2026-10-31 归档

今日共收录 3279 条安全情报,包含 2996 个 CVE,94 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-29 发布MEDIUM

Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-88078

Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to p

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-62765

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-20942

Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() calipso_skbuff_setattr() adjusts payload_len ...

CVE-2026-99191

In the Linux kernel, the following vulnerability has been resolved: calipso: keep BIG TCP payload_len in calipso_skbuff

来源摘录 · NVD

漏洞预警2026-10-06 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after de_thread() A per-thread CPU timer holds a reference to the PID of t...

CVE-2026-98260

In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after de_thread()

来源摘录 · NVD

漏洞预警2026-09-25 发布INFO

In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Plug clockevents replacement race 朱恺乾 reported and decoded the following race condition whe...

CVE-2026-97925

In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Plug clockevents replacement race

来源摘录 · NVD

漏洞预警2026-09-17 发布INFO

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster validation In ntfs_init_from_boot(), the boot sector's MFT cl...

CVE-2026-90200

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster valid

来源摘录 · NVD

漏洞预警2026-08-22 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers Another challenge with unlo...

CVE-2026-74700

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always acquire rtnl_lock when d

来源摘录 · NVD

漏洞预警2026-08-22 发布INFO

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race ...

CVE-2026-74672

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm lock on huge vmap to av

来源摘录 · NVD

漏洞预警2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT Reject the EXT4_IOC_MOVE_EXT ioctl early if...

CVE-2026-74307

In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4_

来源摘录 · NVD

漏洞预警2026-08-15 发布INFO

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata[1]: ERR050531: VPU_NOC power down handshake...

CVE-2026-72007

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequenc

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software ...

CVE-2026-76418

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

来源摘录 · NVD

漏洞预警2026-05-26 发布HIGH

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 toke...

CVE-2026-5260

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key excha

来源摘录 · NVD

漏洞预警2026-06-23 发布MEDIUM

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (F...

CVE-2026-55653

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group

来源摘录 · NVD

威胁情报2026-10-29 发布INFO

IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment

IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises. The

来源摘录 · Microsoft Threat Intelligence

威胁情报2026-10-30 发布INFO

This month in security with Tony Anscombe – October 2026 edition

The PHP2Shell disclosure and other major cybersecurity news this month brought into relief the need for well-thought-out

来源摘录 · ESET

安全公告2026-10-29 发布INFO

Chrome Beta for iOS Update

Hi everyone! We've just released Chrome Beta 158 (158.0.8127.4) for iOS; it'll become available on App Store in the next

来源摘录 · Google Chrome Releases

威胁情报2026-10-30 发布INFO

Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen

Cryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion

来源摘录 · The Hacker News

学术论文2026-10-29 发布INFO

TextSeal2: Distortion-Free LLM Watermarking with Copula Mixing and Memoryless Races

We present TextSeal2, a distortion-free watermark for large language models that keeps its signal under speculative deco

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

Understanding and Mitigating Role Spoofing in LLMs

Despite growing capabilities, LLMs remain susceptible to prompt injections: malicious inputs that can manipulate or hija

来源摘录 · arXiv cs.CR