#windows

共收录 2159 条相关情报。

← 返回所有主题
安全公告2026-07-14 发布INFO

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

CVE-2026-58547

Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges loc

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

CVE-2026-58534

Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges lo

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability

CVE-2026-58537

Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to elevate privileges loc

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Kernel Elevation of Privilege Vulnerability

CVE-2026-58532

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows SMB Elevation of Privilege Vulnerability

CVE-2026-58531

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an aut

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Installer Elevation of Privilege Vulnerability

CVE-2026-58540

Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Remote Desktop Client Information Disclosure Vulnerability

CVE-2026-58539

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Remote Desktop Client Information Disclosure Vulnerability

CVE-2026-58546

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Remote Desktop Client Information Disclosure Vulnerability

CVE-2026-58535

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Remote Desktop Client Information Disclosure Vulnerability

CVE-2026-58533

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Bluetooth Service Elevation of Privilege Vulnerability

CVE-2026-58538

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

CVE-2026-58530

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code local

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows USB Audio Class Driver Information Disclosure Vulnerability

CVE-2026-58528

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose informat

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Runtime Elevation of Privilege Vulnerability

CVE-2026-58527

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Microsoft SharePoint Elevation of Privilege Vulnerability

CVE-2026-58277

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

CVE-2026-57982

Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability

CVE-2026-57973

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perfor

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

CVE-2026-57968

Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

.NET Denial of Service Vulnerability

CVE-2026-57108

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny servi

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-07-14 发布INFO

Visual Studio Code Security Feature Bypass Vulnerability

CVE-2026-57102

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass

历史摘要 · 未重新核验 · Microsoft MSRC