Concurrent GSS-TSIG messages corrupt memory
CVE-2026-94300
Concurrent GSS-TSIG messages corrupt memory
2026-10-30 归档
今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表Amplified resource exhaustion in inbound message processing
CVE-2026-19630
Amplified resource exhaustion in inbound message processing
X.Org Server GestureBuildSprite Use-After-Free
CVE-2026-93536
X.Org Server GestureBuildSprite Use-After-Free
X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read
CVE-2026-93524
X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read
X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write
CVE-2026-93523
X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write
X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
CVE-2026-93521
X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow
X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write
CVE-2026-93520
X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write
X.Org Server XFixes Pointer Barrier Event List Buffer Overflow
CVE-2026-93519
X.Org Server XFixes Pointer Barrier Event List Buffer Overflow
X.Org Server XKB ResizeKeyType Numeric Truncation
CVE-2026-93518
X.Org Server XKB ResizeKeyType Numeric Truncation
X.Org Server GLX RenderLarge Heap Buffer Overflow
CVE-2026-93517
X.Org Server GLX RenderLarge Heap Buffer Overflow
.Org Server XInput Passive Grab Use-After-Free
CVE-2026-93516
.Org Server XInput Passive Grab Use-After-Free
.Org Server Present Extension Use-After-Free
CVE-2026-93515
.Org Server Present Extension Use-After-Free
Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE
CVE-2026-92709
Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE
Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
CVE-2026-115889
Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
CVE-2026-115893
Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt
CVE-2026-16762
Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt
Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
CVE-2026-115775
Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Elemen
Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation
CVE-2026-83813
Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation
Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
CVE-2026-115774
Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
CVE-2026-115778
Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation