今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-43629
llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path whe
CVE-2026-43628
llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sample
CVE-2026-43627
llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where
CVE-2026-43622
llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1bat
CVE-2026-40037
OpenClaw before 2026.4.8 contains a request body replay vulnerability in fetchWithSsrFGuard that allows unsafe request b
CVE-2024-22047
A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entrie
CVE-2026-69966
Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locall
CVE-2026-69967
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-70198
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-83666
Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certific
CVE-2026-83667
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-83670
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information ove
CVE-2026-83674
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing
CVE-2026-83688
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-83694
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locall
CVE-2026-116181
vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash
CVE-2026-116177
vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated a
CVE-2026-102559
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size v
CVE-2026-96206
Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information local
CVE-2026-83741
Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.