Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login
CVE-2026-72693
Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login
#microsoft
共收录 2304 条相关情报。
← 返回所有主题etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
CVE-2026-73500
etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()
CVE-2026-70457
rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()
rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()
CVE-2026-70456
rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()
rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT
CVE-2026-70462
rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT
rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry
CVE-2026-70459
rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry
rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink
CVE-2026-70460
rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink
rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion
CVE-2026-70455
rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion
rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure
CVE-2026-70452
rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure
rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall
CVE-2026-70464
rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall
Chromium: CVE-2026-76047 Type confusion in V8
CVE-2026-76047
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76045 Use after free in WebGL
CVE-2026-76045
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76044 Race condition in USB
CVE-2026-76044
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76043 Incorrect calculation in V8
CVE-2026-76043
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76042 Use of uninitialized resource in GPU
CVE-2026-76042
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76041 Information leak in Skia
CVE-2026-76041
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76040 Use after free in Browser
CVE-2026-76040
微软 MSRC 发布了一则与 Chromium 相关的安全公告，涉及编号为 CVE-2026-76040 的“释放后使用”（Use after free）漏洞。该漏洞最初由 Chromium 项目分配，因 Microsoft Edge 浏览
Chromium: CVE-2026-76038 Type confusion in V8
CVE-2026-76038
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76037 Link following in CredentialProvider
CVE-2026-76037
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-76035 Inappropriate implementation in Media
CVE-2026-76035
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.