2026-10-30 归档

今日共收录 1854 条安全情报,包含 1458 个 CVE,156 篇安全通告,以及 125 篇研究论文。

← 返回归档列表
漏洞预警2026-10-22 发布MEDIUM

Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive en...

CVE-2026-115398

Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileS

来源摘录 · NVD

漏洞预警2026-10-22 发布MEDIUM

Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk spac...

CVE-2026-115503

Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstal

来源摘录 · NVD

漏洞预警2026-09-22 发布MEDIUM

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, checkPassword in pkg/middlewares/auth/basic_auth.go constructs the BasicAuth singleflig...

CVE-2026-88010

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, checkPassword in pkg/middlewar

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

CVE-2026-83784

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over

来源摘录 · NVD

漏洞预警2026-10-22 发布MEDIUM

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compressi...

CVE-2026-115396

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIcon

来源摘录 · NVD

漏洞预警2026-10-22 发布MEDIUM

Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directo...

CVE-2026-115395

Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that e

来源摘录 · NVD

漏洞预警2026-10-22 发布MEDIUM

Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap memory via an unchecked 32-bit length fi...

CVE-2026-115394

Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-96951

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthori

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83785

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-83786

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose i

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-83787

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-83788

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

来源摘录 · NVD

漏洞预警2026-08-11 发布MEDIUM

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserver_accept()...

CVE-2026-73070

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c acce

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.

CVE-2026-85866

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85867

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileg

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85868

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-85869

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loc

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85870

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-85871

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85872

Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD