Grafana Loki 安全漏洞

Grafana Loki is an open-source log aggregation system developed by Grafana. There is a security vulnerability in Grafana Loki, which stems from insufficient validation of path traversal sequences. This vulnerability could allow attackers to read Ruler API endpoint files through double-encryption...

Server-Side Request Forgery (SSRF) in Craft CMS with Asset Uploads Mutations

Required Permissions The exploitation requires a few permissions to be enabled in the used GraphQL schema: "Edit assets in the volume" "Create assets in the volume" Details The implementation fails to restrict the URL Scheme. While the application is intended to "upload assets", there is no...

EUVD-2026-22641

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network...

EUVD-2026-22605

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

EUVD-2026-22501

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...

EUVD-2026-22491

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...

EUVD-2026-22420

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-22390

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-22394

Double free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-33824

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-32219

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2026-32074

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-32069

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-26179

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-26166

Double free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-26163

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-33824

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-32219

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

Windows Projected File System Elevation of Privilege Vulnerability

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...