安全日报 - 2026-05-12 - Cyber Security Daily Radar

安全公告2026-05-11 发布INFO

Chromium: CVE-2026-7915 Insufficient data validation in DevTools

CVE-2026-7915

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-11 发布INFO

Chromium: CVE-2026-7993 Insufficient validation of untrusted input in Payments

CVE-2026-7993

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-11 发布INFO

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

CVE-2026-41107

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose inf

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-11 发布INFO

Chromium: CVE-2026-7905 Insufficient validation of untrusted input in Media

CVE-2026-7905

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-11 发布INFO

Chromium: CVE-2026-8020 Uninitialized Use in GPU

CVE-2026-8020

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-05-12 发布INFO

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

#knownsec #seebug #vulnerability

安全公告2026-05-12 发布INFO

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

#android #mobile

安全公告2026-05-11 发布INFO

多款Huawei路由器信息泄露漏洞

历史摘要 · 未重新核验 · 知道创宇 / Seebug

#knownsec #seebug #vulnerability

漏洞预警2026-05-12 发布INFO

On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticat...

CVE-2026-45321

On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were publ

历史摘要 · 未重新核验 · NVD

#cve #cwe-506

学术论文2026-05-12 发布INFO

Poster: DoHunter: A feature fusion-based LLM for DoH tunnel detection.

DNS over HTTPS (DoH) 在提升DNS查询隐私性的同时，也为恶意活动提供了隐蔽通信通道。本文提出一种名为DoHunter的恶意加密流量识别方法，该方法利用大型语言模型（LLM）的先进上下文理解能力，并融合专家特征来检测异常。

历史摘要 · 未重新核验 · Apple Security Releases

#apple #ios #macos

2026-05-12 归档