首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45543 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-85128 | HIGH | 7.5 | 2026-09-17 | The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the r | Unknown Choose User Role at Registration | 受影响版本 < 1.3.3，请升级到修复版本。 |
| CVE-2025-15697 | HIGH | 7.1 | 2026-09-17 | The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting i | Unknown Dictionary | 受影响版本 ≤ 1.0，请升级到修复版本。 |
| CVE-2026-87935 | HIGH | 8.1 | 2026-09-17 | The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all vers | ichurakov Paid Downloads | 受影响版本 ≤ 3.15，请升级到修复版本。 |
| CVE-2026-87796 | CRITICAL | 9.8 | 2026-09-17 | The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File | sh1zen Multi Uploader for Gravity Forms | 受影响版本 ≤ 1.1.9，请升级到修复版本。 |
| CVE-2026-50604 | 待定 | 待定 | 2026-09-17 | A vulnerability has been identified in the Acer Agent Service component included with Nitr | Acer Agent Service | 受影响版本 ≤ 1.2.110.2，请升级到修复版本。 |
| CVE-2026-25294 | HIGH | 7.4 | 2026-09-17 | Transient DOS while parsing frame during channel usage. | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-25290 | HIGH | 7.8 | 2026-09-17 | Memory Corruption when validating large data buffers from external sources using addition | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-25284 | HIGH | 7.3 | 2026-09-17 | Information Disclosure when a pointer is reused after being deallocated. | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-25283 | HIGH | 8.8 | 2026-09-17 | Memory Corruption when copying unverified data from an external source exceeds the allocat | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-25282 | HIGH | 7.9 | 2026-09-17 | Transient DOS when processing unverified data from a neighboring system causes out of boun | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-25281 | HIGH | 7.4 | 2026-09-17 | Transient DOS when processing large or numerous request buffers without sufficient memory | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-25280 | HIGH | 7.8 | 2026-09-17 | Memory corruption when processing escape handling flow with insufficient user buffer sizes | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-25278 | HIGH | 7.8 | 2026-09-17 | Memory Corruption when processing I2C transfer requests due to a race condition between me | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-25275 | HIGH | 7.5 | 2026-09-17 | Transient DOS when processing authentication frames with invalid FILS information element | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-25261 | MEDIUM | 6.7 | 2026-09-17 | Memory corruption while processing rear sensor IOCTL calls. | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-24081 | HIGH | 7.4 | 2026-09-17 | Transient DOS when processing a channel map with insufficient used channels and adaptive f | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-24075 | HIGH | 7.8 | 2026-09-17 | Memory Corruption when multiple threads issue concurrent IOCTL requests to the device cont | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-24074 | HIGH | 7.8 | 2026-09-17 | Memory Corruption when processing data with large offset and length values exceeds buffer | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2026-24073 | HIGH | 7.8 | 2026-09-17 | Memory corruption when processing decode statistics due to insufficient validation of offs | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
| CVE-2025-59607 | HIGH | 7.8 | 2026-09-17 | Memory Corruption when copying large input data exceeds normal allocation limits. | Qualcomm, Inc. Snapdragon | 请参考厂商官方公告并升级修复。官方说明：https://docs.qualcomm.com/product/public |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。