SecLens 情报中心

厂商发布

厂商对产品安全、配置或策略的更新说明。

Linux Kernel Local Privilege Escalation Vulnerability "Copy Fail" in Some Huawei Products

发布时间 2026-06-12 08:00 (UTC+08:00) 抓取时间 2026-06-12 21:41 (UTC+08:00)

The Linux kernel used by some Huawei products has a local privilege escalation vulnerability. Successful exploitation of this vulnerability allows attackers to escalate the local privilege to root or perform container escape. (Vulnerability ID:HWPSIRT-2026-49540) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2026-31…
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2026-49540"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-LKLPEVCFiSHP-32146806",
  "sasn_version": "2.4",
  "severity": "High",
  "vulnerabilities": [
    {
      "cveId": "CVE-2026-31431",
      "hwPsirtId": "HWPSIRT-2026-49540"
    }
  ]
}
```
华为安全公告 High cve official_bulletin
Linux Kernel ESP in Some Huawei Products Vulnerable to Local Privilege Escalation "Dirty Frag"

发布时间 2026-06-10 08:00 (UTC+08:00) 抓取时间 2026-06-10 21:44 (UTC+08:00)

The IPsec ESP in Linux kernel used by some Huawei products has a local privilege escalation vulnerability "Dirty Frag". Successful exploitation of this vulnerability may allow attackers to escalate privileges through page-cache corruption. (Vulnerability ID:HWPSIRT-2026-27380) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) …
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2026-27380"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-LKEiSHPVtLPEDF-60937345",
  "sasn_version": "2.1",
  "severity": "High",
  "vulnerabilities": [
    {
      "cveId": "CVE-2026-43284",
      "hwPsirtId": "HWPSIRT-2026-27380"
    }
  ]
}
```
华为安全公告 High cve official_bulletin
PLY Remote Code Execution Vulnerability in Some Huawei Products

发布时间 2026-06-10 08:00 (UTC+08:00) 抓取时间 2026-06-10 21:44 (UTC+08:00)

The PLY (Python Lex-Yacc) library used by some Huawei products has a remote code execution vulnerability. Remote attackers may use the pickle file to trigger code execution. (Vulnerability ID:HWPSIRT-2026-41072) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2025-56005
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2026-41072"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-PRCEViSHP-00915157",
  "sasn_version": "1.8",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2025-56005",
      "hwPsirtId": "HWPSIRT-2026-41072"
    }
  ]
}
```
华为安全公告 Critical cve official_bulletin
CPython Denial of Service Vulnerability in Some Huawei Products

发布时间 2026-06-10 08:00 (UTC+08:00) 抓取时间 2026-06-10 21:44 (UTC+08:00)

The open-source software CPython used by some Huawei products has a denial of service (DoS) vulnerability. Successful exploitation of this vulnerability may lead to OOM and DoS. (Vulnerability ID:HWPSIRT-2025-91817) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2025-13836
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2025-91817"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-CDoSViSHP-68477227",
  "sasn_version": "1.7",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2025-13836",
      "hwPsirtId": "HWPSIRT-2025-91817"
    }
  ]
}
```
华为安全公告 Critical cve official_bulletin
Jaspersoft Deserialization Vulnerability in Some Huawei Products

发布时间 2026-06-10 08:00 (UTC+08:00) 抓取时间 2026-06-10 21:44 (UTC+08:00)

The open-source software Jaspersoft used by some Huawei products has a deserialization vulnerability. Successful exploitation of this vulnerability may lead to remote arbitrary code execution. (Vulnerability ID:HWPSIRT-2025-14096) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2025-10492
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2025-14096"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-JDViSHP-74078912",
  "sasn_version": "1.3",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2025-10492",
      "hwPsirtId": "HWPSIRT-2025-14096"
    }
  ]
}
```
华为安全公告 Critical cve official_bulletin
ANSI Escape Sequence Injection Vulnerabilitiy in Some Huawei Products

发布时间 2026-06-10 08:00 (UTC+08:00) 抓取时间 2026-06-10 21:44 (UTC+08:00)

Some Huawei products that use Apache Tomcat have an ANSI escape sequence injection vulnerability in the Windows console environment. Attackers can exploit this vulnerability to manipulate the console display and induce administrators to execute malicious commands. (Vulnerability ID:HWPSIRT-2025-45144) This vulnerability has been assigned a Common Vulnerabili…
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2025-45144"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-AESIViSHP-40005749",
  "sasn_version": "2.6",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2025-55754",
      "hwPsirtId": "HWPSIRT-2025-45144"
    }
  ]
}
```
华为安全公告 Critical cve official_bulletin
cJSON Out-of-bounds Access Vulnerability in Some Huawei Products

发布时间 2026-06-10 08:00 (UTC+08:00) 抓取时间 2026-06-10 21:44 (UTC+08:00)

The open-source software cJSON used by some Huawei products has an out-of-bounds access vulnerability. Successful exploitation of this vulnerability may lead to data tampering, information leakage, or DoS. (Vulnerability ID:HWPSIRT-2025-11571) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2025-57052
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2025-11571"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-cOobAViSHP-83078587",
  "sasn_version": "2.8",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2025-57052",
      "hwPsirtId": "HWPSIRT-2025-11571"
    }
  ]
}
```
华为安全公告 Critical cve official_bulletin
NetFilter Use of Uninitialized Resource in Some Huawei Products

发布时间 2026-06-04 08:00 (UTC+08:00) 抓取时间 2026-06-04 15:40 (UTC+08:00)

The open-source component NetFilter used by some Huawei products is vulnerable to the use of uninitialized resource. Successful exploitation of this vulnerability may lead to abnormal functions. (Vulnerability ID:HWPSIRT-2024-59193) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2024-47685
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2024-59193"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-NUoURiSHP-98740795",
  "sasn_version": "4.9",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2024-47685",
      "hwPsirtId": "HWPSIRT-2024-59193"
    }
  ]
}
```
华为安全公告 Critical cve official_bulletin

全部来源 Cloudflare 博客腾讯云安全公告 Adobe 安全公告阿里云 AVD Ubuntu 安全通告启明星辰安全通告 Amazon Linux AL2 公告 Amazon Linux AL2023 公告 AWS 安全公告 MSRC 更新指南 Oracle 安全警报 Apple 安全更新 Chrome 稳定版更新 Red Hat 安全公告 Atlassian 安全公告 NVIDIA 安全公告华为安全公告联想安全公告阿里云 Linux 安全公告阿里云 Linux CVE 通知阿里云安全公告 Amazon Linux 1 (EOL)安全公告 Amazon Linux 安全公告长亭漏洞库 Seebug 漏洞库 CISA KEV Catalog 微步银狐情报微步银狐 IOC Ransomware.live 近期受害者工信部 CNVDB CNNVD 通报 CNNVD 漏洞库 CNVD 漏洞库 FreeBuf 社区 TC260 标准征求意见 Seebug 技术 Paper GitHub Advisory HackerOne 博客 Exploit-DB 安天每日安全简讯 LinuxSecurity Hybrid VulDB 地方采购（CCGP）中央采购（CCGP） The Hacker News 嘶吼安全资讯 Doonsec 微信聚合 arXiv cs.CR VIPRead 信息安全知识库 RSA Conference Podcast 会议与培训融资快讯并购整合情报快报事件通报工具更新产品发布

厂商发布

订阅来源 RSS