#microsoft

共收录 2274 条相关情报。

← 返回所有主题
威胁情报2026-10-19 发布INFO

Agents are your newest insiders. Security must move at their speed.

New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection c

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

安全公告2026-10-17 发布INFO

util-linux mount hook_owner TOCTOU allows local privilege escalation

CVE-2026-53612

util-linux mount hook_owner TOCTOU allows local privilege escalation

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

util-linux mount target TOCTOU allows local privilege escalation

CVE-2026-53613

util-linux mount target TOCTOU allows local privilege escalation

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

Squid Request Smuggling in HTTP Transfer-Encoding

CVE-2026-61642

Squid Request Smuggling in HTTP Transfer-Encoding

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

CVE-2026-67418

RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string

CVE-2026-110816

qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX Map directive and Regex matching vulnerability

CVE-2026-93479

NGINX Map directive and Regex matching vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX ngx_http_ssl_module vulnerability

CVE-2026-97629

NGINX ngx_http_ssl_module vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX ngx_http_js_module vulnerability

CVE-2026-101025

NGINX ngx_http_js_module vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX ngx_http_js_module vulnerability

CVE-2026-101019

NGINX ngx_http_js_module vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX ngx_http_v3_module vulnerability

CVE-2026-95101

NGINX ngx_http_v3_module vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX ngx_http_core_module vulnerability

CVE-2026-15176

NGINX ngx_http_core_module vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

NGINX ngx_http_core_module vulnerability

CVE-2026-97205

NGINX ngx_http_core_module vulnerability

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

Openssh: openssh: sftp can write outside the destination directory from a server-supplied path

CVE-2026-110923

Openssh: openssh: sftp can write outside the destination directory from a server-supplied path

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components

CVE-2026-95117

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

HTTP/2 upload Use-After-Free

CVE-2026-92392

HTTP/2 upload Use-After-Free

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry

CVE-2026-110659

ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

CVE-2026-94603

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()

CVE-2026-95124

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-17 发布INFO

OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions

CVE-2026-110258

OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions

历史摘要 · 未重新核验 · Microsoft MSRC