UEFI BIOS embedded Shell can be used to bypass Secure Boot
CVE-2026-6485
UEFI BIOS embedded Shell can be used to bypass Secure Boot
#msrc
共收录 2151 条相关情报。
← 返回所有主题Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87536
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside
Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87601
Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside
Chromium: CVE-2026-85046 Type confusion in V8
CVE-2026-85046
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
CVE-2026-19654
Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote p
Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host
CVE-2026-13622
Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host
Windows Biometric Service Elevation of Privilege Vulnerability
CVE-2026-83981
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Windows Biometric Service Elevation of Privilege Vulnerability
CVE-2026-83973
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Windows Biometric Service Elevation of Privilege Vulnerability
CVE-2026-83968
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Windows iSCSI Remote Code Execution Vulnerability
CVE-2026-69598
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Microsoft Word Remote Code Execution Vulnerability
CVE-2026-62804
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Skype for Business and Lync Denial of Service Vulnerability
CVE-2026-66307
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a netw
Skype for Business and Lync Denial of Service Vulnerability
CVE-2026-66303
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
CVE-2026-83498
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to el
Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability
CVE-2026-84003
Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized at
Windows WebClient Service Elevation of Privilege Vulnerability
CVE-2026-72965
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-83949
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2026-69530
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a ne
Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-83951
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
CVE-2026-83501
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose info