Microsoft Excel Remote Code Execution Vulnerability

CVE-2026-81396

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability

CVE-2026-83989

Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83985

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Microsoft Graphics Component Elevation of Privilege Vulnerability

CVE-2026-83990

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83983

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83987

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83980

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Microsoft Excel Information Disclosure Vulnerability

CVE-2026-81391

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83982

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83978

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Microsoft Windows Search Component Information Disclosure Vulnerability

CVE-2026-70145

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83977

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Hello Elevation of Privilege Vulnerability

CVE-2026-81354

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Web Media Extensions Remote Code Execution Vulnerability

CVE-2026-81352

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a ne

历史摘要 · 未重新核验 · Microsoft MSRC

Visual Studio Code Information Disclosure Vulnerability

CVE-2026-81383

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose informat

历史摘要 · 未重新核验 · Microsoft MSRC

HEIF Image Extensions Remote Code Execution Vulnerability

CVE-2026-81353

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Microsoft Office Word Information Disclosure Vulnerability

CVE-2026-80090

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Biometric Service Elevation of Privilege Vulnerability

CVE-2026-83972

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

Windows Malware Detector as a Compound AI System: Trade-Offs in Accuracy, Efficiency, and Adversarial Robustness

工业界的 Windows 恶意软件检测系统通常被描述为由多种异构组件构成的复合 AI 系统，其中包括基于规则的检测机制以及基于机器学习的静态与动态分析模块。然而，由于工业界保密和公开信息有限，这些系统的内部架构往往只能被推测，导致难以对其检

历史摘要 · 未重新核验 · arXiv cs.CR

Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority

CVE-2026-78408

Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority

历史摘要 · 未重新核验 · Microsoft MSRC