共收录 358 条相关情报。
← 返回所有主题CVE-2026-18069
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a
CVE-2026-86836
In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIF
CVE-2026-68488
A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privileg
CVE-2026-88924
A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created
CVE-2026-87996
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.1, SafePlayw
CVE-2026-87996
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.1, SafePlayw
CVE-2026-69466
该漏洞为Windows内核中的检查时间-使用时间（TOCTOU）竞态条件漏洞。攻击者需在本地具备低权限，通过并行执行操作，使系统在权限检查与实际使用之间发生状态变化，从而利用竞态窗口绕过安全校验，最终实现本地权限提升。由于该漏洞位于内核层，
CVE-2026-69440
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevat
CVE-2026-76925
A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists in the `org.freedesktop.Flatp
CVE-2026-76925
A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists in the `org.freedesktop.Flatp
CVE-2026-18567
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involv
CVE-2026-45197
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read
CVE-2026-45197
CVE-2026-45197 是一个关于虚拟化环境中GPU内存隔离的漏洞风险。根据NVD提供的元数据，该漏洞影响了在Guest虚拟机内运行的内核软件与GPU固件之间的交互。具体而言，Guest虚拟机中的内核软件可能向GPU固件提交不当命令，
CVE-2026-85045
Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside
CVE-2026-78410
A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before
CVE-2026-19118
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote
CVE-2026-19118
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote
CVE-2026-78319
A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition. An un
CVE-2026-78422
Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned
CVE-2026-78422
Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned