2026-10-29 归档

今日共收录 3209 条安全情报,包含 2330 个 CVE,388 篇安全通告,以及 93 篇研究论文。

← 返回归档列表
漏洞预警2025-10-07 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: spi: bcm-qspi: return error if neither hif_mspi nor mspi is available If neither a "hif_mspi" nor "mspi" re...

CVE-2023-53658

In the Linux kernel, the following vulnerability has been resolved: spi: bcm-qspi: return error if neither hif_mspi nor

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87708

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

CVE-2026-87709

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-88106

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-88107

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-83790

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.

CVE-2026-83791

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83792

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83793

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authoriz

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83842

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88113

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83588

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-83640

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88118

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker t

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83639

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88121

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88124

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83638

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88128

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88133

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges

来源摘录 · NVD