共收录 2312 条相关情报。
← 返回所有主题CVE-2026-45447
Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signatur
CVE-2026-44823
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally
CVE-2026-44813
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-44809
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-44807
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-44805
Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally.
CVE-2026-44804
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-44802
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-44801
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-42991
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notification
CVE-2026-42987
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
CVE-2026-42986
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2026-42985
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-42984
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-42983
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-42979
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notification
CVE-2026-42978
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notification
CVE-2026-42913
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-42911
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca
CVE-2026-42909
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.