惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
V
Vulnerabilities – Threatpost
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
V
Visual Studio Blog
月光博客
月光博客
IT之家
IT之家
钛媒体：引领未来商业与生活新知
钛媒体：引领未来商业与生活新知
T
Tailwind CSS Blog
罗
罗磊的独立博客
S
SegmentFault 最新的问题
博
博客园 - 三生石上(FineUI控件)
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
量
量子位
V
V2EX
Jina AI
Jina AI
The GitHub Blog
The GitHub Blog
小众软件
小众软件
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
阮一峰的网络日志
阮一峰的网络日志
Recent Announcements
Recent Announcements
MongoDB | Blog
MongoDB | Blog
Y
Y Combinator Blog
H
Help Net Security
博
博客园_首页
Cyberwarzone
Cyberwarzone
T
Tenable Blog
A
Arctic Wolf
C
CERT Recently Published Vulnerability Notes
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
T
Threat Research - Cisco Blogs
aimingoo的专栏
aimingoo的专栏
Google DeepMind News
Google DeepMind News
博
博客园 - 叶小钗
C
Cyber Attacks, Cyber Crime and Cyber Security
美
美团技术团队
Attack and Defense Labs
Attack and Defense Labs
GbyAI
GbyAI
博
博客园 - 【当耐特】
Cloudbric
Cloudbric
NISL@THU
NISL@THU
B
Blog RSS Feed
K
Kaspersky official blog
Hugging Face - Blog
Hugging Face - Blog
P
Privacy International News Feed
博
博客园 - Franky
博
博客园 - 司徒正美
Microsoft Azure Blog
Microsoft Azure Blog
Apple Machine Learning Research
Apple Machine Learning Research
Webroot Blog
Webroot Blog
Microsoft Security Blog
Microsoft Security Blog

Cyber Security Advisories - MS-ISAC

A Vulnerability in Oracle PeopleSoft PeopleTools Could Allow for Remote Code Execution Critical Patches Issued for Microsoft Products, June 9, 2026 Multiple Vulnerabilities in Check Point Products Could Allow for Authentication Bypass Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution A Vulnerability in Cisco Products Could Allow for Server-Side Request Forgery Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in NGINX Could Allow for Remote Code Execution A Vulnerability in Microsoft Exchange Server Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Fortinet Products Could Allow for Remote Code Execution Critical Patches Issued for Microsoft Products, May 12, 2026 Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution A Vulnerability in PAN-OS Could Allow for Remote Code Execution A Vulnerability in Apache HTTP Server Could Allow for Remote Code Execution A Vulnerability in WHM cPanel and WP Squared Could Allow for Remote Code Execution Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution Oracle Quarterly Critical Patches Issued April 21, 2026 A Vulnerability in OpenSSH Could Allow for Authentication Bypass Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Critical Patches Issued for Microsoft Products, April 14, 2026 Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution A Vulnerability in Fortinet FortiClientEMS Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Progress ShareFile Could Allow for Remote Code Execution Multiple Vulnerabilities in Cisco Products Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Apple Products Could Allow for Privilege Escalation A Vulnerability in F5 Products Could Allow for Remote Code Execution Multiple Vulnerabilities in NetScaler ADC and NetScaler Gateway Could Allow for Memory Overread A Vulnerability in Oracle Products Could Allow for Remote Code Execution Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Mozilla Firefox Could Allow for Arbitrary Code Execution Critical Patches Issued for Microsoft Products, March 10, 2026 Multiple Vulnerabilities in Cisco Products Could Allow for Remote Code Execution A Vulnerability in pac4j-jwt (JwtAuthenticator) Could Allow for Authentication Bypass Multiple Vulnerabilities in Cisco Catalyst SD-WAN Products Could Allow for Authentication Bypass A Vulnerability in Dell RecoverPoint for Virtual Machines Could Allow for Arbitrary Code Execution A Vulnerability in Google Chrome Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Ivanti Endpoint Manager Could Allow for Authentication Bypass Critical Patches Issued for Microsoft Products, February 10, 2026 Multiple Vulnerabilities in Ivanti Endpoint Manager Mobile Could Allow for Remote Code Execution Multiple Vulnerabilities in SolarWinds Web Help Desk Could Allow for Arbitrary Code Execution A Vulnerability in Microsoft Office Could Allow for Security Feature Bypass A Vulnerability in Cisco Unified Communications Products Could Allow for Remote Code Execution Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution Critical Patches Issued for Microsoft Products, January 13, 2026 A Vulnerability in WatchGuard Fireware OS Could Allow for Arbitrary Code Execution. A Vulnerability in Cisco AsyncOS Could Allow for Remote Code Execution Critical Patches Issued for Microsoft Products, December 9, 2025 A Vulnerability in React Server Component (RSC) Could Allow for Remote Code Execution A Vulnerability in SonicOS Could Allow for Denial of Service (DoS) A Vulnerability in FortiWeb Could Allow for Remote Code Execution Critical Patches Issued for Microsoft Products, November 11, 2025
Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution
2026-03-04 · via Cyber Security Advisories - MS-ISAC

Multiple vulnerabilities have been discovered in Google Android OS, the most severe of which could allow for remote code execution in the context of the affected component. Following the MITRE ATT&CK framework, exploitation of these vulnerabilities can be classified as follows:

Tactic: Execution (TA0002)

Technique: Exploitation for Client Execution (T1203):

* Multiple vulnerabilities in Framework that could allow for elevation of privilege. (CVE-2026-0047, CVE-2025-32313, CVE-2025-48544, CVE-2025-48567, CVE-2025-48568, CVE-2025-48574, CVE-2025-48577, CVE-2025-48578, CVE-2025-48579, CVE-2025-48582, CVE-2025-48605, CVE-2025-48619, CVE-2025-48634, CVE-2025-48635, CVE-2025-48645, CVE-2025-48646, CVE-2025-48654, CVE-2026-0007, CVE-2026-0008, CVE-2026-0010, CVE-2026-0011, CVE-2026-0013, CVE-2026-0020, CVE-2026-0023, CVE-2026-0026, CVE-2026-0034)

* A vulnerability in System that could allow for remote code execution. (CVE-2026-0006)

* Multiple vulnerabilities in System that could allow for elevation of privilege. (CVE-2025-48602, CVE-2025-48641, CVE-2025-48650, CVE-2025-48653, CVE-2026-0017, CVE-2026-0021, CVE-2026-0035)

* Multiple vulnerabilities in Kernel that could allow for elevation of privilege. (CVE-2024-43859, CVE-2026-0037, CVE-2026-0038, CVE-2025-38616, CVE-2025-38618, CVE-2025-39682, CVE-2025-39946, CVE-2026-0029, CVE-2026-0027, CVE-2026-0028, CVE-2026-0030, CVE-2026-0031, CVE-2025-39946, CVE-2025-40266, CVE-2026-0032)

* A vulnerability in Arm components. (CVE-2025-2879)

* Multiple vulnerabilities in Qualcomm components. (CVE-2025-47388, CVE-2025-47394, CVE-2025-47396, CVE-2025-47397, CVE-2025-47398, CVE-2025-59600, CVE-2026-21385)

* Multiple vulnerabilities in Qualcomm closed-source components. (CVE-2025-47339, CVE-2025-47346, CVE-2025-47348, CVE-2025-47366, CVE-2025-47378, CVE-2025-47385, CVE-2025-47395, CVE-2025-47402)

Details of lower-severity vulnerabilities are as follows:

* Multiple vulnerabilities in Framework that could allow for information disclosure. (CVE-2025-48630, CVE-2026-0012, CVE-2026-0025)

* Multiple vulnerabilities in Framework that could allow for denial of service. (CVE-2025-48644, CVE-2026-0014, CVE-2026-0015)

* Multiple vulnerabilities in System that could allow for denial of service. (CVE-2025-48631, CVE-2025-48585, CVE-2025-48587, CVE-2025-48609)

* Multiple vulnerabilities in System that could allow for information disclosure. (CVE-2024-43766, CVE-2025-48642, CVE-2025-64783, CVE-2025-64784, CVE-2025-64893, CVE-2026-0005, CVE-2026-0024)

* Multiple vulnerabilities in Imagination Technologies components. (CVE-2025-10865, CVE-2025-13952, CVE-2025-58407, CVE-2025-58408, CVE-2025-58409, CVE-2025-58411, CVE-2026-21735)

* Multiple vulnerabilities in MediaTek components. (CVE-2025-20795, CVE-2026-20425, CVE-2026-20426, CVE-2026-20427, CVE-2026-20428, CVE-2026-20434, CVE-2025-20760, CVE-2025-20761, CVE-2025-20762, CVE-2025-20793, CVE-2025-20794, CVE-2026-20401, CVE-2026-20402, CVE-2026-20403, CVE-2026-20404, CVE-2026-20405, CVE-2026-20406, CVE-2026-20420, CVE-2026-20421, CVE-2026-20422)

* Multiple vulnerabilities in Unisoc components. (CVE-2025-61612, CVE-2025-61613, CVE-2025-61614, CVE-2025-61615, CVE-2025-61616, CVE-2025-69278, CVE-2025-69279)

Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution. Depending on the privileges associated with the exploited component, an attacker could then install programs; view, change, or delete data; or create new accounts with full rights.

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。