#msrc

共收录 2151 条相关情报。

← 返回所有主题
安全公告2026-09-08 发布INFO

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83985

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Microsoft Graphics Component Elevation of Privilege Vulnerability

CVE-2026-83990

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83983

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83987

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83980

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Microsoft Excel Information Disclosure Vulnerability

CVE-2026-81391

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83982

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83978

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Microsoft Windows Search Component Information Disclosure Vulnerability

CVE-2026-70145

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83977

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Windows Hello Elevation of Privilege Vulnerability

CVE-2026-81354

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Web Media Extensions Remote Code Execution Vulnerability

CVE-2026-81352

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a ne

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Visual Studio Code Information Disclosure Vulnerability

CVE-2026-81383

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose informat

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

HEIF Image Extensions Remote Code Execution Vulnerability

CVE-2026-81353

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Microsoft Office Word Information Disclosure Vulnerability

CVE-2026-80090

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-08 发布INFO

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83972

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-07 发布INFO

Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority

CVE-2026-78408

Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-07 发布INFO

Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection

CVE-2026-78410

Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-07 发布INFO

Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()

CVE-2026-84838

Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-07 发布INFO

Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames

CVE-2026-84233

Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames

历史摘要 · 未重新核验 · Microsoft MSRC