2026-10-30 归档

今日共收录 1854 条安全情报,包含 1458 个 CVE,156 篇安全通告,以及 125 篇研究论文。

← 返回归档列表
漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.

CVE-2026-83709

Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83710

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-83726

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-83727

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.

CVE-2026-83728

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofi

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83732

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

CVE-2026-83733

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85829

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

CVE-2026-85830

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.

CVE-2026-85831

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-85832

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to el

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-85833

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-85834

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.

CVE-2026-85840

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose in

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

CVE-2026-85841

Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVE-2026-85842

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privile

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-85843

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85846

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

CVE-2026-85847

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a ne

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-85848

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to el

来源摘录 · NVD