#cwe-367

共收录 358 条相关情报。

← 返回所有主题

漏洞预警2026-09-17 发布INFO

mport is the MidnightBSD Package Manager. Prior to 2.7.8, directory assets handled as ASSET_DIR or ASSET_DIR_OWNER_MODE in libmport/bundle_read_install_pkg.c used path-based mpo...

CVE-2026-54587

mport is the MidnightBSD Package Manager. Prior to 2.7.8, directory assets handled as ASSET_DIR or ASSET_DIR_OWNER_MODE

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-367

漏洞预警2026-09-17 发布INFO

mport is the MidnightBSD Package Manager. Prior to 2.7.8, do_actual_install() in libmport/bundle_read_install_pkg.c used path-based lstat(), chown(), stat(), and chmod() operati...

CVE-2026-54576

mport is the MidnightBSD Package Manager. Prior to 2.7.8, do_actual_install() in libmport/bundle_read_install_pkg.c used

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-367

漏洞预警2026-09-17 发布INFO

mport is the MidnightBSD Package Manager. Prior to 2.7.8, privileged package fetch and cache-cleaning operations used race-prone path handling across libmport/fetch.c, libmport/...

CVE-2026-54575

mport is the MidnightBSD Package Manager. Prior to 2.7.8, privileged package fetch and cache-cleaning operations used ra

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-367

漏洞预警2026-09-17 发布INFO

pgAdmin 4's File Manager save_file endpoint, which backs saving from the Query Tool and ERD, validated the requested path with Filemanager.check_access_permission() and then ope...

CVE-2026-86861

pgAdmin 4's File Manager save_file endpoint, which backs saving from the Query Tool and ERD, validated the requested pat

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-367

漏洞预警2026-09-17 发布INFO

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to replay its single-use token a...

CVE-2026-82761

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in team-alembic AshAuthentication allows an attacker hol

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

漏洞预警2026-09-17 发布INFO

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

CVE-2026-25278

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copyi

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

漏洞预警2026-09-16 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could hav...

CVE-2024-11222

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

安全公告2026-09-15 发布INFO

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had comprom

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-367 #severity:high

安全公告2026-09-15 发布INFO

Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a...

CVE-2026-91744

Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who ha

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-367 #severity:medium

安全公告2026-09-15 发布INFO

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had...

CVE-2026-91743

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the rendere

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-367 #severity:high

漏洞预警2026-09-15 发布INFO

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineerin...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had comprom

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

漏洞预警2026-09-15 发布INFO

Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social e...

CVE-2026-91744

Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who ha

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

漏洞预警2026-09-15 发布INFO

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside t...

CVE-2026-91743

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the rendere

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

漏洞预警2026-09-15 发布INFO

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrar...

CVE-2026-91712

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had comprom

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

漏洞预警2026-09-15 发布INFO

Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HT...

CVE-2026-91708

Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the rend

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

漏洞预警2026-09-15 发布INFO

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicio...

CVE-2026-79994

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized work

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

安全公告2026-09-15 发布INFO

Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race

CVE-2026-79994

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized work

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-367

漏洞预警2026-09-15 发布INFO

In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privilege...

CVE-2026-58716

In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to loca

历史摘要 · 未重新核验 · NVD

#cve #cwe-362 #cwe-367

漏洞预警2026-09-15 发布INFO

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro ...

CVE-2026-40058

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability on

历史摘要 · 未重新核验 · NVD

#cve #cwe-367

漏洞预警2026-09-15 发布INFO

Time-of-check Time-of-use (TOCTOU) Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validati...

CVE-2026-77972

Time-of-check Time-of-use (TOCTOU) Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS respo

历史摘要 · 未重新核验 · NVD

#cve #cwe-367