞预警2026-10-22 发布HIGH

In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that will never reach its end condition. These messages must c...

CVE-2026-66282

In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that

来源摘录 · NVD

#cve #cwe-674

漏洞预警2024-01-09 发布MEDIUM

A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and ...

CVE-2024-0340

A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initial

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-05-23 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @...

CVE-2026-46300

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coa

来源摘录 · NVD

#cve #cwe-123 #cwe-456 #cwe-787

漏洞预警2026-08-11 发布HIGH

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

CVE-2026-70354

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-08-11 发布HIGH

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

CVE-2026-62898

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

来源摘录 · NVD

#cve #cwe-416