Android Code Search
Android Code Search
2026-05-07 归档
今日共收录 722 条安全情报，包含 0 个 CVE，380 篇安全通告，以及 58 篇研究论文。
← 返回归档列表Android Devices
Android Devices
Secure an Android device
Secure an Android device
Android 16 QPR2
Android 16 QPR2
Mobile network security
Mobile network security
MFSA 2026-18Security Vulnerabilities fixed in Focus for iOS 148.2
MFSA 2026-18Security Vulnerabilities fixed in Focus for iOS 148.2
MFSA 2026-12Security Vulnerabilities fixed in Firefox for iOS 147.4
MFSA 2026-12Security Vulnerabilities fixed in Firefox for iOS 147.4
MFSA 2026-09Security Vulnerabilities fixed in Firefox for iOS 147.2.1
MFSA 2026-09Security Vulnerabilities fixed in Firefox for iOS 147.2.1
Beta Channel Update for ChromeOS / ChromeOS Flex
The Beta channel is being updated to OS version 16640.29.0 (Browser version 148.0.7778.158) for most ChromeOS devices.If
Chrome for Android Update
Hi, everyone! We've just released Chrome 148 (148.0.7778.120) for Android. It'll become available on Google Play over t
Chrome Beta for iOS Update
Hi everyone! We've just released Chrome Beta 149 (149.0.7827.2) for iOS; it'll become available on App Store in the next
vm2 Host Promise Resolution Preserves Object Identity Across Sandbox Boundary
CVE-2026-44000
### Summary A sandbox boundary violation in **vm2** allows host object identity to cross into the sandbox through host
vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape
CVE-2026-43999
## Summary NodeVM's `builtin` allowlist can be bypassed when the `module` builtin is allowed (including via the `'*'` wi
vm2 Access to Host Object Enables Sandbox Escape
CVE-2026-43997
### Summary It is possible to obtain the host `Object`, https://github.com/patriksimek/vm2/commit/ebcfe94ad2f864f0bc35e
vm2 has a Sandbox Escape Vulnerability
CVE-2026-44006
### Summary It is possible to reach `BaseHandler.getPrototypeOf`, which can be used to get arbitrary prototypes ### De
etcd RBAC bypass allows unauthorized data access via PrevKv/lease attachment in nested transaction Put requests
CVE-2026-44283
### Impact _What kind of vulnerability is it? Who is impacted?_ A vulnerability in etcd allows read access via PrevKv,
docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler
CVE-2026-44520
### Impact The `URLInputHandler` class in `docling_graph/core/input/handlers.py` makes HTTP requests to user-supplied U
ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check
CVE-2026-44426
## Summary `GET /api/namespaces/:tenant` returns the full namespace object — including the members list (user IDs, e-mai
Free5GC UDM has Improper Input Validation and Generation of Error Messages Containing Sensitive Information
CVE-2026-42459
## Summary The free5GC UDM component fails to validate the `supi` path parameter in six GET handlers of the `nudm-sdm`
ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction
CVE-2026-42880
### Summary There is a missing authorization and data-masking gap in Argo CD's ServerSideDiff endpoint that allows an at