Chromium: CVE-2026-7363 Use after free in Canvas
CVE-2026-7363
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
2026-05-01 归档
今日共收录 1019 条安全情报，包含 232 个 CVE，445 篇安全通告，以及 40 篇研究论文。
← 返回归档列表Fight Fire with Fire: Combating Adversarial Patch Attacks using Pattern-randomized Defensive Patches.
本文提出一种对抗性补丁攻击的防御方法，核心思想是“以火攻火”，即通过向模型输入注入特制的防御性补丁来主动探测或抵消潜在的攻击补丁。作者设计了两种防御补丁：canary（金丝雀）和woodpecker（啄木鸟）。Canary补丁用于探测输入中
PLANET VDR-300NU ADSL Router - 未授权修改DNS
PLANET VDR-300NU ADSL Router - 未授权修改DNS
Acknowledgements
Acknowledgements
Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radius_address POST par...
CVE-2025-71284
Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoi
Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by expl...
CVE-2018-25317
Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows
FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic...
CVE-2026-28532
FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing
Clerk has an authorization bypass when combining organization, billing, or reverification checks
CVE-2026-42349
### Summary `has()`, `auth.protect()`, and related authorization predicates in `@clerk/shared`, `@clerk/nextjs`, `@cler
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-41940
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e
ABB System 800xA, Symphony Plus IEC 61850
CVE-2025-3756
View CSAF Summary This vulnerability was privately reported relating to ABB’s implementation of the IEC 61850 communicat
Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a malicious developer with access to Cloudf...
CVE-2026-22726
该漏洞影响 Cloud Foundry 中的 Route Services 组件。恶意开发者可以利用 Route Services 将应用流量发送到应用已配置出口规则之外的网络目的地。具体来说，拥有 Cloud Foundry 访问权限的恶
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 16.7.15 and iPadOS 16.7.15