2026-10-29 归档

今日共收录 3209 条安全情报,包含 2330 个 CVE,388 篇安全通告,以及 93 篇研究论文。

← 返回归档列表
漏洞预警2026-10-29 发布MEDIUM

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feature.properties[<template-token>]' parameter in all versio...

CVE-2026-103485

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'feat

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unex...

CVE-2026-113939

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2.

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpe...

CVE-2026-112708

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a malicious disk image may cause unexpected sys...

CVE-2026-112544

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2.

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

This issue was addressed with improved file handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be abl...

CVE-2026-112484

This issue was addressed with improved file handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously ...

CVE-2026-112471

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequ

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the lo...

CVE-2026-112457

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An unprivileged attacker may...

CVE-2026-112438

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execut...

CVE-2026-112427

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A r

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a c...

CVE-2026-118335

Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to pote

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (...

CVE-2026-118330

Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arb

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

Memory corruption in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HT...

CVE-2026-113180

Memory corruption in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to e

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. ...

CVE-2026-113170

Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute ar

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a few bytes past a name buffer when converting names to and f...

CVE-2026-93011

A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a fe

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does not check who sent the query. A host on the local network ...

CVE-2026-93010

A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does n

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a crafted FQDN option because it checks the next label length before confirming ...

CVE-2026-93009

A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a crafted FQDN option b

来源摘录 · NVD

漏洞预警2026-10-14 发布HIGH

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FpySequencer STORE directive st...

CVE-2026-92158

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applicati

来源摘录 · NVD

漏洞预警2026-10-14 发布INFO

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. From 4.1.0 until 4.2.0, Svc::GenericHub output-port ...

CVE-2026-92152

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applicati

来源摘录 · NVD

漏洞预警2026-10-20 发布HIGH

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. ...

CVE-2026-91303

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Su

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data.

CVE-2026-86987

An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2.

来源摘录 · NVD