CVE-2026-54984

CVE-2026-54984 Windows ICC 文件解析越界写入 — 远程代码执行 通过 Zero Day Initiative 报告，编号为 ZDI-CAN-30441 ，以 ZDI-26-543 发布，微软已在 2026 年 8 月更新周期中修复。 大家好，我是 Kağan Çapar。我将此漏洞报告给了 Zero Day Initiative，后者于 2026 年 6 月 2 日向微软披露。该漏洞已于 2026 年 8 月 11 日（8 月补丁星期二）修复并公布，我也在 ZDI 公告中获得了致谢。 本仓库的内容。 这是一份公开的披露记录：标识符、评分、受影响版本、补丁 KB...

PT-2026-70391

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Imaging Component during the parsing of ICC files. This out-of-bounds write allows an unauthorized attacker to execute code locall...

Apple macOS ColorSync ICC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS ColorSync. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...