#cwe-362

共收录 515 条相关情报。

← 返回所有主题
安全公告2026-06-12 发布INFO

PyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures

`PyCFunction::new_closure` (and the temporary `new_closure_bound` complement in the 0.21–0.22 series) required the suppl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-12 发布INFO

Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker...

CVE-2026-12022

Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-11 发布INFO

Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape ...

CVE-2026-12022

Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick ...

CVE-2026-46693

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the...

CVE-2026-44693

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, P

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-10 发布INFO

A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fi...

CVE-2022-26758

A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-45603

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-45601

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-45598

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized attacker to elevate pr...

CVE-2026-45597

Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (ui

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-45596

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-44818

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges loc...

CVE-2026-42991

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notification

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges loc...

CVE-2026-42979

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notification

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges loc...

CVE-2026-42978

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notification

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges loc...

CVE-2026-42977

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notification

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-42913

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges loca...

CVE-2026-42912

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-42909

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate pr...

CVE-2026-42836

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Servic

历史摘要 · 未重新核验 · NVD