iOS 15.8.5 and iPadOS 15.8.5
iOS 15.8.5 and iPadOS 15.8.5
2026-05-06 归档
今日共收录 1285 条安全情报，包含 277 个 CVE，391 篇安全通告，以及 322 篇研究论文。
← 返回归档列表iOS 18.6.2 and iPadOS 18.6.2
iOS 18.6.2 and iPadOS 18.6.2
Android Code Search
Android Code Search
Android Devices
Android Devices
Secure an Android device
Secure an Android device
Android 16 QPR2
Android 16 QPR2
Mobile network security
Mobile network security
MFSA 2026-18Security Vulnerabilities fixed in Focus for iOS 148.2
MFSA 2026-18Security Vulnerabilities fixed in Focus for iOS 148.2
MFSA 2026-12Security Vulnerabilities fixed in Firefox for iOS 147.4
MFSA 2026-12Security Vulnerabilities fixed in Firefox for iOS 147.4
MFSA 2026-09Security Vulnerabilities fixed in Firefox for iOS 147.2.1
MFSA 2026-09Security Vulnerabilities fixed in Firefox for iOS 147.2.1
Beta Channel Update for ChromeOS / ChromeOS Flex
The Beta channel is being updated to OS version 16640.29.0 (Browser version 148.0.7778.158) for most ChromeOS devices.If
Chrome for Android Update
Hi, everyone! We've just released Chrome 148 (148.0.7778.120) for Android. It'll become available on Google Play over t
Chrome Beta for Android Update
Hi everyone! We've just released Chrome Beta 148 (148.0.7778.120) for Android. It's now available on Google Play.You can
vLLM Vulnerable to Remote DoS via Special-Token Placeholders
CVE-2026-44222
## Summary This report explains a Token Injection vulnerability in vLLM’s multimodal processing. Unauthenticated, text-o
AVideo has SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL()
CVE-2026-43884
### Summary Two endpoints in AVideo call `isSSRFSafeURL()` to validate user-supplied URLs, then fetch them using bare `
AVideo: Unauthenticated CRLF/ICS Injection in Scheduler downloadICS.php Allows Calendar Event Spoofing
CVE-2026-43882
## Summary The unauthenticated `plugin/Scheduler/downloadICS.php` endpoint passes attacker-controlled `title`, `descrip
authd: Primary group ID is incorrectly set to value of UID
CVE-2026-6970
authd 0.6.0 contains [a bug](https://github.com/canonical/authd/issues/1482) which can lead to an incorrect primary grou
AVideo: Unauthenticated Arbitrary Email Sending via sendEmail.json.php Enables Phishing from the Site’s Legitimate From Address
CVE-2026-43880
## Summary `objects/sendEmail.json.php` exposes two branches depending on whether `contactForm=1` is submitted. When th
A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this...
CVE-2026-7854
A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function
Grav Vulnerable to Publisher-Level Stored XSS via Unquoted Event Attributes
CVE-2026-42612
### Summary A stored Cross-Site Scripting (XSS) vulnerability in `getgrav/grav` allows publisher-level accounts to execu