#cwe-362

共收录 515 条相关情报。

漏洞预警2026-07-27 发布INFO

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to elevate privileges.

CVE-2026-28926

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-07-25 发布MEDIUM

In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thread permission index from the global _thread_idx_map[] bit...

CVE-2026-10681

在 Zephyr RTOS 的用户态动态对象子系统中，`kernel/userspace/userspace.c` 文件中的 `thread_idx_alloc()` 函数在从全局位图 `_thread_idx_map[]` 分配新线程权限

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-07-20 发布INFO

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.5, the credit payment implementation in app/Livewire/Invoices/S...

CVE-2026-55219

Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.5, the

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-07-20 发布INFO

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screenshot/print proxy (/proxy?data=…) maintains a package-level assets map[string]MessageA...

CVE-2026-45712

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screenshot/print proxy (/proxy?dat

历史摘要 · 未重新核验 · NVD

#cve #cwe-362 #cwe-770

安全公告2026-07-20 发布INFO

Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write)

CVE-2026-45712

Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screenshot/print proxy (/proxy?dat

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-362 #cwe-770

漏洞预警2026-07-20 发布INFO

SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condition in the HTTP /rpc endpoint that allows unauthenticated requests to inherit authenticated sessio...

CVE-2026-63756

SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condition in the HTTP /rpc endpoint that allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-07-19 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("cifs: F...

CVE-2026-64136

In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_fin

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for x_tables, follow same patte...

CVE-2026-64077

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal sche

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module init race sashiko reports for unrelated patch: Does the core eb...

CVE-2026-64076

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module init rac

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Stop work before releasing hwmon device Sashiko reports: In lm90_probe(), the devm action to...

CVE-2026-64038

In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Stop work before releasing hwmon devi

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-07-19 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx sk_psock_strp_data_ready() already checks tls_sw_...

CVE-2026-64025

In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing with k

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-07-19 发布CRITICAL

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Blamed commit moved the TIME_WAIT-derived IS...

CVE-2026-64024

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN

来源摘录 · NVD

#cve #cwe-362 #cwe-401

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on lookup Nicholas Carlini reports that the keyring code calls a...

CVE-2026-64015

In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on looku

来源摘录 · NVD

#cve #cwe-125 #cwe-362

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: memfd: deny writeable mappings when implying SEAL_WRITE When SEAL_EXEC is added, SEAL_WRITE is implied to m...

CVE-2026-63952

In the Linux kernel, the following vulnerability has been resolved: memfd: deny writeable mappings when implying SEAL_W

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in iso_recv_frame iso_recv_frame reads conn->sk under iso_conn_lock but releases th...

CVE-2026-63946

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix UAF in iso_recv_frame iso_recv

来源摘录 · NVD

#cve #cwe-362 #cwe-416

漏洞预警2026-07-19 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rx_retry cancellation It's possible that sequencing bet...

CVE-2026-63874

In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-07-19 发布INFO

A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/models/inventory.py of the component Purchase Stock Handler. T...

CVE-2026-16212

A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/model

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

安全公告2026-07-19 发布INFO

awesto django-shop Purchase Stock inventory.py race condition

CVE-2026-16212

A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/model

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-362

安全公告2026-07-17 发布INFO

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an...

CVE-2026-15995

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain inc

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-362 #severity:medium

漏洞预警2026-07-17 发布MEDIUM

view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 4.0.0 until 4.12.0, ViewComponent::Base instances retain r...

CVE-2026-54497

view_component 是一个用于在 Ruby on Rails 中构建可复用、可测试和封装视图组件的框架。从 4.0.0 到 4.12.0 版本，ViewComponent::Base 实例在多次调用 render_in 时保留了渲

历史摘要 · 未重新核验 · NVD

#cve #cwe-362 #cwe-488 #cwe-668