Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-83740
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
2026-10-30 归档
今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-83739
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-83738
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
CVE-2026-83725
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-83737
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83513
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83736
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83514
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges lo
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83735
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
CVE-2026-83516
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
CVE-2026-83571
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83580
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privile
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-83583
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83586
Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to eleva
In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could submit Basic authentication dat...
CVE-2026-76406
In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected S
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-83587
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-83641
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
CVE-2026-83683
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information ov
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
CVE-2026-83685
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.
CVE-2026-85943
Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized a