#windows

共收录 2159 条相关情报。

← 返回所有主题
安全公告2026-10-12 发布INFO

wifi: mac80211: don't allow injecting frames wider than the chanctx

CVE-2026-98329

wifi: mac80211: don't allow injecting frames wider than the chanctx

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-08 发布INFO

Azure Event Grid Spoofing Vulnerability

CVE-2026-83947

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-08 发布INFO

Microsoft Partner Center Elevation of Privilege Vulnerability

CVE-2026-96207

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-08 发布INFO

Microsoft Bookings Elevation of Privilege Vulnerability

CVE-2026-94510

Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privil

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-08 发布INFO

Microsoft Dataverse Remote Code Execution Vulnerability

CVE-2026-88131

Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-08 发布INFO

Azure App Service Remote Code Execution Vulnerability

CVE-2026-77900

Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-08 发布INFO

Azure API Center Information Disclosure Vulnerability

CVE-2026-83943

Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclo

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-08 发布INFO

Azure SRE Agent Elevation of Privilege Vulnerability

CVE-2026-69435

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic

CVE-2026-94655

Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)

CVE-2026-96292

Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)

CVE-2026-96288

Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec

CVE-2026-87117

Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation

CVE-2026-61373

Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)

CVE-2026-94650

Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception

CVE-2026-94642

Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic)

CVE-2026-94658

Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic)

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error

CVE-2026-94651

Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

net: lan743x: fix RX checksum use-after-free

CVE-2026-98239

net: lan743x: fix RX checksum use-after-free

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route

CVE-2026-66859

Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-10-07 发布INFO

seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation

CVE-2026-98306

seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation

历史摘要 · 未重新核验 · Microsoft MSRC