#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-14 发布HIGH

The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting. When scanning a container, the coordin...

CVE-2026-104795

The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runti

来源摘录 · NVD

漏洞预警2026-10-14 发布INFO

Rejected reason: No standard GStreamer pipeline element invokes the vulnerable parser API. Exploitation would require a third-party application to call it with attacker-controll...

CVE-2026-100229

Rejected reason: No standard GStreamer pipeline element invokes the vulnerable parser API. Exploitation would require a

来源摘录 · NVD

漏洞预警2026-10-14 发布HIGH

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offse...

CVE-2026-86476

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attach

来源摘录 · NVD

漏洞预警2026-10-14 发布MEDIUM

A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-line argument to pkcs11-tool, making it visible to any loc...

CVE-2026-109971

A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-l

来源摘录 · NVD

漏洞预警2026-10-14 发布MEDIUM

A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN in plaintext to a file without setting restrictive permissions. Und...

CVE-2026-109970

A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN in plainte

来源摘录 · NVD

漏洞预警2026-10-14 发布MEDIUM

A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets without explicit permission restrictions or peer credential ver...

CVE-2026-109969

A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets withou

来源摘录 · NVD

漏洞预警2026-10-14 发布MEDIUM

A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags containing Unicode characters outside the Basic Multilingua...

CVE-2026-100231

A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags co

来源摘录 · NVD

漏洞预警2026-10-14 发布CRITICAL

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026,...

CVE-2026-110447

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-96956

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu...

CVE-2026-96521

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

CVE-2026-94520

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-94512

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

CVE-2026-88089

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88088

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

CVE-2026-88086

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88085

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.

CVE-2026-88084

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88083

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88082

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-88081

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

来源摘录 · NVD