2026-10-29 归档

今日共收录 3209 条安全情报,包含 2330 个 CVE,388 篇安全通告,以及 93 篇研究论文。

← 返回归档列表
漏洞预警2026-08-11 发布HIGH

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

CVE-2026-62886

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-08-11 发布HIGH

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

CVE-2026-62871

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

来源摘录 · NVD

漏洞预警2026-08-11 发布HIGH

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-62752

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-15 发布MEDIUM

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_banner() in scheduler/ipp.c uses the attacker-controll...

CVE-2026-61702

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, co

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-85933

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85934

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

CVE-2026-85935

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

CVE-2026-85936

Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

CVE-2026-85938

Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information loca

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.

CVE-2026-85939

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-85941

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85945

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

CVE-2026-87691

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87693

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87700

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.

CVE-2026-87702

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87704

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

CVE-2026-87705

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-87706

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges loca

来源摘录 · NVD

漏洞预警2026-08-11 发布HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68807

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

来源摘录 · NVD