#windows

共收录 2159 条相关情报。

← 返回所有主题
安全公告2026-10-30 发布INFO

X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write

CVE-2026-93520

X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

X.Org Server XFixes Pointer Barrier Event List Buffer Overflow

CVE-2026-93519

X.Org Server XFixes Pointer Barrier Event List Buffer Overflow

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

X.Org Server XKB ResizeKeyType Numeric Truncation

CVE-2026-93518

X.Org Server XKB ResizeKeyType Numeric Truncation

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

X.Org Server GLX RenderLarge Heap Buffer Overflow

CVE-2026-93517

X.Org Server GLX RenderLarge Heap Buffer Overflow

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

.Org Server XInput Passive Grab Use-After-Free

CVE-2026-93516

.Org Server XInput Passive Grab Use-After-Free

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

.Org Server Present Extension Use-After-Free

CVE-2026-93515

.Org Server Present Extension Use-After-Free

来源摘录 · Microsoft MSRC

安全公告2026-10-30 发布INFO

Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE

CVE-2026-92709

Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

CVE-2026-115889

Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

CVE-2026-115893

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt

CVE-2026-16762

Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree

CVE-2026-115775

Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Elemen

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation

CVE-2026-83813

Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH

CVE-2026-115774

Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer

CVE-2026-115778

Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer

CVE-2026-115776

Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value

CVE-2026-115877

Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body

CVE-2026-115897

Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body

CVE-2026-115754

serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names

CVE-2026-116137

adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names

来源摘录 · Microsoft MSRC

安全公告2026-10-29 发布INFO

Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg

CVE-2026-115484

Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg

来源摘录 · Microsoft MSRC