共收录 138 条相关情报。
← 返回所有主题CVE-2026-58698
In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This could
CVE-2026-57042
In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This co
CVE-2026-56992
In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation o
CVE-2026-56986
In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of
CVE-2026-56985
In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalati
CVE-2026-56945
In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privile
CVE-2026-56922
In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege
CVE-2026-56879
In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to l
CVE-2026-0183
In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclo
CVE-2026-55225
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. I
CVE-2026-81303
A flaw was found in hawtio-operator. The operator holds routes/custom-host:create permission cluster-wide and writes the
CVE-2026-86600
In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it
CVE-2026-86600
In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it
CVE-2026-86115
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skippi
CVE-2026-86115
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skippi
CVE-2026-86115
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skippi
CVE-2026-84329
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker wh
CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
CVE-2026-84329
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker wh
CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern