2026-10-30 归档
今日共收录 1854 条安全情报,包含 1458 个 CVE,156 篇安全通告,以及 125 篇研究论文。
← 返回归档列表 漏洞预警2026-10-22 发布MEDIUM
CVE-2026-115398
Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileS
来源摘录 · NVD
漏洞预警2026-10-22 发布MEDIUM
CVE-2026-115503
Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstal
来源摘录 · NVD
漏洞预警2026-09-22 发布MEDIUM
CVE-2026-88010
Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, checkPassword in pkg/middlewar
来源摘录 · NVD
漏洞预警2026-10-13 发布HIGH
CVE-2026-83784
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over
来源摘录 · NVD
漏洞预警2026-10-22 发布MEDIUM
CVE-2026-115396
Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIcon
来源摘录 · NVD
漏洞预警2026-10-22 发布MEDIUM
CVE-2026-115395
Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that e
来源摘录 · NVD
漏洞预警2026-10-22 发布MEDIUM
CVE-2026-115394
Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers
来源摘录 · NVD
漏洞预警2026-10-13 发布HIGH
CVE-2026-96951
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthori
来源摘录 · NVD
漏洞预警2026-10-13 发布HIGH
CVE-2026-83785
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
来源摘录 · NVD
漏洞预警2026-10-13 发布MEDIUM
CVE-2026-83786
Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose i
来源摘录 · NVD
漏洞预警2026-10-13 发布MEDIUM
CVE-2026-83787
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security
来源摘录 · NVD
漏洞预警2026-10-13 发布MEDIUM
CVE-2026-83788
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
来源摘录 · NVD
漏洞预警2026-08-11 发布MEDIUM
CVE-2026-73070
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c acce
来源摘录 · NVD
漏洞预警2026-10-13 发布MEDIUM
CVE-2026-85866
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker
来源摘录 · NVD
漏洞预警2026-10-13 发布HIGH
CVE-2026-85867
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileg
来源摘录 · NVD
漏洞预警2026-10-13 发布HIGH
CVE-2026-85868
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
来源摘录 · NVD
漏洞预警2026-10-13 发布HIGH
CVE-2026-85869
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loc
来源摘录 · NVD
漏洞预警2026-10-13 发布HIGH
CVE-2026-85870
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges
来源摘录 · NVD
漏洞预警2026-10-13 发布HIGH
CVE-2026-85871
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
来源摘录 · NVD
漏洞预警2026-10-13 发布HIGH
CVE-2026-85872
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
来源摘录 · NVD