#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布CRITICAL

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploi...

CVE-2026-92909

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabilit...

CVE-2026-92908

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high ...

CVE-2026-92464

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution i

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Mali...

CVE-2026-91013

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to i

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88159

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.

CVE-2026-88158

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-88157

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88152

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privil

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-88151

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-88149

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

CVE-2026-88147

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate p

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attack...

CVE-2026-88146

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intell

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-88143

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges loca

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88142

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88141

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

CVE-2026-88140

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88139

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

CVE-2026-88137

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

CVE-2026-88136

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-88135

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD