今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-83696
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-110080
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit
CVE-2026-83697
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacke
CVE-2026-83695
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information loc
CVE-2026-106632
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit
CVE-2026-106633
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-
CVE-2026-87865
When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to
CVE-2026-87864
Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in the `IMAP APPEND {N}` literal while transmi
CVE-2026-87863
An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later f
CVE-2026-87862
Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequen
CVE-2026-86415
libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already
CVE-2026-119547
Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains an information disclosure vulnerabili
CVE-2026-119546
Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a path traversal vulnerability in res
CVE-2026-81726
NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by us
CVE-2026-112192
MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settin
CVE-2026-110681
Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a n
CVE-2026-110680
Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during can
CVE-2026-114236
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file
CVE-2026-109976
A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AF_UNIX client
CVE-2026-101295
Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs