2026-11-01 归档

今日共收录 398 条安全情报,包含 188 个 CVE,99 篇安全通告,以及 64 篇研究论文。

← 返回归档列表
漏洞预警2026-10-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: validate packet source for connected sockets virtio_transport_recv_pkt() looks up sockets fir...

CVE-2026-99123

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: validate packet source for connected

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the port group walk on teardown __br_multicast_disable_port_ctx() and br...

CVE-2026-99117

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the port group w

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flower: validate mask pointer after nla_next() fl_set_enc_opt() iterates the key's nested tu...

CVE-2026-99112

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flower: validate mask pointer after

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in cifs_do_set_acl() cifs_set_acl() validates ACL size using posix_acl_xattr...

CVE-2026-99110

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in cifs_do_set_acl()

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70211

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70271

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

学术论文2026-10-29 发布INFO

Difficulty Calibration Across Time for Membership Inference in Diffusion Models

Modern diffusion models are trained on massive datasets that often include copyrighted or private images. Membership inf

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

Power Adjusting Games Under Block-Dependent Pool Payout Schemes

Advanced power adjusting block withholding attacks such as PAW and T-PAW have been analyzed so far under a global-reset

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

Efficient Scalable Oversight via Rewinding

Scalable oversight asks how a weak verifier can check the outputs of computations performed by more powerful AI systems.

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

RecHash: Segmented Hash-Entangled Chains for Stateful Sequential Authentication

RecHash is a stateful sequential authentication construction based on paired hash-chain openings and an authenticated re

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

Deep Learning Based Behavioral Drift Modeling for Continuous Biometric Authentication

This research proposes a two-level keystroke dynamics authentication system that provides defense-in-depth security thro

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

DYNAS: A Dynamic Network Penetration Testing Framework Using Deep Hierarchical Reinforcement Learning

As network scale and uncertainty complicate automated penetration testing, reinforcement learning (RL) environments must

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

Attack-Resilient Multi-Bit Image Watermarking Framework via Latent Coordinate Sign Clamping

Watermarking is essential for image copyright protection and attribution, yet existing methods suffer from fundamental t

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

From if to Oops: Turning a conditional into a key-recovery oracle

Deterministic variants of CSIDH remove randomness from the group action, either through implementation techniques or, as

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

ExploreRepair: Evidence-Specialized Agents for Vulnerability Repair under Information Constraints

Automated vulnerability repair must often operate with incomplete vulnerability information: developers may lack an accu

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

Syndrome Trellis Decryption in Post-Quantum Cryptography

We present a novel post-quantum cryptographic framework based on masked high-memory convolutional codes in the Niederrei

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

Integrating Perception, Comprehension, and Projection for Alert Validation: A Unified Cyber Situational Awareness Framework

Security Operation Centres (SOCs) must validate large volumes of alerts with limited analyst resources, yet alerts often

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

Investigating Data Flows from Android Games

Online applications can share data with arbitrary parties, without users noticing. In practice, these data flows could c

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

Hardware-Aware Model Inversion in Memristive Spiking Neural Networks

Hardware-accelerated spiking neural networks (SNNs) implemented on memristive crossbar arrays offer significant gains in

来源摘录 · arXiv cs.CR

学术论文2026-10-29 发布INFO

PairWatch: Pair-Aware Anomaly Transformer for Detecting Adversarial Rendezvous in Public Satellite Catalogs

Documented adversarial rendezvous and proximity operations (RPO) appear in the public TLE catalog, yet existing TLE-base

来源摘录 · arXiv cs.CR