Chromium: CVE-2026-118330 Use after free in Browser
CVE-2026-118330
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
2026-11-01 · 安全日报
每日网络空间安全雷达
今日共收录 398 条安全情报，包含 188 个 CVE，99 篇安全通告，以及 64 篇研究论文。
收录 398 条 · 0 条模型摘要 · 398 条来源摘录
采集状态：部分来源不可用 · 最近采集 2026-11-01T07:27:29.855373+00:00
每日精选
Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
CVE-2026-118759
## Summary The Kubeflow Pipelines API server's `GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log` handler retrieves
Authlib RFC 7592 examples omit registration-access-token client binding
CVE-2026-116672
## Description ### Summary RFC 7592 (OAuth 2.0 Dynamic Client Registration Management Protocol) lets a previously regi
Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13
CVE-2026-119190
### Summary node-forge parses certificate extensions with the deprecated OIDs `2.5.29.10` and `2.5.29.13` as `basicConst
The Privacy and Security Risks of Edge LLM Optimization
Edge deployment of Large Language Models requires optimization techniques that reduce memory, computation, and energy co
Surprise Alone Learns Lies: Evidence-Gated Continual Learning for LLMs from Streaming Claims
Continual learning methods for large language models increasingly decide what to learn by surprise, keeping the inputs t
InferD: A Honeypot Framework for AI Inference Infrastructure
Large language model serving stacks, commercial inference APIs, vector databases, and agent orchestration gateways are n
PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over
Northflank security breach leads to abuse of customers' AI API keys
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its p
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
CVE-2026-111357
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Con