按严重度 / 渠道 / 厂商 / 时间筛选公开漏洞条目。
CVE-2025-12801 · 2026-10-16 · auto
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particu…
CVE-2026-106030 · 2026-10-16 · auto
NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as…
CVE-2025-5987 · 2026-10-16 · auto
A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher…
CVE-2026-97812 · 2026-10-16 · auto
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97811 · 2026-10-16 · auto
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-97810 · 2026-10-16 · auto
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97809 · 2026-10-16 · auto
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97808 · 2026-10-16 · auto
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97807 · 2026-10-16 · auto
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97806 · 2026-10-16 · auto
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97805 · 2026-10-16 · auto
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-97803 · 2026-10-16 · auto
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-97800 · 2026-10-16 · auto
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
CVE-2026-97799 · 2026-10-16 · auto
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97798 · 2026-10-16 · auto
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-97794 · 2026-10-16 · auto
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97793 · 2026-10-16 · auto
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
CVE-2026-97792 · 2026-10-16 · auto
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97790 · 2026-10-16 · auto
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
CVE-2026-97787 · 2026-10-16 · auto
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-96952 · 2026-10-16 · auto
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-96948 · 2026-10-16 · auto
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
CVE-2026-96945 · 2026-10-16 · auto
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
CVE-2026-96944 · 2026-10-16 · auto
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
CVE-2026-96938 · 2026-10-16 · auto
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96937 · 2026-10-16 · auto
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-96935 · 2026-10-16 · auto
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96933 · 2026-10-16 · auto
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96932 · 2026-10-16 · auto
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96931 · 2026-10-16 · auto
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96930 · 2026-10-16 · auto
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-96113 · 2026-10-16 · auto
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88130 · 2026-10-16 · auto
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88129 · 2026-10-16 · auto
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88125 · 2026-10-16 · auto
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88123 · 2026-10-16 · auto
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88122 · 2026-10-16 · auto
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88116 · 2026-10-16 · auto
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88114 · 2026-10-16 · auto
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88112 · 2026-10-16 · auto
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-85903 · 2026-10-16 · auto
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83889 · 2026-10-16 · auto
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-83869 · 2026-10-16 · auto
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83642 · 2026-10-16 · auto
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83635 · 2026-10-16 · auto
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
CVE-2026-70244 · 2026-10-16 · auto
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-70167 · 2026-10-16 · auto
Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-89051 · 2026-10-16 · auto
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replaceHeadersAndTags' function in versions up to, and including, 7.0.12 due to insufficien…
CVE-2026-92982 · 2026-10-16 · auto
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are proce…
CVE-2026-102175 · 2026-10-16 · auto
A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/…