#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布HIGH

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-96951

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthori

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

CVE-2026-96866

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a ne

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

CVE-2026-96865

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an autho

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-96864

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96863

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a p

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-96862

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

CVE-2026-96861

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a ne

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

CVE-2026-96860

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

CVE-2026-96859

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.

CVE-2026-96858

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perfor

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

CVE-2026-96219

Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to exe

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.

CVE-2026-96206

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information local

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

CVE-2026-96202

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-96108

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-95943

Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high ...

CVE-2026-95631

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution i

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabil...

CVE-2026-95630

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable fo...

CVE-2026-92922

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privilege

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable for...

CVE-2026-92911

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass se...

CVE-2026-92910

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

来源摘录 · NVD