2026-10-31 归档

今日共收录 3279 条安全情报,包含 2996 个 CVE,94 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
安全公告2026-10-30 发布INFO

Concurrent GSS-TSIG messages corrupt memory

CVE-2026-94300

Concurrent GSS-TSIG messages corrupt memory

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

Amplified resource exhaustion in inbound message processing

CVE-2026-19630

Amplified resource exhaustion in inbound message processing

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

X.Org Server GestureBuildSprite Use-After-Free

CVE-2026-93536

X.Org Server GestureBuildSprite Use-After-Free

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read

CVE-2026-93524

X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write

CVE-2026-93523

X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow

CVE-2026-93521

X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write

CVE-2026-93520

X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

X.Org Server XFixes Pointer Barrier Event List Buffer Overflow

CVE-2026-93519

X.Org Server XFixes Pointer Barrier Event List Buffer Overflow

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

X.Org Server XKB ResizeKeyType Numeric Truncation

CVE-2026-93518

X.Org Server XKB ResizeKeyType Numeric Truncation

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

X.Org Server GLX RenderLarge Heap Buffer Overflow

CVE-2026-93517

X.Org Server GLX RenderLarge Heap Buffer Overflow

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

.Org Server XInput Passive Grab Use-After-Free

CVE-2026-93516

.Org Server XInput Passive Grab Use-After-Free

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

.Org Server Present Extension Use-After-Free

CVE-2026-93515

.Org Server Present Extension Use-After-Free

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE

CVE-2026-92709

Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

Stable Channel Update for Desktop

CVE-2026-119260 · CVE-2026-119261 · CVE-2026-119262 · CVE-2026-119263 · CVE-2026-119264 · CVE-2026-119265 · CVE-2026-119266 · CVE-2026-119267 · CVE-2026-119268 · CVE-2026-119269 · CVE-2026-119270 · CVE-2026-119271 · CVE-2026-119272 · CVE-2026-76024 · CVE-2026-76025 · CVE-2026-76026 · CVE-2026-76027 · CVE-2026-76028 · CVE-2026-76029 · CVE-2026-76030 · CVE-2026-76031

The Stable and Extended Stable channel has been updated to 156.0.8078.79/.80 for Windows and Mac and 156.0.8078.79 to Li

来源摘录 · Google Chrome Releases

漏洞预警2026-10-29 发布HIGH

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives witho...

CVE-2026-118761

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/{run_id}/nodes/{nod...

CVE-2026-118759

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening a crafted incomplete PDF whose standard cross-reference ...

CVE-2026-119203

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can consume excessive memory while parsing a crafted PDF page tree containing many shared resourc...

CVE-2026-119204

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can consume excessive memory while parsi

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning or duplicating a crafted cyclic DictionaryObject. Clone t...

CVE-2026-119205

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-29 发布HIGH

joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.string().email({ multiple: true }) rule uses a separator re...

CVE-2026-118772

joi is a schema description language and data validator for JavaScript. From 17.1.1 until 17.13.9 and 18.3.1, the Joi.st

来源摘录 · NVD / GitHub Advisory / OSV.dev