#msrc

共收录 2151 条相关情报。

← 返回所有主题
安全公告2026-08-07 发布INFO

epmd permanent DoS via EMFILE on accept(2) in erts

CVE-2026-42792

epmd permanent DoS via EMFILE on accept(2) in erts

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-07 发布INFO

TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

CVE-2026-55953

TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-07 发布INFO

No Title

CVE-2026-7260

No Title

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-07 发布INFO

No Title

CVE-2026-17543

No Title

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-07 发布INFO

Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()

CVE-2026-64557

Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-07 发布INFO

perf/core: Detach event groups during remove_on_exec

CVE-2026-64556

perf/core: Detach event groups during remove_on_exec

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-07 发布INFO

XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization

CVE-2026-15037

XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-07 发布INFO

Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path

CVE-2026-58023

Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-07 发布INFO

Apache Thrift: c_glib TLS Client Missing Hostname Verification

CVE-2026-48144

Apache Thrift: c_glib TLS Client Missing Hostname Verification

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-07 发布INFO

Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()

CVE-2026-64549

Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-07 发布INFO

crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents

CVE-2026-64544

crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-07 发布INFO

drm/edid: fix OOB read in drm_parse_tiled_block()

CVE-2026-64546

drm/edid: fix OOB read in drm_parse_tiled_block()

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-07 发布INFO

net: usb: net1080: validate packet_len before pad-byte access in rx_fixup

CVE-2026-64547

net: usb: net1080: validate packet_len before pad-byte access in rx_fixup

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-06 发布INFO

Azure Confidential Ledger Remote Code Execution Vulnerability

CVE-2026-68823

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a n

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-06 发布INFO

Microsoft Office SharePoint Spoofing Vulnerability

CVE-2026-70332

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-06 发布INFO

Microsoft 365 Admin Center Elevation of Privilege Vulnerability

CVE-2026-62873

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevat

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-06 发布INFO

Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

CVE-2026-63508

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elev

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-06 发布INFO

Azure Service Bus Remote Code Execution Vulnerability

CVE-2026-50515

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-06 发布INFO

Azure SQL Database Elevation of Privilege Vulnerability

CVE-2026-56162

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-08-06 发布INFO

Microsoft Teams Elevation of Privilege Vulnerability

CVE-2026-65667

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC