#advisory

共收录 23636 条相关情报。

← 返回所有主题
安全公告2026-07-27 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...

CVE-2026-64697

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-27 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...

CVE-2026-64696

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-27 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak...

CVE-2026-64553

In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLE_ATTR_DATA p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-27 发布INFO

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSR_EL2...

CVE-2026-64555

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_han

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-27 发布INFO

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...

CVE-2026-64695

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-27 发布INFO

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS...

CVE-2026-64704

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS S

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-27 发布INFO

A use after free issue was addressed with improved memory management. This issue is fixed in...

CVE-2026-64703

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-27 发布INFO

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS...

CVE-2026-64708

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-27 发布INFO

A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 15...

CVE-2026-64710

A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-27 发布INFO

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in...

CVE-2026-64552

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() receive

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-27 发布INFO

A memory initialization issue was addressed with improved memory handling. This issue is fixed in...

CVE-2026-64699

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-27 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale...

CVE-2026-64554

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in br_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-27 发布INFO

React Router: Cross-site Scripting is Possible due to Missing RSCErrorHandler Protocol Validation (Incomplete fix for CVE-2026-53667)

CVE-2026-53667

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validatio

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-27 发布INFO

React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration

CVE-2026-53666

React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allo

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-27 发布INFO

Cross-Site Scripting via Unsafe URL Schemes in Pivotick Property Links

CVE-2026-66825

Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component. Values associated with li

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-27 发布INFO

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

CVE-2026-59730

Astro is a web framework for content-driven websites. In versions 8.1.0 through 11.0.1, when trailingSlash: 'always' is

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-27 发布INFO

Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding

CVE-2026-66824

A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-27 发布INFO

@astrojs/rss: XML Injection via Unescaped RSS Feed Fields

CVE-2026-59728

Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.title and enclosure.t

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-27 发布INFO

Astro: Cross-site scripting via unescaped transition:* directive values on hydrated islands

CVE-2026-59727

Astro is a web framework for content-driven websites. In versions 3.10.0 through 7.0.3, when a transition:persist, trans

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-27 发布INFO

Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)

CVE-2026-59729

Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerable to XSS through unescaped sp

历史摘要 · 未重新核验 · OSV.dev