نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Microsoft Security Response Center

CVE-2026-100223 Windows NTFS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected…

آسیب‌پذیری و روز صفر سیستم‌عامل
خواندن متن کامل در Microsoft Security Response Center درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Qualys Blog

Microsoft Patch Tuesday, November 2026 Security Update Review

As the year approaches its final stretch, Microsoft’s November 2026 Patch Tuesday highlights the continued importance of proactive vulnerability management. This month’s security updates address vulnerabilities across the Microsoft ecosystem, reinforcing the need for organizations to promptly identify, prioritize, and remediate security risks. This month’s release includes fixes for several vulnerabilities that could…

آسیب‌پذیری و روز صفر
منبع
NCSC Netherlands

NCSC-2026-0353 [1.02] [M/H] Kwetsbaarheden verholpen in Microsoft Windows

Microsoft heeft meerdere kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorieën schade, zoals genoemd in onderstaande tabel. Microsoft heeft voor Windows meerdere kwetsbaarheden verholpen. De 32 ernstigste kwetsbaarheden bevinden zich in meerdere Windows componenten en hebben een CVSS score van 9.0 en hoger toegewezen gek…

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی شبکه و اینترنت
منبع
AWS Security Bulletins

CVE-2026-124848 - Incorrect default permissions on session transcripts and prompt history in Kiro CLI

Bulletin ID: 2026-178-AWS Publication Date: 11/10/2026 12:00 PM PST Description: Incorrect default file permissions in Kiro CLI before version 2.27.0 on macOS and Linux might allow other local users on the same host to read a user's session transcripts and prompt history, including any credentials or source code they contain. The CLI created its local session storage files with permissions that made them readable by…

آسیب‌پذیری و روز صفر رایانش ابری سیستم‌عامل
منبع
NCSC Netherlands

NCSC-2026-0477 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Exchange server

Microsoft heeft 9 kwetsbaarheden verholpen in Exchange Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen en willekeurige code uit te voeren met rechten van het proces. ``` Microsoft Exchange Server: |------------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |------------------|------|------------…

آسیب‌پذیری و روز صفر
منبع