2026-05-15 归档

今日共收录 1277 条安全情报,包含 487 个 CVE,424 篇安全通告,以及 55 篇研究论文。

← 返回归档列表
安全公告2026-05-15 发布INFO

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary...

CVE-2024-21962

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potent

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to...

CVE-2023-31309

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

An improper input validation vulnerability within the AMD Platform Management Framework (PMF)...

CVE-2025-52540

An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a...

CVE-2026-8612

WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load...

CVE-2022-23826

A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly cre

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when...

CVE-2026-6811

Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSO

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-15 发布INFO

Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1...

CVE-2026-45248

Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users e

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...

CVE-2026-8581

Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code insid

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Inappropriate implementation in Chromoting in Google Chrome prior to 148.0.7778.168 allowed a...

CVE-2026-8586

Inappropriate implementation in Chromoting in Google Chrome prior to 148.0.7778.168 allowed a local attacker to bypass d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker...

CVE-2026-8587

Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...

CVE-2026-8582

Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Crabbox prior to v0.12.0 contains a privilege escalation vulnerability that allows users with...

CVE-2026-8629

Crabbox prior to v0.12.0 contains a privilege escalation vulnerability that allows users with shared visibility-only acc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote...

CVE-2026-8578

Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote attacker who had compromise

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote...

CVE-2026-8557

Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Use after free in GTK in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...

CVE-2026-8555

Use after free in GTK in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...

CVE-2026-8574

Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Inappropriate implementation in CORS in Google Chrome on Linux and ChromeOS prior to 148.0.7778...

CVE-2026-8576

Inappropriate implementation in CORS in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote...

CVE-2026-8561

Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to perform UI spo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had...

CVE-2026-8575

Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Out of bounds write in Codecs in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote...

CVE-2026-8569

Out of bounds write in Codecs in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially p

历史摘要 · 未重新核验 · GitHub Advisory