#cwe-822

共收录 80 条相关情报。

← 返回所有主题

漏洞预警2026-10-05 发布INFO

The system-call verifier for i3c_do_ccc() in drivers/i3c/i3c_handlers.c validated the outer struct i3c_ccc_payload, the broadcast ccc.data buffer and the targets.payloads[] arra...

CVE-2026-19185

The system-call verifier for i3c_do_ccc() in drivers/i3c/i3c_handlers.c validated the outer struct i3c_ccc_payload, the

历史摘要 · 未重新核验 · NVD

#cve #cwe-822

漏洞预警2026-10-02 发布INFO

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to ...

CVE-2026-97876

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot a

历史摘要 · 未重新核验 · NVD

#cve #cwe-822

安全公告2026-10-02 发布INFO

Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address

CVE-2026-97876

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot a

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-822

安全公告2026-10-02 发布INFO

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession...

CVE-2026-103764

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allow

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-822 #severity:critical

漏洞预警2026-10-02 发布INFO

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary p...

CVE-2026-103764

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-822

安全公告2026-10-01 发布INFO

Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

CVE-2026-103764

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allow

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-822

漏洞预警2026-09-29 发布INFO

An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that to clear the MPU en...

CVE-2026-102757

An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-787 #cwe-822 #cwe-823 #cwe-843

漏洞预警2026-09-29 发布INFO

Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dispatch calls, on a build with `TX_ENABLE_EVENT_TRACE`. ...

CVE-2026-102710

Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dis

历史摘要 · 未重新核验 · NVD

#cve #cwe-269 #cwe-822

漏洞预警2026-09-29 发布INFO

Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the non-secure world to supply ...

CVE-2026-102709

Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-501 #cwe-822

安全公告2026-09-29 发布INFO

CVE-2026-102710

Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dis

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-269 #cwe-822

安全公告2026-09-29 发布INFO

CVE-2026-102709

Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-501 #cwe-822

安全公告2026-09-29 发布INFO

CVE-2026-102757

An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-787 #cwe-822 #cwe-823 #cwe-843

漏洞预警2026-09-23 发布INFO

Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an inva...

CVE-2026-91795

Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted P

历史摘要 · 未重新核验 · NVD

#cve #cwe-822

漏洞预警2026-09-21 发布INFO

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation ...

CVE-2026-94403

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library e

历史摘要 · 未重新核验 · NVD

#cve #cwe-822

漏洞预警2026-09-17 发布INFO

Memory corruption while processing rear sensor IOCTL calls.

CVE-2026-25261

Memory corruption while processing rear sensor IOCTL calls.

历史摘要 · 未重新核验 · NVD

#cve #cwe-822

漏洞预警2026-09-17 发布INFO

Memory Corruption when copying large input data exceeds normal allocation limits.

CVE-2025-59607

Memory Corruption when copying large input data exceeds normal allocation limits.

历史摘要 · 未重新核验 · NVD

#cve #cwe-822

漏洞预警2026-09-08 发布HIGH

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-69475

CVE-2026-69475 是 Microsoft Windows 远程桌面服务（Remote Desktop Services）中的一个本地权限提升漏洞。该漏洞源于程序在处理某些指针时存在不受信任的指针解引用（untrusted poi

历史摘要 · 未重新核验 · NVD

#cve #cwe-822

漏洞预警2026-09-08 发布INFO

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67378

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

#cve #cwe-822

漏洞预警2026-09-01 发布INFO

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be.

CVE-2026-10420

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affec

历史摘要 · 未重新核验 · NVD

#cve #cwe-822

漏洞预警2026-09-01 发布INFO

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e.

CVE-2026-82927

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affec

历史摘要 · 未重新核验 · NVD

#cve #cwe-822