{"slug": "z-ai-security-disclosure", "title": "Z.ai Security Disclosure", "summary": "Z.ai, an AI company, disclosed a ledger of 2,436 vulnerabilities, of which 53 are public and 2,383 are undisclosed, with 1,097 rated critical or high, spanning 269 open-source projects and 45 years, with the earliest flaw dating to 1981 and an average latency of 26.6 years before discovery. The disclosure includes recent high-severity vulnerabilities in Linux kernel, Apple Safari, FreeBSD, and GStreamer, highlighting the long-standing security risks in widely used software.", "body_md": "# 披露账本\n\n2,436\n\n已收录漏洞\n\n53\n\n已公开\n\n2,383\n\n未公开\n\n1,097\n\n严重及高危\n\n269\n\n覆盖开源项目\n\n45\n\n影响时间跨度（年）\n\n这些漏洞的影响时间跨度达 45 年——最早的缺陷可追溯至 1981 年，平均每个漏洞在被发现前已潜伏 26.6 年。\n\n## 严重程度分布\n\nCritical107High990Medium1,286Low53\n\n## 漏洞引入年份\n\n19812026\n\n## 最近收录\n\n[查看全部 2,436 项 →](/ledger/)\n\n高危\n\n### Linux 内核 6lowpan 修复错误路径上 NHC 条目的 use-after-free · Linux\n\nCNNVD-2026-18058465潜伏 11 年已公开披露\n\nCNNVD-2026-18058465CVE-2026-64452\n\n高危\n\n### WebKit 内存处理缺陷：精心构造的 Web 内容导致意外的进程崩溃 · Apple Safari\n\nCNNVD-2026-38995661已公开披露\n\nCNNVD-2026-38995661CVE-2026-43663\n\n高危\n\n### [FreeBSD] ptrace PT_SC_REMOTE 参数验证缺失：32GiB memmove 下溢 + sysent 越界调用 · FreeBSD\n\nCNNVD-202605-4608已公开披露\n\nCNNVD-202605-4608CVE-2026-45253\n\n高危\n\n### GStreamer librfb rfb_decoder_fill_rectangle() 写入粒度错误导致堆越界写 · GStreamer\n\nCNNVD-2026-15357103已公开披露\n\nCNNVD-2026-15357103CVE-2026-59691\n\n中危\n\n### SMTP MIME message/rfc822 封装解析状态未重置导致附件文件名与解码内容检测绕过 · Suricata\n\nCVE-2026-57229已公开披露\n\nCVE-2026-57229\n\n中危\n\n### Joomla com_installer 更新列表存储型 XSS（description/detailsurl 未转义） · Joomla\n\nCNNVD-2026-49148613已公开披露\n\nCNNVD-2026-49148613CVE-2026-48952", "url": "https://wpnews.pro/news/z-ai-security-disclosure", "canonical_source": "https://cvd.z.ai", "published_at": "2026-08-14 19:22:00+00:00", "updated_at": "2026-08-14 19:42:50.235188+00:00", "lang": "en", "topics": ["ai-ethics", "ai-policy"], "entities": ["Z.ai", "Linux", "Apple Safari", "FreeBSD", "GStreamer", "Suricata", "Joomla"], "alternates": {"html": "https://wpnews.pro/news/z-ai-security-disclosure", "markdown": "https://wpnews.pro/news/z-ai-security-disclosure.md", "text": "https://wpnews.pro/news/z-ai-security-disclosure.txt", "jsonld": "https://wpnews.pro/news/z-ai-security-disclosure.jsonld"}}