2026-10-30 归档

今日共收录 1854 条安全情报,包含 1458 个 CVE,156 篇安全通告,以及 125 篇研究论文。

← 返回归档列表
漏洞预警2026-10-13 发布HIGH

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85849

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized a

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85850

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

CVE-2026-85851

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-85852

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-85853

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-85854

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-85855

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

CVE-2026-85856

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code ov

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-85857

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclos

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-85858

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.

CVE-2026-85859

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a n

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85860

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85861

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85863

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-85865

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

来源摘录 · NVD

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 An adjacent Fibre Channel fabric actor that...

CVE-2026-63889

In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_fc: Widen FPIN pname walker co

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.

CVE-2026-83747

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-83749

Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83750

Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate pr

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-83751

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD