webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules
CVE-2026-57497
## Summary An attacker can cause excessive memory allocation in webtransport-go by sending an unknown WebTransport caps
#advisory
共收录 23779 条相关情报。
← 返回所有主题Cloudreve OAuth Admin.Read scope can update OneDrive storage policy credentials
CVE-2026-55502
## Summary Cloudreve 4.16.1 has an OAuth scope authorization bypass in the admin storage policy routes. An OAuth bearer
Cloudreve: Broken Access Control in file event stream: a single-file share recipient is subscribed to the owner's parent folder and receives activity events for unshared siblings
CVE-2026-55499
## Summary When an authenticated recipient of a **single-file** share opens the file event stream (`GET /api/v4/file/e
Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server
CVE-2026-55497
## Summary Cloudreve's built-in image processor decodes user-supplied images with Go's standard-library decoders (`imag
Cloudreve: Information Exposure in `GET /api/v4/user/search`: `SearchActive` omits the active-status predicate, leaking inactive/banned account emails
CVE-2026-55496
## Summary `GET /api/v4/user/search` is available to any logged-in user. The service calls `userClient.SearchActive`,
Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account
CVE-2026-55495
## Summary Cloudreve's WOPI `PUT_RELATIVE` handler treats `X-WOPI-SuggestedTarget` as a path, not a filename. It split
yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output
CVE-2026-55404
### Summary If the `--write-link`, `--write-url-link` or `--write-desktop-link` options are used with yt-dlp, it may pro
libssh2 Heap Buffer Overflow via ETM Cipher Negotiation
CVE-2026-66035
libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that a
libssh2 Heap Out-of-Bounds Read via publickey subsystem
CVE-2026-66034
libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious S
libssh2 Double-Free Heap Corruption via sftp_open()
CVE-2026-66032
libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src
In the Linux kernel, the following vulnerability has been resolved: kernel/fork: clear PF_BLOCK_TS in copy_process() PF_BLOCK_TS is only set in blk_time_get_ns() when current-...
CVE-2026-64253
In the Linux kernel, the following vulnerability has been resolved: kernel/fork: clear PF_BLOCK_TS in copy_process() P
In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_mode() If mode_option is NULL, it is assigned from mode_option...
CVE-2026-64245
In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_mode()
In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successful device registration If __add_memory_block() fails at ...
CVE-2026-64244
In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successf
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform...
CVE-2026-56191
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code...
CVE-2026-56165
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over...
CVE-2026-54120
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a...
CVE-2026-58275
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code...
CVE-2026-50517
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges...
CVE-2026-62825
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate...
CVE-2026-56160
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a netwo