#msrc

共收录 2151 条相关情报。

← 返回所有主题
安全公告2026-09-03 发布INFO

A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

CVE-2026-75538

A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauth

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth

CVE-2026-74994

inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception

CVE-2026-74835

inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length

CVE-2026-73812

inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i

CVE-2026-73276

inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems

CVE-2026-73270

httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

httpc does not bound server-supplied numeric header values before integer conversion

CVE-2026-71562

httpc does not bound server-supplied numeric header values before integer conversion

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

httpd applies no timeout while receiving a request body, parking a worker on a stalled client

CVE-2026-71380

httpd applies no timeout while receiving a request body, parking a worker on a stalled client

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

eldap does not bound the port component of a referral URL before integer conversion

CVE-2026-70409

eldap does not bound the port component of a referral URL before integer conversion

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

httpd parks a request worker indefinitely on a malformed chunk size sent after the headers

CVE-2026-69664

httpd parks a request worker indefinitely on a malformed chunk size sent after the headers

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

httpd mod_auth directory protection bypassed by a doubled slash in the request path

CVE-2026-66835

httpd mod_auth directory protection bypassed by a doubled slash in the request path

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

CVE-2026-66357

inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

uri_string does not bound the port component of a URI before integer conversion

CVE-2026-59696

uri_string does not bound the port component of a URI before integer conversion

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

httpc memory exhaustion via unbounded response header accumulation

CVE-2026-55951

httpc memory exhaustion via unbounded response header accumulation

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution

CVE-2026-72649

Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

CVE-2026-56143

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-28 发布INFO

Chromium: CVE-2026-79041 Missing authorization in Browser

CVE-2026-79041

Microsoft MSRC 发布了一则关于 Chromium 项目的安全公告,涉及 CVE-2026-79041。该漏洞被描述为“Browser 中的缺失授权(Missing authorization in Browser)”,表明 C

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-28 发布INFO

Chromium: CVE-2026-79236 Type confusion in V8

CVE-2026-79236

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-28 发布INFO

Chromium: CVE-2026-79214 Improper input validation in Preload

CVE-2026-79214

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-28 发布INFO

Chromium: CVE-2026-79291 Information leak in CSS

CVE-2026-79291

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC