#windows

共收录 2186 条相关情报。

安全公告2026-07-14 发布INFO

Windows Runtime Elevation of Privilege Vulnerability

CVE-2026-58527

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-14 发布INFO

Microsoft SharePoint Elevation of Privilege Vulnerability

CVE-2026-58277

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-14 发布INFO

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

CVE-2026-57982

Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-14 发布INFO

Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability

CVE-2026-57973

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perfor

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-14 发布INFO

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

CVE-2026-57968

Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-14 发布INFO

.NET Denial of Service Vulnerability

CVE-2026-57108

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny servi

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-14 发布INFO

Visual Studio Code Security Feature Bypass Vulnerability

CVE-2026-57102

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-14 发布INFO

Visual Studio Code Security Feature Bypass Vulnerability

CVE-2026-57101

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an una

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-14 发布INFO

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

CVE-2026-57096

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-14 发布INFO

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2026-57093

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-14 发布INFO

Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability

CVE-2026-57088

Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-14 发布INFO

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

CVE-2026-57087

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-14 发布INFO

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

CVE-2026-57092

Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-11 发布INFO