Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-70128
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
2026-10-29 归档
今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70122
Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-70126
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent net
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.
CVE-2026-70131
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges l
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70132
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privil
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.
CVE-2026-70133
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny servi
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
CVE-2026-70134
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
CVE-2026-70135
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70136
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-70006
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
CVE-2026-70137
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose informatio
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
CVE-2026-70138
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70139
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70140
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-70148
Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information local
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
CVE-2026-70149
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an aut
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70150
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-70151
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70156
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-70158
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access