今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-107176
A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config
CVE-2026-102010
A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, t
CVE-2026-93011
A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a fe
CVE-2026-92824
A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count
CVE-2026-92823
A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through
CVE-2026-92822
A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values th
CVE-2026-76781
A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL po
CVE-2026-42012
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certifi
CVE-2026-14330
Multiple unbounded alloca() calls in the PulseAudio protocol server.
CVE-2026-118952
A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a diff
CVE-2026-118593
A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9
ISC Stormcast For Friday, October 30th, 2026 https://isc.sans.edu/podcastdetail/10158, (Fri, Oct 30th)
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing t
Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetrati
TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connecte
Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after pat
A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recov
The alert is critical. The fix is known. And the ticket sits in a queue for days. Security teams understand the risk, bu
Ahmad Umar Agha, a Syrian Electronic Army hacker known online as "Th3Pr0," has been sentenced by a U.S. federal court to
Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.