今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-105923
A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Typ
CVE-2026-101103
The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold th
CVE-2026-83960
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit
CVE-2026-110078
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit
CVE-2026-28854
The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A mali
CVE-2026-86915
A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to
CVE-2026-86928
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be
CVE-2026-86932
An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app
CVE-2026-86933
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An
CVE-2026-86935
This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be
CVE-2026-86940
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be abl
CVE-2026-86979
A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to a
CVE-2026-83655
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
CVE-2026-83656
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to
CVE-2026-83658
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.
CVE-2026-83659
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized atta
CVE-2026-83654
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to
CVE-2026-83657
Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally
CVE-2026-83651
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
CVE-2026-83680
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.