2026-10-30 归档

今日共收录 1854 条安全情报,包含 1458 个 CVE,156 篇安全通告,以及 125 篇研究论文。

← 返回归档列表
漏洞预警2026-10-13 发布HIGH

Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83676

Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.

CVE-2026-83521

Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-83522

Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.

CVE-2026-83677

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny servic

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83678

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83682

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70110

Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70109

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.

CVE-2026-83759

Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized a

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83762

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.

CVE-2026-83763

Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to e

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.

CVE-2026-83764

Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83564

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-09-25 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark sched_process_wait argument as nullable do_wait() passes wo->wo_pid to the sched_process_wait tra...

CVE-2026-98059

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark sched_process_wait argument as nullable

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CVE-2026-83765

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.

CVE-2026-83766

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent n

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83767

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-83769

Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-05-23 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @...

CVE-2026-46300

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coa

来源摘录 · NVD

漏洞预警2026-10-22 发布MEDIUM

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limi...

CVE-2026-115397

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFold

来源摘录 · NVD