#msrc

共收录 2151 条相关情报。

← 返回所有主题
安全公告2026-07-16 发布INFO

Chromium: CVE-2026-15766 Uninitialized Use in Skia

CVE-2026-15766

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-16 发布INFO

Chromium: CVE-2026-15765 Use after free in Ozone

CVE-2026-15765

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-16 发布INFO

Chromium: CVE-2026-15764 Use after free in Ozone

CVE-2026-15764

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-16 发布INFO

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

CVE-2026-56171

Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disc

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-16 发布INFO

Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-62826

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-16 发布INFO

Windows Backup Service Elevation of Privilege Vulnerability

CVE-2026-58598

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine all

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-16 发布INFO

Windows Admin Center Spoofing Vulnerability

CVE-2026-58643

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an u

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-16 发布INFO

Windows Terminal Remote Code Execution Vulnerability

CVE-2026-59117

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-15 发布INFO

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

CVE-2026-13221

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 6553

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-15 发布INFO

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack

CVE-2026-57432

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

M365 Copilot for iOS Elevation of Privilege Vulnerability

CVE-2026-58617

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a ne

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-58613

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2026-58536

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

CVE-2026-41109

Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability

CVE-2026-58529

Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Microsoft Office Information Disclosure Vulnerability

CVE-2026-55121

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Network Address Translation (NAT) Spoofing Vulnerability

CVE-2026-56181

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Boot Loader Security Feature Bypass Vulnerability

CVE-2026-58638

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Client-Side Caching Elevation of Privilege Vulnerability

CVE-2026-58637

Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Desktop Window Manager Elevation of Privilege Vulnerability

CVE-2026-58634

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC