#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-87706

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges loca

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

CVE-2026-87705

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87704

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.

CVE-2026-87702

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87700

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87693

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

CVE-2026-87692

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges local

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

CVE-2026-87691

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85945

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.

CVE-2026-85943

Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized a

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-85941

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.

CVE-2026-85939

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

CVE-2026-85938

Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information loca

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

CVE-2026-85936

Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

CVE-2026-85935

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85934

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-85933

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

CVE-2026-85931

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVE-2026-85930

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-85928

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code ov

来源摘录 · NVD