#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102861

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102860

Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a networ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a netw...

CVE-2026-102859

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

CVE-2026-102858

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

CVE-2026-102857

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

CVE-2026-102856

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布MEDIUM

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.

CVE-2026-102851

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-102850

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVE-2026-102849

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO pr...

CVE-2026-102599

Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布HIGH

Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-102233

Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-102232

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-102231

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security featu

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.

CVE-2026-102229

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorize

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

CVE-2026-102227

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

CVE-2026-102226

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an au

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-102225

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-102221

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

CVE-2026-102220

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102218

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to e

历史摘要 · 未重新核验 · NVD