今日共收录 398 条安全情报，包含 188 个 CVE，99 篇安全通告，以及 64 篇研究论文。
← 返回归档列表CVE-2026-119250
A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerabil
CVE-2026-119249
A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found i
CVE-2024-5154
A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory
CVE-2026-99185
In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition in split transac
CVE-2026-99177
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Fix page dirtying in sev_gmem_post_popula
CVE-2026-99170
In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copy_tree() leaves out can'
CVE-2026-99164
In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA b
CVE-2026-99148
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last
CVE-2026-99122
In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: validate packet source for connected so
CVE-2026-99116
In the Linux kernel, the following vulnerability has been resolved: net: psp: do not inherit the Rx association on clon
CVE-2026-99109
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject SetEA requests that do not fit
CVE-2026-99107
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix incorrect MFT record pointer passed to nt
CVE-2026-99099
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum #1718 The proces
CVE-2026-99094
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds c
CVE-2026-107565
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving meta
CVE-2026-104715
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a priv
CVE-2026-104047
A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before bei
CVE-2026-104041
A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the
CVE-2026-104040
A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quot
CVE-2026-104029
A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the