#CVE

共收录 69142 条相关情报。

← 返回所有主题
漏洞预警2026-10-26 发布LOW

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS S...

CVE-2026-112425

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to...

CVE-2026-112424

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS S...

CVE-2026-112423

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be a...

CVE-2026-112421

A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2,

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.

CVE-2026-112417

An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a mal

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, ...

CVE-2026-112416

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS...

CVE-2026-112415

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequo...

CVE-2026-112414

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS S...

CVE-2026-112413

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2,

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may...

CVE-2026-112410

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three ...

CVE-2025-13833

A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

Some externally supplied values stored by the device may be rendered in the web interface without sufficient output encoding. An attacker who can influence one of these values c...

CVE-2026-70382

Some externally supplied values stored by the device may be rendered in the web interface without sufficient output enco

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthentica...

CVE-2026-70381

An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-devi

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network acces...

CVE-2026-70380

A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical length. When verifying an ECDSA signature, jose_jwk_kty_ec:verify/4 in src/jwk...

CVE-2026-65632

The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical length. When verifyin

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion denial of service by submitting a crafted RSA JSON Web Key....

CVE-2026-65631

Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion de

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erlang Curve25519 fal...

CVE-2026-65630

Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key throug

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a password-encrypted private-key export to recover the private key...

CVE-2026-65629

Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a passwor

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKs. Its first function clause only matches when both JWKs carry...

CVE-2026-65628

jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKs. It

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small...

CVE-2026-65627

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows

来源摘录 · NVD