按严重度 / 渠道 / 厂商 / 时间筛选公开漏洞条目。
CVE-2026-20212 · 2026-11-04 · auto
source_file: rules/2026-09-04/cisco-cve-2026-20212.md source: hotpatch high-risk rule draft status: SIGNAL product: Virtual-patch draft: Cisco Nexus 9000 Silicon One vuln_type: RCE cves: CVE-2026-20212 origin: hotpatch l…
CVE-2026-85103 · 2026-11-04 · auto
source_file: rules/2026-09-16/checkpoint-vpn-cve-2026-85102-85103-pins-verified.md source: hotpatch high-risk rule draft status: SIGNAL product: Pin confirm vuln_type: auth bypass cves: CVE-2026-85103 origin: hotpatch lo…
CVE-2025-53266 · 2026-11-04 · auto
source_file: rules/2026-09-22/linux-kernel-cve-2025-39682-39964-53266-still-overdue.md source: hotpatch high-risk rule draft status: OVERDUE dueDate: 2026-09-21 product: Linux Kernel trio [KEV · NEWLY OVERDUE → still OVE…
CVE-2026-88778 · 2026-11-04 · auto
source_file: rules/2026-09-28/citrix-netscaler-kev-new-88771-88772.md source: hotpatch high-risk rule draft status: NEW dueDate: 2026-09-30 product: (due 2026-09-30): Citrix NetScaler vuln_type: RCE cves: CVE-2026-88778 …
CVE-2026-20032 · 2026-11-04 · auto
source_file: rules/2026-10-08/cisco-nxos-oct-2026-critical-rce-bundle.md source: hotpatch high-risk rule draft status: SIGNAL vuln_type: RCE cves: CVE-2026-20032, CVE-2026-20038, CVE-2026-20173, CVE-2026-76453, CVE-2026-…
CVE-2026-76437 · 2026-11-04 · auto
source_file: rules/2026-10-08/cisco-license-onprem-meraki-finesse-oct-2026.md source: hotpatch high-risk rule draft status: SIGNAL vuln_type: SSRF cves: CVE-2026-76437, CVE-2026-76452, CVE-2026-76463, CVE-2026-76480 orig…
CVE-2026-76465 · 2026-11-04 · auto
source_file: 2026-10-08-digest.md source: CISA KEV (digest priority) status: SIGNAL product: NEW (not KEV) — Cisco NX-OS: 3 Critical unauthenticated root RCE advisories (Oct 7 bundle) vuln_type: RCE cves: CVE-2026-76465,…
CVE-2026-55330 · 2026-11-04 · auto
source_file: rules/2026-10-07/android-pixel-2026-10.md status: OVERDUE cves: CVE-2026-55330, CVE-2026-56952, CVE-2026-55307, CVE-2026-0198, CVE-2026-56906, CVE-2026-56936, CVE-2026-58704 product: Android Security Bulleti…
CVE-2026-20328 · 2026-11-04 · auto
source_file: 2026-10-08-digest.md status: SIGNAL cves: CVE-2026-20328, CVE-2026-76454, CVE-2026-20362 product: 2. NEW (not KEV) — Cisco License On-Prem (SSM On-Prem) pre-auth admin takeover · Meraki · Finesse origin: hot…
CVE-2026-76471 · 2026-11-04 · auto
source_file: rules/2026-10-09/cisco-nxos-napi-rce-advisory-v1-1-ucs-table.md status: SIGNAL cves: CVE-2026-76471 product: Cisco NX-API RCE advisory v1.1 (UCS fixed table) origin: hotpatch local digest/rules backfill # H…
CVE-2026-20293 · 2026-11-04 · auto
source_file: rules/2026-10-14/cisco-ucs-uefi-sb-bypass-2026-20293.md status: SIGNAL cves: CVE-2026-20293 product: Cisco UCS UEFI Shell Secure Boot Bypass origin: hotpatch local digest/rules backfill # **NEW** Cisco UCS …
CVE-2024-58074 · 2026-11-04 · auto
source_file: rules/2026-11-03/debian-dsa-6602-6604.md status: OVERDUE cves: CVE-2024-58074, CVE-2026-112818, CVE-2026-46300 product: Debian DSA-6602 (linux) · DSA-6603 (git-annex) · DSA-6604 (incus) origin: hotpatch loca…
CVE-2011-4346 · 2026-10-30 · auto
Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network (RHN) Satellite allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Cu…
CVE-2006-4339 · 2026-10-30 · auto
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequen…
CVE-2025-12801 · 2026-10-16 · auto
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particu…
CVE-2026-106030 · 2026-10-16 · auto
NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as…
CVE-2025-5987 · 2026-10-16 · auto
A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher…
CVE-2026-97812 · 2026-10-16 · auto
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97811 · 2026-10-16 · auto
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-97810 · 2026-10-16 · auto
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97809 · 2026-10-16 · auto
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97808 · 2026-10-16 · auto
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97807 · 2026-10-16 · auto
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97806 · 2026-10-16 · auto
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97805 · 2026-10-16 · auto
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-97803 · 2026-10-16 · auto
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-97800 · 2026-10-16 · auto
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
CVE-2026-97799 · 2026-10-16 · auto
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97798 · 2026-10-16 · auto
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-97794 · 2026-10-16 · auto
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97793 · 2026-10-16 · auto
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
CVE-2026-97792 · 2026-10-16 · auto
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97790 · 2026-10-16 · auto
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
CVE-2026-97787 · 2026-10-16 · auto
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-96952 · 2026-10-16 · auto
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-96948 · 2026-10-16 · auto
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
CVE-2026-96945 · 2026-10-16 · auto
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
CVE-2026-96944 · 2026-10-16 · auto
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
CVE-2026-96938 · 2026-10-16 · auto
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96937 · 2026-10-16 · auto
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-96935 · 2026-10-16 · auto
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96933 · 2026-10-16 · auto
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96932 · 2026-10-16 · auto
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96931 · 2026-10-16 · auto
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96930 · 2026-10-16 · auto
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-96113 · 2026-10-16 · auto
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88130 · 2026-10-16 · auto
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88129 · 2026-10-16 · auto
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88125 · 2026-10-16 · auto
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88123 · 2026-10-16 · auto
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.