Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83644
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
2026-10-30 归档
今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.
CVE-2026-83907
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacke
Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
CVE-2026-83908
Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-83909
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an a
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83643
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-83911
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83912
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83913
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.
CVE-2026-83914
Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
CVE-2026-83645
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthori
Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83915
Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
CVE-2026-83916
Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2026-83917
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.
CVE-2026-83646
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4...
CVE-2026-97073
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Secu
Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, f...
CVE-2026-93446
Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue
A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does not set a receive timeout on client connections. A remote attacker can open ...
CVE-2026-93007
A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does not set a receive t
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0...
CVE-2026-91248
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0...
CVE-2026-91246
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0...
CVE-2026-91245
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported