共收录 358 条相关情报。
← 返回所有主题CVE-2026-20908
Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device
CVE-2026-6505
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to priv
CVE-2026-5303
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to priv
CVE-2026-68107
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length R
CVE-2026-72584
A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15.1 allows an unauthenticated remote attac
CVE-2026-19079
A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerability was found in the fixfiles script in policycoreutils. W
CVE-2026-43632
llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six to
CVE-2026-43632
llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six to
CVE-2026-57818
A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via c
CVE-2026-55524
PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, the web_crawl tool performs its SSRF check only on
CVE-2026-70597
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8,
CVE-2026-53945
### Impact Ghost’s private-IP check for outbound HTTP requests could be bypassed via DNS rebinding, allowing an attacke
CVE-2026-54020
## Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and rejecting private, loopback and link-
CVE-2026-47621
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager sing
CVE-2026-58041
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to cont
CVE-2026-58041
CVE-2026-58041 是 Node.js 的 node:sqlite 模块中的一个逻辑缺陷，影响 22.x、24.x 和 26.x 版本。问题出在 DatabaseSync#createTagStore() 创建的 Statemen
CVE-2026-66314
Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to
CVE-2026-66314
CVE-2026-66314 是 Microsoft Edge（基于 Chromium）中的一个安全漏洞，其根因是检查时间-使用时间（Time-of-check Time-of-use, TOCTOU）竞态条件。此类漏洞通常出现在程序先检查
CVE-2026-11835
Time-of-check time-of-use (TOCTOU) vulnerability combined with missing input validation in Caliptra Core ROM (UpdateRese
CVE-2026-47746
Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, are vulne