今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-88084
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a
CVE-2026-88083
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88082
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88081
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-87938
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log all
CVE-2026-87346
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plu
CVE-2026-86959
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7,
CVE-2026-86954
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,
CVE-2026-86948
This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An a
CVE-2026-86944
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.
CVE-2026-86935
This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be
CVE-2026-85919
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-84582
A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Gold
CVE-2026-81627
A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias rem
CVE-2026-7005
WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows at
CVE-2026-79884
A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypas
CVE-2026-79883
A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent at
CVE-2026-79882
There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code
CVE-2026-79881
An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote
CVE-2026-79880
A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges